7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2400, 0x8, 0x3}, 0x18) r1 = mq_open(&(0x7f00000001c0)='\x00', 0x800, 0x2, &(0x7f0000000200)={0x7ff, 0x1, 0x1000, 0xffffffffffff49f1}) dup2(r0, r1) [ 763.686282] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 763.749221] Process accounting resumed [ 763.761691] FAULT_INJECTION: forcing a failure. [ 763.761691] name failslab, interval 1, probability 0, space 0, times 0 [ 763.764507] CPU: 1 PID: 7086 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 763.766035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 763.767902] Call Trace: [ 763.768493] dump_stack+0x107/0x167 [ 763.769310] should_fail.cold+0x5/0xa [ 763.770165] ? create_object.isra.0+0x3a/0xa20 [ 763.771189] should_failslab+0x5/0x20 [ 763.772050] kmem_cache_alloc+0x5b/0x310 [ 763.772965] create_object.isra.0+0x3a/0xa20 [ 763.773949] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 763.775095] kmem_cache_alloc_bulk+0x168/0x320 [ 763.776140] io_submit_sqes+0x6fe6/0x8610 [ 763.777101] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 763.778219] __do_sys_io_uring_enter+0x6b2/0x1890 [ 763.779323] ? find_held_lock+0x2c/0x110 [ 763.780240] ? io_submit_sqes+0x8610/0x8610 [ 763.781210] ? __mutex_unlock_slowpath+0xe1/0x600 [ 763.782288] ? wait_for_completion_io+0x270/0x270 [ 763.783388] ? rcu_read_lock_any_held+0x75/0xa0 [ 763.784429] ? vfs_write+0x354/0xb10 [ 763.785263] ? fput_many+0x2f/0x1a0 [ 763.786081] ? ksys_write+0x1a9/0x260 [ 763.786931] ? __ia32_sys_read+0xb0/0xb0 [ 763.787853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 763.789030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 763.790191] do_syscall_64+0x33/0x40 [ 763.791026] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 763.792182] RIP: 0033:0x7f16dfbacb19 [ 763.793018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 763.797133] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 763.798845] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 763.800470] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 763.802067] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.803671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 763.805275] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 763.914319] Process accounting resumed 16:24:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) r1 = accept4$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e, 0x80000) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 16:24:10 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x18, 0x109, 0x0, 0x3, {0xa, 0x2}, [@typed={0x8, 0x600, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:24:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x5, 0x42, 0x1, 0x0, 0x4, 0x60c00, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x4}, 0xd2b4, 0x7fffffff, 0x1, 0x9, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x40, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0xe, r1, 0x3) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 16:24:10 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 16:24:10 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x3938700}, {r0, r1+60000000}}, &(0x7f0000000700)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f0000000340)) timer_gettime(0x0, &(0x7f00000000c0)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r2}, &(0x7f00000002c0)) r3 = syz_io_uring_setup(0x3a55, &(0x7f0000000300)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x18}, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:24:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') utime(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x75, 0xffffffffffff6b6c}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/198, 0xc6, 0x12) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r2 = accept4$unix(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x80000) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x4c07, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c1}, 0x8024) recvmsg$unix(r1, &(0x7f0000001740)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/212, 0xd4}], 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r3, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r3, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESOCT=r0], 0x78}, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r1, r2, &(0x7f0000000280)=0x9, 0x8) [ 777.469962] FAULT_INJECTION: forcing a failure. [ 777.469962] name failslab, interval 1, probability 0, space 0, times 0 [ 777.471489] CPU: 1 PID: 7108 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 777.472242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 777.473147] Call Trace: [ 777.473448] dump_stack+0x107/0x167 [ 777.473851] should_fail.cold+0x5/0xa [ 777.474282] ? create_object.isra.0+0x3a/0xa20 [ 777.474789] should_failslab+0x5/0x20 [ 777.475211] kmem_cache_alloc+0x5b/0x310 [ 777.475670] ? mark_held_locks+0x9e/0xe0 [ 777.476121] create_object.isra.0+0x3a/0xa20 [ 777.476602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 777.477173] kmem_cache_alloc_bulk+0x168/0x320 [ 777.477685] io_submit_sqes+0x6fe6/0x8610 [ 777.478171] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 777.478726] __do_sys_io_uring_enter+0x6b2/0x1890 [ 777.479261] ? find_held_lock+0x2c/0x110 [ 777.479723] ? io_submit_sqes+0x8610/0x8610 [ 777.480212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 777.480758] ? wait_for_completion_io+0x270/0x270 [ 777.481305] ? rcu_read_lock_any_held+0x75/0xa0 [ 777.481828] ? vfs_write+0x354/0xb10 [ 777.482258] ? fput_many+0x2f/0x1a0 [ 777.482664] ? ksys_write+0x1a9/0x260 [ 777.483089] ? __ia32_sys_read+0xb0/0xb0 [ 777.483551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 777.484130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 777.484701] do_syscall_64+0x33/0x40 [ 777.485115] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 777.485680] RIP: 0033:0x7f16dfbacb19 [ 777.486090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 777.488124] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 777.488969] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 777.489760] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 777.490541] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.491330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.492120] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 777.503769] loop6: detected capacity change from 0 to 2048 16:24:10 executing program 7: statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x82307201, &(0x7f0000000300)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0x10, &(0x7f0000000000), 0x2) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x105080, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$rtc(0x0, 0x31, 0x100) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r5) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0x4}, 0x6) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x3, 0x0) mmap(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x1000007, 0xbb487233eb48b219, r6, 0x3df90000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) [ 777.532354] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 777.557645] loop7: detected capacity change from 0 to 41948160 16:24:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7d", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x4, 0x5, 0x42, 0x1, 0x0, 0x4, 0x60c00, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x4}, 0xd2b4, 0x7fffffff, 0x1, 0x9, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x40, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0xe, r1, 0x3) 16:24:10 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 16:24:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:24:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 777.631752] FAULT_INJECTION: forcing a failure. [ 777.631752] name failslab, interval 1, probability 0, space 0, times 0 [ 777.633242] CPU: 1 PID: 7128 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 777.634171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 777.635313] Call Trace: [ 777.635694] dump_stack+0x107/0x167 [ 777.636206] should_fail.cold+0x5/0xa [ 777.636749] ? create_object.isra.0+0x3a/0xa20 [ 777.637391] should_failslab+0x5/0x20 [ 777.637932] kmem_cache_alloc+0x5b/0x310 [ 777.638499] ? mark_held_locks+0x9e/0xe0 [ 777.639072] create_object.isra.0+0x3a/0xa20 [ 777.639689] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 777.640405] kmem_cache_alloc_bulk+0x168/0x320 [ 777.641052] io_submit_sqes+0x6fe6/0x8610 [ 777.641657] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 777.642351] __do_sys_io_uring_enter+0x6b2/0x1890 [ 777.643030] ? find_held_lock+0x2c/0x110 [ 777.643621] ? io_submit_sqes+0x8610/0x8610 [ 777.644235] ? __mutex_unlock_slowpath+0xe1/0x600 [ 777.644913] ? wait_for_completion_io+0x270/0x270 [ 777.645591] ? rcu_read_lock_any_held+0x75/0xa0 [ 777.646240] ? vfs_write+0x354/0xb10 [ 777.646770] ? fput_many+0x2f/0x1a0 [ 777.647280] ? ksys_write+0x1a9/0x260 [ 777.647818] ? __ia32_sys_read+0xb0/0xb0 [ 777.648396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 777.649130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 777.649850] do_syscall_64+0x33/0x40 [ 777.650372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 777.651092] RIP: 0033:0x7f16dfbacb19 [ 777.651617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 777.654202] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 777.655267] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 777.656265] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 777.657256] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.658263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.659267] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 777.681995] loop6: detected capacity change from 0 to 2048 16:24:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7d", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 777.705913] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:24:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x2, {0x0, @multicast1, @local}}}], 0x20}}], 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8020880}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x2, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x17, {0xc, 0x7ff, @l2={'ib', 0x3a, 'nr0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) pread64(0xffffffffffffffff, &(0x7f00000010c0)=""/4088, 0xff8, 0x1000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xa4, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0xb}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x6, 0x9]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x72, 0xbe, "a6fcb12ecc89d0b2b969c5e98a9727dafc5df22a883687fd023e341a7f40fe84f04b62b1013c9c06d1484e99189b6892b8a8202d1e9bc31f55dd7045dcf4ff425bdfcc29f9cda325b168df9a4884bbac4aca75d4a65c716a5a86fcbe46d162acae151d10f971d50d37002b54c984"}]}, 0xa4}}, 0x20040090) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x84, 0x0, 0x2, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf0c}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3e0}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x84}}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@tipc=@id, &(0x7f0000000000)=0x80) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x80, 0x1f}}, './file2\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x140, 0x31713}, 0x1f7) readv(r2, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 16:24:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) 16:24:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x21, 0x11, 0xfb, 0x0, 0xffffffffffff29a6, 0x1, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b19, 0x2, @perf_config_ext={0x2, 0x5}, 0x1800, 0x0, 0x8, 0x9, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:24:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7d", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) read(0xffffffffffffffff, &(0x7f0000002880)=""/196, 0xc4) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)={'L-', 0x1}, 0x16, 0x3) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') pread64(r2, &(0x7f0000002100)=""/4083, 0xff3, 0x20000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x401, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000021200010df7b2527500"/24], 0x14}}, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x84}, {}], 0x2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 16:24:26 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) 16:24:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:26 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) [ 793.338629] loop6: detected capacity change from 0 to 2048 [ 793.350490] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:24:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000008640)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006040)={&(0x7f000000b4c0)={0x82c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9a}, @NL80211_ATTR_CSA_IES={0x7b8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x400]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x180, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x7, 0x3, "f259fb"}, @NL80211_FTM_RESP_ATTR_LCI={0xe7, 0x2, "c5108fdaa1637781d5f551740531446efc7077604b2c69457e3a93423f24f8d2c46f5bd20fe1191528e5029e1f60fce383e76bd28c9d5b2cfccb5ce161ced41df100264c54569ae30a390bdcd2e0bd42ed68500e44d4b89300164e6c3d6c282e945836b54847ca05f8bdf712ae0e0e67e751c1cc284eb70a31e9d00f9128451aad5a895eb34fec0dfdf785a772c8932af21d2c4e4b0ec70e4a4c7403d38813355e88c5f6d2dedfa7cde3cf36786b108ffe7fa3ef2f2e0a304427eef2b4f81ce12c635010dc86275d2515b378fae60709cbc852a203875573ccad42506d713978a002bd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7e, 0x3, "b679ffd4084996ca5e9060b6eb180e0e54a3485403d31cff89b4d2b9399d4c4ad55ccddad5142c9d85f2f78372a8881b03baa8ea86e2fa7c0fc9ea246a094b5fe38fc4f560197eda77b190d5af8f87659402b128e30098bec87f6262bd84e177c29cb7db693cba4e250177ca2ffdf6dcea1e6301a9081bda8224"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x418, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8da}, @device_b, @broadcast, @from_mac=@device_b, {0x0, 0x8}}, @ver_80211n={0x0, 0xff, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x2, @random=0x7f, 0x10, @void, @void, @val={0x3, 0x1, 0xae}, @void, @val={0x6, 0x2, 0x101}, @val={0x5, 0xee, {0x0, 0x60, 0x7c, "a9d112b895c5a323b6a01c5d310a54c71ca0309f8e68cd61a95f4148e5841d2c980b1e954bcc7f6591f1d2a1eafb693bf31d1b1e937abf8f0be5a77e6d7b84d80f3d0320fb624db8ee2ce09a81294a9579d7165b673b5a25b2a640ce01ed9ef27f4c60ef7ef2b6671710fe9a79264ed67477233d14ada98bdeb4d1cf88ae77070ff1f2dc5db4cb826eb356f116151fc502bf4de85012e12896b06ae83ca6ce9e2aacc9a017ba9eed6b9858c8c305c51ad384089e7bbd1c559ac47a0f17e143d4e71dfe825c41b5f3bd473620ae5d81545a9eedb90fab2311856725e82935e93a6632de63ba9b5a59ad738f"}}, @val={0x25, 0x3, {0x0, 0x28, 0x1f}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x80, 0xa5, 0x1f}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x80, 0x4, 0x1c, 0x3}}, [{0xdd, 0x98, "569248da506ad1bf1a92c4400c38061b4119ec809f776bf5030f39893b4a10b78916e956ab4f61817b5c772a7c74f0d8dfab2307aba3a9af5ab3c2b4698e502dda69cc75d3532051835dd7ef113f3b17979032bc43c43b30452a40b986c3beca48ef3811a52f99d010cca5159c92b30e6ab2723e884b3c3feec59b790c951ec9e8726cdfcf44a5a38c78cfa00a530b0f315d6d366b9922f3"}, {0xdd, 0xe3, "7a9c236e29e0bbc07f9409ea10e00466282da133209baf2af7e129a85fdf386e459d2d472fbc7a99ca7224893f0ced163cad436d8b4d0533947173d219f4a2c51c0e17494ae66209c00d70dd1fef06d785d0bedd73ec9d9be83a3b389bc7a0d84b2a38385dd72cd845df7141f2c788b23c0df5192dda28a4006f160df475bbaf2271178ccd37e2498b0e0744cd9f6350816ec0673d4f95357fa278cec6126c2e181478de2ccbfdc7429a266239bb3f5b4122e512293c176ded7035a0d940af3d72713a8ad0916fa68d247f1f60e3eb6b0eba7361b149944f288f98e600e821cb408ec3"}, {0xdd, 0x60, "e1d5af5336f4c71da2976b01ba0c25d9d964483d840f27123fcfc1b61f73d012f0ab56877e7b4a8a19a9e9b642f20d548d8460974fa8d87c785c2eec33664ef320b8c9739e46fdfaa4b37d5d7e701c16d9781c27b3d97dfd532437eb0ac4c2e5"}, {0xdd, 0x2c, "a41d97e49e5bc7ae45430084b119416d7ba9cb37cc62959aefdfa1ac4e20ccda25cf6688233b766f19fc3568"}, {0xdd, 0xc6, "45d3e6de6bb0e90267726af37db626fd3e0e78a75d597cc93cb91bc2e3521dfb2df34fb9334dcbb42b0fab6905c8056a8a8fa4be4dffaca696845d04a81ea932f16f82446b1dcaf81ebf181669bb85f1be5741f4bb6c04ef49aa7755ccea7def45048f7423701c74a759cb2aebc833eafb77f119615c604b48b47f9bc035a6e98152fce54f7bdf5701f952e8e78fa64e379c5ed69385e92fe101f1370a6044adee1bc3afc075cad22fac750d3afc8d9e2a8f3020b8a5228df8c19f41d000655e4115afdd35c3"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "83b94860cd5765f6ccf32e8bf61af51f53225f86c610ff22a0d664d2b46de13f7199d67665b9ab3b338bc33b23ff3c5c7918ae03ce2f46c09181139d612bf1e25dfddc695d26ea59c726afaae0f54083eabb6fb2e1929c001f98d8540366a9465bdd089ed06ea839255084eaed1f55a363eda5c5c83f86edd8f7d1cfbcbadbd4f6ee1263b1750bf3d0060514d946f0"}]}, @NL80211_ATTR_FTM_RESPONDER={0x148, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x2a, 0x2, "616137458dae3409fe4c495c1486c09de367c0087a80fdb28c7446b82ccd8a7960c092ac66bd"}, @NL80211_FTM_RESP_ATTR_LCI={0x39, 0x2, "a18ed62079e60c7b25fefd93be6d3d371642c25ba01b8bc2c87907d1d16d3b2492ace0d98da30e2756cf4cb52ec2753108da70621c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xda, 0x3, "15b1770a77fbd75a011f7a1fa02131f3ccf6cd70f569a4c68eaa4efec62de5cba9aadd01119b18cb8a8da6c4c1c16ec4d230251f3d3523976177f7a171f35d14438b4c4acc2aea740fde910d7d41cb5b79249042da243e7dff11ba6ea2da2c76d6608c49c531f8c7cede1b548717c287c858b169083b0bcfbf40648c9a6d766f3d12752c5063c2634811cd05257e0d3f3cc2f9411c26f5f538796f0856fd178f9e94da7cc38fe64158df7d231a97aba961fc4d057caadf3aecad8fd0c6d07feb8742313293b7d97421fdbdc53bca10f0ee5905eb2053"}]}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@cf={0x4, 0x6, {0x2, 0x7f, 0xfff7, 0x8}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xffff, 0x3f, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8e7c, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3ff, 0x7fff, 0x1000, 0x1000, 0x7f, 0xff9c, 0x8]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0x82c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) recvmmsg$unix(r8, &(0x7f000000b280)=[{{&(0x7f0000005f80), 0x6e, &(0x7f0000008900)=[{&(0x7f00000085c0)=""/112, 0x70}, {&(0x7f0000006080)=""/15, 0xf}, {&(0x7f0000008480)=""/68, 0x44}, {&(0x7f0000008500)=""/62, 0x3e}, {&(0x7f0000008540)=""/107, 0x6b}, {&(0x7f000000b340)=""/157, 0x9d}, {&(0x7f0000008680)=""/68, 0x44}, {&(0x7f0000008700)=""/148, 0x94}, {&(0x7f00000087c0)=""/66, 0x42}, {&(0x7f0000008840)=""/191, 0xbf}], 0xa, &(0x7f00000089c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000008a80)=@abs, 0x6e, &(0x7f0000008d40)=[{&(0x7f0000008b00)=""/175, 0xaf}, {&(0x7f0000008bc0)=""/168, 0xa8}, {&(0x7f000000b400)=""/139, 0x8b}], 0x3}}, {{0x0, 0x0, &(0x7f000000b180)=[{&(0x7f0000008d80)=""/64, 0x40}, {&(0x7f0000008dc0)=""/236, 0xec}, {&(0x7f0000008ec0)=""/154, 0x9a}, {&(0x7f0000008f80)=""/4096, 0x1000}, {&(0x7f0000009f80)=""/65, 0x41}, {&(0x7f000000a000)=""/183, 0xb7}, {&(0x7f000000a0c0)=""/4096, 0x1000}, {&(0x7f0000008c80)=""/156, 0x9c}], 0x8, &(0x7f000000b200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x3, 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r8, &(0x7f0000000000)='./file1\x00', 0x400, 0x2) sendfile(r5, r6, 0x0, 0x8) recvmmsg$unix(r8, &(0x7f0000008080)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000240)=""/96, 0x60}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/139, 0x8b}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/141, 0x8d}], 0x7, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/226, 0xe2}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/59, 0x3b}], 0x4}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000001b80)=""/117, 0x75}, {&(0x7f0000001c00)=""/121, 0x79}, {&(0x7f0000001c80)=""/93, 0x5d}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/217, 0xd9}, {&(0x7f0000001d00)=""/82, 0x52}], 0x6, &(0x7f0000008340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000060c0)=""/22, 0x16}, {&(0x7f0000006100)=""/28, 0x1c}, {&(0x7f0000006140)=""/16, 0x10}, {&(0x7f0000006180)=""/103, 0x67}, {&(0x7f0000006200)=""/117, 0x75}, {&(0x7f0000006280)=""/158, 0x9e}, {&(0x7f0000006340)=""/116, 0x74}], 0x7, &(0x7f0000006440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f00000064c0)=""/247, 0xf7}, {&(0x7f00000065c0)=""/231, 0xe7}, {&(0x7f00000066c0)=""/68, 0x44}, {&(0x7f0000006740)=""/252, 0xfc}, {&(0x7f0000006840)=""/197, 0xc5}, {&(0x7f0000006940)=""/196, 0xc4}, {&(0x7f0000006a40)=""/157, 0x9d}, {&(0x7f0000006b00)=""/171, 0x45}], 0x8, &(0x7f0000006c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000006cc0)=@abs, 0x6e, &(0x7f0000007f40)=[{&(0x7f0000006d40)=""/4096, 0x1000}, {&(0x7f0000007d40)=""/3, 0x3}, {&(0x7f0000007d80)=""/240, 0xf0}, {&(0x7f0000007e80)=""/157, 0x9d}], 0x4, &(0x7f0000007f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x7, 0x10000, &(0x7f0000008240)={0x0, 0x3938700}) read(r9, &(0x7f0000008280)=""/148, 0x94) 16:24:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x20) [ 793.361479] FAULT_INJECTION: forcing a failure. [ 793.361479] name failslab, interval 1, probability 0, space 0, times 0 [ 793.362779] CPU: 1 PID: 7168 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 793.363589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 793.364552] Call Trace: [ 793.364862] dump_stack+0x107/0x167 [ 793.365287] should_fail.cold+0x5/0xa [ 793.365735] ? create_object.isra.0+0x3a/0xa20 [ 793.366271] should_failslab+0x5/0x20 [ 793.366717] kmem_cache_alloc+0x5b/0x310 [ 793.367178] ? mark_held_locks+0x9e/0xe0 [ 793.367672] create_object.isra.0+0x3a/0xa20 [ 793.368181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 793.368757] kmem_cache_alloc_bulk+0x168/0x320 [ 793.369296] io_submit_sqes+0x6fe6/0x8610 [ 793.369797] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 793.370378] __do_sys_io_uring_enter+0x6b2/0x1890 [ 793.370922] ? find_held_lock+0x2c/0x110 [ 793.371399] ? io_submit_sqes+0x8610/0x8610 [ 793.371917] ? __mutex_unlock_slowpath+0xe1/0x600 [ 793.372480] ? wait_for_completion_io+0x270/0x270 [ 793.373026] ? rcu_read_lock_any_held+0x75/0xa0 [ 793.373567] ? vfs_write+0x354/0xb10 [ 793.373999] ? fput_many+0x2f/0x1a0 [ 793.374423] ? ksys_write+0x1a9/0x260 [ 793.374866] ? __ia32_sys_read+0xb0/0xb0 [ 793.375347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 793.375968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 793.376571] do_syscall_64+0x33/0x40 [ 793.377006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 793.377602] RIP: 0033:0x7f16dfbacb19 [ 793.378036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.380196] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 793.381086] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 793.381915] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 793.382751] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.383589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 793.384422] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 793.435154] loop7: detected capacity change from 0 to 41948160 16:24:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc906", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:26 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 793.535940] FAULT_INJECTION: forcing a failure. [ 793.535940] name failslab, interval 1, probability 0, space 0, times 0 [ 793.537309] CPU: 1 PID: 7179 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 793.538097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 793.539053] Call Trace: 16:24:26 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 16:24:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x16, r0}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x6, 0x4) timer_delete(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="e1ffffff000000002e2f66886c653000"]) timer_settime(0x0, 0x0, &(0x7f0000001580)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000440)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001680)={@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x0, 0x46, 0x0, 0x0, 0x80140}) r1 = syz_open_procfs(0x0, &(0x7f0000001700)='net/arp\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddb51660100000000000000014100000018001700000017000097076574683a74756e6c30000000"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8d1) close_range(r1, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x3) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 793.539359] dump_stack+0x107/0x167 [ 793.540002] should_fail.cold+0x5/0xa [ 793.540441] ? create_object.isra.0+0x3a/0xa20 [ 793.540955] should_failslab+0x5/0x20 [ 793.541384] kmem_cache_alloc+0x5b/0x310 [ 793.541852] ? mark_held_locks+0x9e/0xe0 [ 793.542308] create_object.isra.0+0x3a/0xa20 [ 793.542804] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 793.543386] kmem_cache_alloc_bulk+0x168/0x320 [ 793.544138] io_submit_sqes+0x6fe6/0x8610 [ 793.544632] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 793.545193] __do_sys_io_uring_enter+0x6b2/0x1890 [ 793.545740] ? find_held_lock+0x2c/0x110 [ 793.546202] ? io_submit_sqes+0x8610/0x8610 [ 793.546692] ? __mutex_unlock_slowpath+0xe1/0x600 [ 793.547239] ? wait_for_completion_io+0x270/0x270 [ 793.547798] ? rcu_read_lock_any_held+0x75/0xa0 [ 793.548325] ? vfs_write+0x354/0xb10 [ 793.548747] ? fput_many+0x2f/0x1a0 [ 793.549160] ? ksys_write+0x1a9/0x260 [ 793.549590] ? __ia32_sys_read+0xb0/0xb0 [ 793.550053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 793.550645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 793.551234] do_syscall_64+0x33/0x40 [ 793.551767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 793.552375] RIP: 0033:0x7f16dfbacb19 [ 793.552873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.555279] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 793.556240] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 793.557044] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 793.557854] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.558665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 793.559483] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 16:24:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x5, 0x0, 0xfc, 0x3, 0x0, 0x6, 0x100, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_bp={&(0x7f0000000200)}, 0x40801, 0xdedd, 0x0, 0x3, 0x4, 0x7, 0x1, 0x0, 0x3, 0x0, 0x1000}, r1, 0xd, r2, 0x9) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 793.605679] loop6: detected capacity change from 0 to 2048 [ 793.616775] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:24:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001480)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r1}, 0x68) flock(r3, 0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) unshare(0x48020200) 16:24:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc906", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) 16:24:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:41 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 16:24:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc906", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:41 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x3) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x8000}) sync() 16:24:41 executing program 4: listen(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_io_uring_setup(0x6cc4, &(0x7f00000002c0)={0x0, 0xa40d, 0x20, 0x1, 0x29f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c00), 0x1312) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r0, &(0x7f00000004c0)=@caif=@dbg={0x25, 0x1, 0x3}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={0x0, @llc={0x1a, 0x10f, 0x18, 0x3, 0x8, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x6a1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)='ip_vti0\x00', 0x1f, 0x80, 0x6}) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001d00210c00000000000000000429ce3f00020014001180749801a7b0c7dba067c48642860d6156672029be293798bec86ee166f9f7db688ef8b6ad7b326649202b5a9b3d4ab3cefd2457ad9454f0d19ad28210d1cf7e48ace652f8e9af0062a66433a3dcd0e1aa1ce2e2dc66882c409ee7d8a4ff5e74b03a35e2235e6d81a042bc2b689f8ca31bb03fa92c519d0a143e1f446d331951215e04865614e2059587c97bd000306bd417c9ac08bcc3a958477bd81c0c434af68036", @ANYRESOCT=r6, @ANYRESHEX], 0x48}}, 0x0) 16:24:41 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)="3aec0b1f1cc1df7439ed150019732634255c187cbfac02d21113ddb69920795110", 0x21}}, 0x0) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f0000000000)="f361487aec3c46bc73d709a418e18679a948bd1f5a541ffe1ee3fee8c9fba94207ed88052d5a3e99a68cb9463cae75c21a5e4e812f43632800921e6e673f799d45290acd0b043cb2d8924db153bacd4dc53ffd25476e6dcc63b22557eac127af41fafa9800917b714ae7514c977fdcfa89ce02498dd7f9b35e383862b35b5cd264554aa58c5b8c835efca037dbd00e8a9dd456260a291a6a8baccf5d85042107f3ef3bc2635530ade7fa446bf3ed2d5f51fc3f754fbe338b9a3b9d128b7e5e35016bfb8fe9bbe16469d5f7ba858f702362341b9cd9717f05785ad47be4d8e213f6dff6ae4ffcc1fc9327a0ec095bec", 0xef}, {&(0x7f0000000100)="d6059736c62c0d13c6b3b218211190", 0xf}, {&(0x7f0000000240)="b0434bb49e9c67d61f41f993bfb932c865737e77ee078fe3193adf433ee512ce0f48ad24e93f366970bedc3c407d2433f6ea453ffca030d47849b48e34720a94ea7b19c40b5e26cd8fef71d16b3f18938753315b8eaf20b6d70cd069a4279e68c09fd71b29bda5008646bd9812482bc2182cfad0144e61a4203f0e788191f673dc479c673f20bf9e4dae925f86631399b27bbeeec836dff8e86cf324c30f46afe1608255950b3c8f65b9", 0xaa}, {&(0x7f0000000300)="59fc0046073022958fcb359d9f783434b5be6dc4251b5a29e4236fe1b61ef1be373285ec47fb9fcf7e186651198ad4872b2a022bf7b35faaeb6bc9be5abd540cede7d2ba6ca2e01cbf9c8e09ae3e46625ae9bed895873c9927d67533ccc404f55db9e933634318704d523606df189442e6236635f5c089e8a8881fb45f2b9abbdff5d3cd129ab79fe1535adbfec895152d84bc65487b9675c912f0150cb6f2ec3479ece35014398002437b1a94de6433b4ba05d0ce0fa533985439975d857ab16247f8bcdf9df6fe28a66efc3089c4859b4e591d57c5a15cce949e53960229d6", 0xe0}, {&(0x7f0000000180)="b73f6f9cf95e8f26ddc74cd88991311e9dee2d968116e833b2b6b9b964c0348e1e4f2de507", 0x25}, {&(0x7f0000000400)="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", 0x1000}], 0x6, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000014c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/218, 0xda}], 0x2, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}, 0x42) syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), r1) close(r0) 16:24:41 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 808.291271] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.300621] FAULT_INJECTION: forcing a failure. [ 808.300621] name failslab, interval 1, probability 0, space 0, times 0 [ 808.303452] CPU: 0 PID: 7213 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 808.305039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.306762] Call Trace: [ 808.307314] dump_stack+0x107/0x167 [ 808.308093] should_fail.cold+0x5/0xa [ 808.308891] ? create_object.isra.0+0x3a/0xa20 [ 808.309846] should_failslab+0x5/0x20 [ 808.310642] kmem_cache_alloc+0x5b/0x310 [ 808.311493] ? mark_held_locks+0x9e/0xe0 [ 808.312371] create_object.isra.0+0x3a/0xa20 [ 808.313285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 808.314390] kmem_cache_alloc_bulk+0x168/0x320 [ 808.315381] io_submit_sqes+0x6fe6/0x8610 [ 808.316309] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 808.317399] __do_sys_io_uring_enter+0x6b2/0x1890 [ 808.318459] ? find_held_lock+0x2c/0x110 [ 808.319336] ? io_submit_sqes+0x8610/0x8610 [ 808.320277] ? __mutex_unlock_slowpath+0xe1/0x600 [ 808.321306] ? wait_for_completion_io+0x270/0x270 [ 808.322355] ? rcu_read_lock_any_held+0x75/0xa0 [ 808.323318] ? vfs_write+0x354/0xb10 [ 808.324113] ? fput_many+0x2f/0x1a0 [ 808.324896] ? ksys_write+0x1a9/0x260 [ 808.325683] ? __ia32_sys_read+0xb0/0xb0 [ 808.326532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 808.327625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 808.328711] do_syscall_64+0x33/0x40 [ 808.329487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 808.330557] RIP: 0033:0x7f16dfbacb19 [ 808.331340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.335164] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 808.336754] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 808.337128] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.338245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 808.338257] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.338267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.338277] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 808.348499] loop6: detected capacity change from 0 to 2048 [ 808.373570] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:24:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 808.470690] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 16:24:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:24:41 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) [ 808.550877] loop6: detected capacity change from 0 to 2048 16:24:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) [ 808.627878] FAULT_INJECTION: forcing a failure. [ 808.627878] name failslab, interval 1, probability 0, space 0, times 0 [ 808.630564] CPU: 0 PID: 7237 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 808.632016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.633756] Call Trace: [ 808.634323] dump_stack+0x107/0x167 [ 808.635092] should_fail.cold+0x5/0xa [ 808.635908] ? create_object.isra.0+0x3a/0xa20 [ 808.636865] should_failslab+0x5/0x20 [ 808.637663] kmem_cache_alloc+0x5b/0x310 [ 808.638520] ? mark_held_locks+0x9e/0xe0 [ 808.639397] create_object.isra.0+0x3a/0xa20 [ 808.640328] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 808.641418] kmem_cache_alloc_bulk+0x168/0x320 [ 808.642404] io_submit_sqes+0x6fe6/0x8610 [ 808.643314] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 808.644372] __do_sys_io_uring_enter+0x6b2/0x1890 [ 808.645399] ? find_held_lock+0x2c/0x110 [ 808.646276] ? io_submit_sqes+0x8610/0x8610 [ 808.647194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 808.648226] ? wait_for_completion_io+0x270/0x270 [ 808.649242] ? rcu_read_lock_any_held+0x75/0xa0 [ 808.650209] ? vfs_write+0x354/0xb10 [ 808.651008] ? fput_many+0x2f/0x1a0 [ 808.651792] ? ksys_write+0x1a9/0x260 [ 808.652603] ? __ia32_sys_read+0xb0/0xb0 [ 808.653467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 808.654579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 808.655675] do_syscall_64+0x33/0x40 [ 808.656458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 808.657534] RIP: 0033:0x7f16dfbacb19 [ 808.658321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.662171] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 808.663773] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 808.665270] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 808.666760] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.668260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.669760] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 808.672420] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:24:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:41 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 808.757976] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 16:24:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002", 0x1d, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:41 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x0, 0x7fff, 0x0, 0x80, 0x7f, "34030bf42f8d976e6fbd19daa269772fb9bdb4", 0xfffffff8, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000100)=""/174}, &(0x7f00000001c0)="4feb7dc9066b", 0x0, 0x0, 0x4, 0x0, 0x0}) ioctl$TIOCSIG(r1, 0x40045436, 0x2d) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x0, 0xc1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x1) 16:24:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) [ 808.829255] FAULT_INJECTION: forcing a failure. [ 808.829255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.831755] CPU: 0 PID: 7251 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 808.833189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.834924] Call Trace: [ 808.835486] dump_stack+0x107/0x167 [ 808.836252] should_fail.cold+0x5/0xa [ 808.837061] _copy_from_user+0x2e/0x1b0 [ 808.837897] get_sg_io_hdr+0x5c7/0x830 [ 808.838721] ? sg_add_request+0x259/0x320 [ 808.839597] ? lock_downgrade+0x6d0/0x6d0 [ 808.840482] ? get_order+0x20/0x20 [ 808.841238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 808.842342] ? _raw_write_unlock_irqrestore+0x38/0x3a [ 808.842698] syz-executor.7 (7241) used greatest stack depth: 22872 bytes left [ 808.843411] ? trace_hardirqs_on+0x5b/0x180 [ 808.843435] ? sg_add_request+0x25e/0x320 [ 808.843465] sg_new_write.isra.0+0x141/0x770 [ 808.847684] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 808.848818] ? lock_downgrade+0x6d0/0x6d0 [ 808.849710] ? _cond_resched+0x10/0x30 [ 808.850541] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 808.851756] ? scsi_check_sense+0x10f0/0x10f0 [ 808.852689] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 808.853784] ? SOFTIRQ_verbose+0x10/0x10 [ 808.854631] ? find_held_lock+0x2c/0x110 [ 808.855495] sg_ioctl_common+0x828/0x2570 [ 808.856385] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 808.857461] ? do_vfs_ioctl+0x283/0x10d0 [ 808.858316] ? sg_write+0x120/0x120 [ 808.859086] ? generic_block_fiemap+0x60/0x60 [ 808.860041] ? lock_downgrade+0x6d0/0x6d0 [ 808.860897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 808.861915] ? wait_for_completion_io+0x270/0x270 [ 808.862948] ? selinux_file_ioctl+0xb6/0x270 [ 808.863906] ? sg_compat_ioctl+0x120/0x120 [ 808.864792] sg_ioctl+0x8f/0x120 [ 808.865501] __x64_sys_ioctl+0x19a/0x210 [ 808.866353] do_syscall_64+0x33/0x40 [ 808.867138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 808.868224] RIP: 0033:0x7f16a9b0ab19 [ 808.869009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.872882] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.874463] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 808.875965] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 808.877464] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 16:24:41 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 16:24:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xc1) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66696c6530ce000000000000005ffe872c042e6395824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4000893}, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x77, 0x5}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6532207b28232c5d2e0a223abaa5ac8d216824d4ee9dd38ab20e3f0df7e9fc08000000000000008615aa362a9f779e75e0982d737caada9dfcd4a2e3f76841eb1a2fb9ae4f13a1ece25ba8647f01843dfd52e4669763b3ed20875e636ab877cc0d1f5cce01a84423c1e9aaf2edff23fc6afde68872b640a0d23ee19eb6c9083be8c2f28a62a2a0"], 0x88) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 808.877858] FAULT_INJECTION: forcing a failure. [ 808.877858] name failslab, interval 1, probability 0, space 0, times 0 [ 808.878958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.878970] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 808.885209] CPU: 1 PID: 7255 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 808.886660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 808.888423] Call Trace: [ 808.888986] dump_stack+0x107/0x167 [ 808.889753] should_fail.cold+0x5/0xa [ 808.890553] ? create_object.isra.0+0x3a/0xa20 [ 808.891523] should_failslab+0x5/0x20 [ 808.892327] kmem_cache_alloc+0x5b/0x310 [ 808.893184] ? mark_held_locks+0x9e/0xe0 [ 808.894043] create_object.isra.0+0x3a/0xa20 [ 808.894962] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 808.896035] kmem_cache_alloc_bulk+0x168/0x320 [ 808.897000] io_submit_sqes+0x6fe6/0x8610 [ 808.897900] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 808.898944] __do_sys_io_uring_enter+0x6b2/0x1890 [ 808.899968] ? find_held_lock+0x2c/0x110 [ 808.900838] ? io_submit_sqes+0x8610/0x8610 [ 808.901751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 808.902764] ? wait_for_completion_io+0x270/0x270 [ 808.903789] ? rcu_read_lock_any_held+0x75/0xa0 [ 808.904765] ? vfs_write+0x354/0xb10 [ 808.905545] ? fput_many+0x2f/0x1a0 [ 808.906310] ? ksys_write+0x1a9/0x260 [ 808.907110] ? __ia32_sys_read+0xb0/0xb0 [ 808.907989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 808.909090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 808.910175] do_syscall_64+0x33/0x40 [ 808.910952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 808.912033] RIP: 0033:0x7f16dfbacb19 [ 808.912817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.916685] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 808.918283] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 808.919795] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 808.921284] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.922877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.924372] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 808.937793] loop6: detected capacity change from 0 to 2048 [ 808.949002] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:24:42 executing program 7: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0xba92, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x4, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x5, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xfffffffffffffeff, 0x0, 0x9d, 0x5, 0x0, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x1, 0x1, 0x1}, 0xa9) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0xa, 0x19, 0x12, 0xd, 0x9, 0xb54, 0x3, 0x142, 0xffffffffffffffff}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x4e23, 0x500c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, {{0xa, 0x4e24, 0x6, @empty, 0x7fff}}}, 0x108) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) unshare(0x48020200) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x8) 16:24:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(r2, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="574d5e66b1e9101cf01ec399cac0b61ce1a232267d8e1a1bda40d149485402f76a64211a0abd8990e65f30af488ec1854789916353", 0x35}, {&(0x7f0000000380)="9015398fa13be24b7b0e79f17a92c0eb64b8481f617ddd739c11e34df8c0b5f7ca3de93ca0bc00626d083741839162038eaade52fb6b056e67c806fb7c36cde5eb929f6ec58a86169de67145c2b324d11ed684a549d3329d4d66f5815028282e761aea7fecede6aff06d7d3e12ee6e5e970c62115b5671c65b2e9f11f975dd52f66cff8e5eee884bc8eb7c3d98e7851b82d8af7369b3b6afab0d4387cc629cb0d977d950c8283948af172cdeac9f86df0af493ca56ebe48a125ccf93faa8334e0dd90c750590b6a71e75443a9b5d41775b5c3f978b6d43644ab7852c391192", 0xdf}, {&(0x7f0000000480)="927a9b68818dfc798fa67fed58f899a1740677346fce677ca1026b6a5da19b3b707a1fea144daa8c607df1e5eee0858cb9e8d67426c478cb099d46977975038f8add5669e779b413d8f0a0065988a8f12a74d57a1372de147043dd41dd8e36ee317b28a9f6d92dbf22b94e055274bcf1c0de4cedf5e5d21fbc37fc5ed1e942e33914f4f10fed019aab300466e32d262111806250f863dd035076ca6a8ee59b51548abdbe5db963bf78caf2bb302df1db7e69fadb7ec186fc26471bcd871ba09b031669f70e394c1e8fe2a385b825563c040d3dba02a3d7cf5db93c9b8edb0632333f303a38dd10", 0xe7}, {&(0x7f0000000580)="f4f68ce0d3d887c8c65dc5a24765eda1413511d809b873e346ba43555cca662094bd5a15b144e2acc77ac976c6926d96143e9e877ef4c70f66b06bcf0e82d4dc380ae62f1f560188cad490b13bd2cf74fdccd79f74862384d5fea97d11d631ba8757b36993c728549d0c85c91ce639567fbb2134c8793b72c8d7717dd6002f7b0167d1c3ee679e7909ea2e3d63bf2276ec1fe5e28af581621a2e3871f34c1036c9bc4a35a28b039a92d265acffe5e7a3f1ba5eae6b0f5db23c63b2656b1545d408", 0xc1}], 0x4, &(0x7f0000000680)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffff7}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2e, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}}}, @hopopts={{0x48, 0x29, 0x36, {0x84, 0x5, '\x00', [@pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x99, 0xf17c, [0xffff, 0x401]}}, @hao={0xc9, 0x10, @private1}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x25fba7cb}}, @rthdr={{0x78, 0x29, 0x39, {0x33, 0xc, 0x0, 0x9c, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast1]}}}, @hopopts={{0x38, 0x29, 0x36, {0x2b, 0x3, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hopopts={{0x30, 0x29, 0x36, {0x21, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x80, 0x8000, [0xfffffffffffffff9]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x200}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB="188000005bdf193e12fa8ee5c239b96a2e2f66696c653000"]) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000340)) 16:24:55 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x60000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c80) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8c01) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000001c0)={{0x0, 0x80}, 'port1\x00', 0x0, 0x80018, 0x3, 0x0, 0x6, 0x3ff, 0x10001, 0x0, 0x3}) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 16:24:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000080211fc000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000200)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @initial, {0x5, 0x4}}, @ver_80211n={0x0, 0x40ac, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, 0x3, 0x40, @val={0x10, 0x1, 0xde}, [{0xdd, 0x60, "578d2187e622e49b54e92fd854a71439ab8afe451e27de34911f27459acfc292b8d78524ac6887d6573d2f72f30a55a0f2b90f9d09e26223a975c25db22c2572b1fa65b2556ce7e833948cbeb8695f4f7cf2bf19ea0d2930d9621b0fd1662ff3"}]}, 0x87) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 822.257406] FAULT_INJECTION: forcing a failure. 16:24:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 16:24:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002", 0x1d, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:55 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 16:24:55 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d53, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="64a7000000000020007266646e6f3d592215e5bba40bc1f4cbf8ec9c5a84a42409fa52355c0d806f9631ea66c43b642f3e47cc29e0892b3a363efa8996f64a72a346eef9da5051c01e40f48647f661cbd8d9369095773cf3014df35b64538479ad4767093d86956000395ecb3c60c136102f8ab40bbd5210e2f22fb3cf94d5a536b60df281f4b83b56c4719099d265d8a59a48eaacadb6c47624dbae50ef5834274a26be9f0ac4114d2ccc90f49265df24c31414214ea0e3164eea6f976469356dc0be9b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap,cache=none,\x00']) 16:24:55 executing program 0: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf252500800008002f000100000005002a0007000000050029000100000005002900010000000c0005000201aaaaaaaaaaaa0a0001007770616e34000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffff}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc1b}, {0xc, 0x90, 0xd80}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xdf6}, {0xc, 0x90, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2000041}, 0x8804) [ 822.257406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.259336] CPU: 1 PID: 7290 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 822.260238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.261326] Call Trace: [ 822.261438] loop6: detected capacity change from 0 to 2048 [ 822.261671] dump_stack+0x107/0x167 [ 822.261691] should_fail.cold+0x5/0xa [ 822.263951] _copy_from_user+0x2e/0x1b0 [ 822.264467] sg_new_write.isra.0+0x3ca/0x770 [ 822.265043] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 822.265749] ? lock_downgrade+0x6d0/0x6d0 [ 822.266303] ? _cond_resched+0x10/0x30 [ 822.266799] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 822.267550] ? scsi_check_sense+0x10f0/0x10f0 [ 822.268145] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 822.268812] ? SOFTIRQ_verbose+0x10/0x10 [ 822.269329] ? find_held_lock+0x2c/0x110 [ 822.269864] sg_ioctl_common+0x828/0x2570 [ 822.270420] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 822.271090] ? do_vfs_ioctl+0x283/0x10d0 [ 822.271620] ? sg_write+0x120/0x120 [ 822.272103] ? generic_block_fiemap+0x60/0x60 [ 822.272687] ? lock_downgrade+0x6d0/0x6d0 [ 822.273228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 822.273844] ? wait_for_completion_io+0x270/0x270 [ 822.274469] ? selinux_file_ioctl+0xb6/0x270 [ 822.275039] ? sg_compat_ioctl+0x120/0x120 [ 822.275588] sg_ioctl+0x8f/0x120 [ 822.276042] __x64_sys_ioctl+0x19a/0x210 [ 822.276565] do_syscall_64+0x33/0x40 [ 822.277047] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 822.277706] RIP: 0033:0x7f16a9b0ab19 [ 822.278178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.280534] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.281511] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 822.282432] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 822.283357] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.284279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.285227] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 822.289061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.297939] FAULT_INJECTION: forcing a failure. [ 822.297939] name failslab, interval 1, probability 0, space 0, times 0 [ 822.299451] CPU: 1 PID: 7292 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 822.300334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.301421] Call Trace: [ 822.301768] dump_stack+0x107/0x167 [ 822.302227] should_fail.cold+0x5/0xa [ 822.302711] should_failslab+0x5/0x20 [ 822.303198] kmem_cache_alloc_bulk+0x4b/0x320 [ 822.303781] io_submit_sqes+0x6fe6/0x8610 [ 822.304329] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 822.304956] __do_sys_io_uring_enter+0x6b2/0x1890 [ 822.305578] ? find_held_lock+0x2c/0x110 [ 822.306091] ? io_submit_sqes+0x8610/0x8610 [ 822.306640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 822.306698] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 822.307254] ? wait_for_completion_io+0x270/0x270 [ 822.307269] ? rcu_read_lock_any_held+0x75/0xa0 [ 822.307280] ? vfs_write+0x354/0xb10 [ 822.307291] ? fput_many+0x2f/0x1a0 [ 822.307312] ? ksys_write+0x1a9/0x260 [ 822.311250] ? __ia32_sys_read+0xb0/0xb0 [ 822.311771] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 822.312430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 822.313091] do_syscall_64+0x33/0x40 [ 822.313561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 822.314201] RIP: 0033:0x7f16dfbacb19 [ 822.314668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.317011] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 822.317979] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 822.318878] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 822.319797] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.320694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.321589] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 822.332392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.345418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:24:55 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:24:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002", 0x1d, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:24:55 executing program 7: r0 = getpgrp(0x0) pidfd_open(r0, 0x0) kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x11, 0x80, 0xc2, 0x24}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 16:24:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xba) write$binfmt_elf64(r3, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xba, 0x7, 0x99, 0x0, 0x3, 0x6, 0x2, 0x363, 0x40, 0x200, 0x0, 0x80, 0x38, 0x1, 0x7fff, 0x59a, 0x100}, [{0x70000000, 0x7, 0x2, 0xfff, 0x9, 0x1000, 0x6}], "01da43351cbc9c2d540446166ae6c1c92df1ceaad2872d634a594bdab4ed7035dbdcb7c821bdd622bee24e9bd73b455c2c13b064b033ff8f5c76b80c6dd764250eb653478947874a603355f3fe54df17e42c38e54acdb10726b5711a7587b598c9212e3a081a5fad0803c2e0b6e3ac9f32c1aa08d3fd5ea48f0d14d8899bbe886052059564962925a0723c918ca887055aaf6beb979b2f39919285a58f1729614b11f3ea1b24f516f80091ae99927a2710760902898900853e", ['\x00']}, 0x231) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) io_uring_enter(r0, 0x538b, 0x12bb, 0x2, &(0x7f00000000c0)={[0x80000001]}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@mcast1, 0x56}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c010000100001000000000000000000ac141400000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e00000010000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686132353600"/244], 0x13c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={0x0, @xdp={0x2c, 0x8, 0x0, 0xc}, @hci={0x1f, 0x1, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x20, 0x0, 0x0, 0x0, 0x101, &(0x7f00000006c0)='batadv_slave_1\x00', 0x8, 0x6, 0x5}) dup3(r4, r5, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xfffff801, 0xffffffff}, 0x40, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca4b1d49", 0x1d}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x4, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf6580333800afa11, 0x700, 0x0, 0x2}}) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:24:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$netlink(0x10, 0x3, 0x19) [ 822.437124] loop6: detected capacity change from 0 to 2048 [ 822.462738] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 822.466812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:24:55 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000003c0)={0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x280283c, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x248) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="c0f9c0f5000000"]) 16:24:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 16:24:55 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 822.537609] loop7: detected capacity change from 0 to 16776704 [ 822.541350] EXT4-fs (loop7): Unrecognized mount option "ÀùÀõ" or missing value [ 822.558379] loop7: detected capacity change from 0 to 16776704 [ 822.561394] EXT4-fs (loop7): Unrecognized mount option "ÀùÀõ" or missing value [ 822.567267] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 822.573974] FAULT_INJECTION: forcing a failure. [ 822.573974] name failslab, interval 1, probability 0, space 0, times 0 [ 822.575381] CPU: 1 PID: 7330 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 822.576169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.577106] Call Trace: [ 822.577427] dump_stack+0x107/0x167 [ 822.577840] should_fail.cold+0x5/0xa [ 822.578275] ? create_object.isra.0+0x3a/0xa20 [ 822.578800] should_failslab+0x5/0x20 [ 822.579236] kmem_cache_alloc+0x5b/0x310 [ 822.579712] ? mark_held_locks+0x9e/0xe0 [ 822.580176] create_object.isra.0+0x3a/0xa20 [ 822.580671] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 822.581256] kmem_cache_alloc_bulk+0x168/0x320 [ 822.581779] io_submit_sqes+0x6fe6/0x8610 [ 822.582266] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 822.582834] __do_sys_io_uring_enter+0x6b2/0x1890 [ 822.583387] ? find_held_lock+0x2c/0x110 [ 822.583861] ? io_submit_sqes+0x8610/0x8610 [ 822.584359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 822.584917] ? wait_for_completion_io+0x270/0x270 [ 822.585467] ? rcu_read_lock_any_held+0x75/0xa0 [ 822.585996] ? vfs_write+0x354/0xb10 [ 822.586420] ? fput_many+0x2f/0x1a0 [ 822.586833] ? ksys_write+0x1a9/0x260 [ 822.587264] ? __ia32_sys_read+0xb0/0xb0 [ 822.587742] do_syscall_64+0x33/0x40 [ 822.588165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 822.588749] RIP: 0033:0x7f16dfbacb19 [ 822.589171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.591266] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 822.592144] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 822.592962] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 822.593775] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.594586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.595451] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 822.609280] FAULT_INJECTION: forcing a failure. [ 822.609280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 822.610745] CPU: 1 PID: 7331 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 822.611532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 822.612494] Call Trace: [ 822.612800] dump_stack+0x107/0x167 [ 822.613216] should_fail.cold+0x5/0xa [ 822.613656] __alloc_pages_nodemask+0x182/0x600 [ 822.614190] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 822.614877] ? sg_common_write.constprop.0+0x8ba/0x1a30 [ 822.615488] ? ktime_get+0x1c3/0x1f0 [ 822.615918] ? trace_hardirqs_on+0x5b/0x180 [ 822.616413] ? recalibrate_cpu_khz+0x10/0x10 [ 822.616909] ? ktime_get+0x158/0x1f0 [ 822.617336] alloc_pages_current+0x187/0x280 [ 822.617842] kmalloc_order+0x35/0x160 [ 822.618278] kmalloc_order_trace+0x14/0xa0 [ 822.618759] iovec_from_user+0x36c/0x400 [ 822.619226] __import_iovec+0x67/0x590 [ 822.619676] ? __mutex_unlock_slowpath+0xe1/0x600 [ 822.620228] ? wait_for_completion_io+0x270/0x270 [ 822.620778] import_iovec+0x83/0xb0 [ 822.621197] sg_common_write.constprop.0+0xaf4/0x1a30 [ 822.621789] ? sg_build_indirect.isra.0+0x710/0x710 [ 822.622355] ? fault_around_bytes_set+0x83/0xa0 [ 822.622885] ? lock_downgrade+0x6d0/0x6d0 [ 822.623363] ? cap_capable+0x1cd/0x230 [ 822.623817] ? security_capable+0x95/0xc0 [ 822.624291] ? capable+0xe1/0x100 [ 822.624687] sg_new_write.isra.0+0x529/0x770 [ 822.625192] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 822.625809] ? lock_downgrade+0x6d0/0x6d0 [ 822.626292] ? _cond_resched+0x10/0x30 [ 822.626737] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 822.627393] ? scsi_check_sense+0x10f0/0x10f0 [ 822.627912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 822.628506] ? SOFTIRQ_verbose+0x10/0x10 [ 822.628969] ? find_held_lock+0x2c/0x110 [ 822.629436] sg_ioctl_common+0x828/0x2570 [ 822.629911] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 822.630499] ? do_vfs_ioctl+0x283/0x10d0 [ 822.630965] ? sg_write+0x120/0x120 [ 822.631417] ? generic_block_fiemap+0x60/0x60 [ 822.632044] ? lock_downgrade+0x6d0/0x6d0 [ 822.632575] ? __mutex_unlock_slowpath+0xe1/0x600 [ 822.633277] ? wait_for_completion_io+0x270/0x270 [ 822.633828] ? selinux_file_ioctl+0xb6/0x270 [ 822.634327] ? sg_compat_ioctl+0x120/0x120 [ 822.634805] sg_ioctl+0x8f/0x120 [ 822.635189] __x64_sys_ioctl+0x19a/0x210 [ 822.635668] do_syscall_64+0x33/0x40 [ 822.636092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 822.636677] RIP: 0033:0x7f16a9b0ab19 [ 822.637102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 822.639196] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 822.640079] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 822.640890] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 822.641707] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 822.642520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.642695] loop6: detected capacity change from 0 to 2048 [ 822.643336] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:24:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000", 0x2c, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 822.666365] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 822.672978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.676717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.682831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:25:08 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:25:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 16:25:08 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 16:25:08 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x45, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt(r1, 0x8, 0x7, &(0x7f0000000080)="08d2c318d80f30bf4f7006fd39b8a27b640c17ee6d11c244ce7cdc4828f2", 0x1e) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x650, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffa, 0x9}}}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x81}, @device_b, @device_a, @from_mac=@device_b, {0x5, 0x40}}, 0xa, @void}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x8}, @broadcast}}, @NL80211_ATTR_FRAME={0x470, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @broadcast, @device_b, {0x3, 0x5}}, {0x6, 0x1, 0x2}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x80}, @device_b, @device_b, @initial, {0x4, 0x8}}, {0x5, 0x0, 0x0, 0x1, 0x8}}}, @ver_80211n={0x0, 0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x17c, 0x33, @data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {}, @device_a, @from_mac=@broadcast, @broadcast, {0x5, 0x8}}, @a_msdu=[{@broadcast, @device_a, 0xa0, "9b6d8b627de7d3ba04caecdfe7a257eace7ad632f46611ce8f0beb77735ad99c38b1aad85cedc9fc8e5d8cad4612210c7fa737e7e6e73714b6b00fa0fe9655d49a60c86e58cba2231c442849e2054c1b5d3eccfc6d5d112a2769f0e0ea668d29e4f37b8a988ff42764552c5662639e9d52587a0dc3f7537196a2de0fd58b230cc866119fb1bceb3d9df503f156ce5596973da58ece159893623f3c9c9eb22f52"}, {@device_b, @device_a, 0x2d, "116be40c8d828dfb630cb49871156c748a6ba399afed5f8fbe072ee13745278ee4d0c64e7a74b1d4e132ef43b6"}, {@device_b, @device_b, 0x1b, "830a410c8c7193dfe757b765bdac3bcf5d0823ecee3c7ea78e14da"}, {@device_b, @broadcast, 0x26, "c01daf3089745f13154582218547b2d44c44c9114f9001077f048b7e3a3e920f568add27cd61"}, {@broadcast, @broadcast, 0x4, "b784a52b"}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 16:25:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x8, 0xffffffff, 0x264}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r4, &(0x7f0000000240)='./file0/file0\x00', 0x820, 0xa2) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ftruncate(r2, 0x10000) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:25:08 executing program 5: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x98420, 0x0) 16:25:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) umount2(&(0x7f0000000000)='./mnt\x00', 0x1) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x8104, 0x953}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) rmdir(&(0x7f0000000080)='./file0/../file0\x00') perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x4, 0x3, 0x0, 0x0, 0x72b6, 0x11000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000280)}, 0x0, 0x81, 0x100, 0x6, 0xfffffffffffffffb, 0x6, 0x3f, 0x0, 0x7, 0x0, 0x4}, r1, 0x1, r0, 0x2015006500ab59ea) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mknodat$loop(r4, &(0x7f0000000240)='./file0/../file0\x00', 0x200, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x6) 16:25:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000", 0x2c, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 835.274442] FAULT_INJECTION: forcing a failure. [ 835.274442] name failslab, interval 1, probability 0, space 0, times 0 [ 835.277220] CPU: 0 PID: 7349 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 835.278789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 835.280701] Call Trace: [ 835.281308] dump_stack+0x107/0x167 [ 835.282147] should_fail.cold+0x5/0xa [ 835.283030] ? create_object.isra.0+0x3a/0xa20 [ 835.284096] should_failslab+0x5/0x20 [ 835.284972] kmem_cache_alloc+0x5b/0x310 [ 835.285911] ? recalibrate_cpu_khz+0x10/0x10 [ 835.286927] create_object.isra.0+0x3a/0xa20 [ 835.287944] ? kasan_unpoison_shadow+0x33/0x50 [ 835.289001] kmalloc_order+0xfe/0x160 [ 835.289884] kmalloc_order_trace+0x14/0xa0 [ 835.290860] iovec_from_user+0x36c/0x400 [ 835.291814] __import_iovec+0x67/0x590 [ 835.292710] ? __mutex_unlock_slowpath+0xe1/0x600 [ 835.293824] ? wait_for_completion_io+0x270/0x270 [ 835.294936] import_iovec+0x83/0xb0 [ 835.295791] sg_common_write.constprop.0+0xaf4/0x1a30 [ 835.296985] ? sg_build_indirect.isra.0+0x710/0x710 [ 835.298125] ? fault_around_bytes_set+0x83/0xa0 [ 835.299192] ? lock_downgrade+0x6d0/0x6d0 [ 835.300151] ? cap_capable+0x1cd/0x230 [ 835.301047] ? security_capable+0x95/0xc0 [ 835.301999] ? capable+0xe1/0x100 [ 835.302798] sg_new_write.isra.0+0x529/0x770 [ 835.303818] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 835.305066] ? lock_downgrade+0x6d0/0x6d0 [ 835.306038] ? _cond_resched+0x10/0x30 [ 835.306933] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 835.308263] ? scsi_check_sense+0x10f0/0x10f0 [ 835.309297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 835.310498] ? SOFTIRQ_verbose+0x10/0x10 [ 835.311429] ? find_held_lock+0x2c/0x110 [ 835.312379] sg_ioctl_common+0x828/0x2570 [ 835.313335] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 835.314520] ? do_vfs_ioctl+0x283/0x10d0 [ 835.315451] ? sg_write+0x120/0x120 [ 835.316295] ? generic_block_fiemap+0x60/0x60 [ 835.317324] ? lock_downgrade+0x6d0/0x6d0 [ 835.318273] ? __mutex_unlock_slowpath+0xe1/0x600 [ 835.319381] ? wait_for_completion_io+0x270/0x270 [ 835.320509] ? selinux_file_ioctl+0xb6/0x270 [ 835.321516] ? sg_compat_ioctl+0x120/0x120 [ 835.322489] sg_ioctl+0x8f/0x120 [ 835.323270] __x64_sys_ioctl+0x19a/0x210 [ 835.324214] do_syscall_64+0x33/0x40 [ 835.325067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 835.326244] RIP: 0033:0x7f16a9b0ab19 [ 835.327097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 835.331330] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.333090] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 835.334729] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 835.336379] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 835.338026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.339664] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 835.350420] loop6: detected capacity change from 0 to 2048 [ 835.360486] FAULT_INJECTION: forcing a failure. [ 835.360486] name failslab, interval 1, probability 0, space 0, times 0 [ 835.362644] CPU: 1 PID: 7358 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 835.363831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 835.365256] Call Trace: [ 835.365714] dump_stack+0x107/0x167 [ 835.366349] should_fail.cold+0x5/0xa [ 835.366969] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 835.367020] ? create_object.isra.0+0x3a/0xa20 [ 835.369148] should_failslab+0x5/0x20 [ 835.369801] kmem_cache_alloc+0x5b/0x310 [ 835.370511] ? mark_held_locks+0x9e/0xe0 [ 835.371220] create_object.isra.0+0x3a/0xa20 [ 835.371988] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 835.372882] kmem_cache_alloc_bulk+0x168/0x320 [ 835.373529] io_submit_sqes+0x6fe6/0x8610 [ 835.374269] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 835.375129] __do_sys_io_uring_enter+0x6b2/0x1890 [ 835.375981] ? find_held_lock+0x2c/0x110 [ 835.376689] ? io_submit_sqes+0x8610/0x8610 [ 835.377448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 835.378277] ? wait_for_completion_io+0x270/0x270 [ 835.379112] ? rcu_read_lock_any_held+0x75/0xa0 [ 835.379922] ? vfs_write+0x354/0xb10 [ 835.380572] ? fput_many+0x2f/0x1a0 [ 835.381203] ? ksys_write+0x1a9/0x260 [ 835.381863] ? __ia32_sys_read+0xb0/0xb0 [ 835.382568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 835.383477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 835.384382] do_syscall_64+0x33/0x40 [ 835.385023] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 835.385910] RIP: 0033:0x7f16dfbacb19 [ 835.386558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 835.389757] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 835.391083] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 835.392329] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 835.393564] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 835.394796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.396036] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 16:25:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000900)="779b263e", 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x84041) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1) 16:25:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendto$unix(r0, &(0x7f0000000140)="f07b9c74209f7bc8509efc357767d522336c973cbf0dae28d298116367a9651afe863f38819a101bc6ed6381bfa7396692643c0c811a255f4d0a03f4ad6d210be59872163f3e93ab9e52f892bc84610746512f9323dc52ed00b8c6e13b9f47411226ebe93afdaedbf869c573bbc95e0af8a8873b80664a70bd08430dc78b", 0x7e, 0x4091, 0x0, 0x0) 16:25:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000", 0x2c, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:25:21 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f00000002c0)='./file0\x00', 0x5db9c3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, 0x0, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x2, 0x1, 0x10000000, 0xfffffffffffffffc}) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5d) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40001) read(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b) lseek(0xffffffffffffffff, 0x2, 0x4) syz_io_uring_complete(0x0) r5 = accept4(r1, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80, 0x800) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x3ff, @loopback, 0x80}, 0x1c) 16:25:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5) 16:25:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="164065d95411810db1cb0feb9e94170ee553aae0e14b58853600000000000000000005000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ff01000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x115) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x80000) dup(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x0, 0x0, 0x1}, 0x9) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82081, 0x0) write$hidraw(r2, &(0x7f0000000500)="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", 0x7ef) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001500)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, @generic={0x5, "aa5c976882fe10c9cedbef5bb481"}, @llc={0x1a, 0x4, 0x4, 0x1, 0x8, 0x9, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xad4, &(0x7f0000000240)='wg1\x00', 0x401, 0x4, 0x5}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16:25:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500005800000000002f9078acaf5043ecf65bfecb0600000000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800650000aefabfd5cbcdcb6bcc17520594dd17e256f8086225d6d9418b44346ae9b4f85add6f63cbebb5e6b7c1c80c7d2eebd6ee6a2b2fe9725fe05c8bc059e5dcbc29f49f996827ec06a2f5737b0ab5e9c356bc8eb892d65d00bf6bdf187eb741a9e910f9f9be63511ab3b9db"], 0x0) 16:25:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:25:21 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 848.781827] FAULT_INJECTION: forcing a failure. [ 848.781827] name fail_usercopy, interval 1, probability 0, space 0, times 0 16:25:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) pwrite64(r0, &(0x7f0000000340)='t', 0x1, 0x0) fallocate(r1, 0x3, 0x4077, 0x8000) creat(&(0x7f0000000000)='./file0\x00', 0x0) 16:25:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 6) [ 848.781853] CPU: 1 PID: 7391 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 848.781864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.781871] Call Trace: [ 848.781899] dump_stack+0x107/0x167 [ 848.781923] should_fail.cold+0x5/0xa 16:25:22 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 848.781953] _copy_from_user+0x2e/0x1b0 [ 848.781979] iovec_from_user+0x141/0x400 [ 848.782007] __import_iovec+0x67/0x590 [ 848.782035] ? __mutex_unlock_slowpath+0xe1/0x600 16:25:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f465", 0x33, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 848.782059] ? wait_for_completion_io+0x270/0x270 [ 848.782083] import_iovec+0x83/0xb0 [ 848.782115] sg_common_write.constprop.0+0xaf4/0x1a30 16:25:22 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = gettid() [ 848.782151] ? sg_build_indirect.isra.0+0x710/0x710 sendmsg$nl_generic(r0, &(0x7f0000002500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000024c0)={&(0x7f0000000280)={0x2234, 0x23, 0x2, 0x70bd27, 0x25dfdbfb, {0x1f}, [@generic="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", @generic="5cb785eb145cf5e2f7e6cf6dbb52ef", @typed={0x8, 0xe, 0x0, 0x0, @u32=0x80000001}, @nested={0x9c, 0x78, 0x0, 0x1, [@generic="e74642ad50cb", @typed={0x8, 0x7b, 0x0, 0x0, @pid=r3}, @generic, @generic="2f9d78a2fb262132121b81f826f9f6c0cbcd202a8e07a2f8780c1e01fbb369d2a31255c288e868777945239b73889dcd628c6598cbfc96e1d942df503f", @generic="c66cccf471cabd3f936c5c8d50396f9bc3e864edb02c74a37f5a3624e0", @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x4, 0x68}, @typed={0x8, 0x33, 0x0, 0x0, @u32=0x10000}, @typed={0x7, 0xb, 0x0, 0x0, @str='\'&\x00'}, @typed={0x8, 0x60, 0x0, 0x0, @pid}]}, @nested={0x1169, 0x82, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="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", @typed={0xa, 0x96, 0x0, 0x0, @str='^.#!}\x00'}, @generic="3401a13511cc1ced334ef8f8d54f24e1d0a5f81ebd5875a228a22bb078aee508be0b098b892215efb1d05e56b5d417f255276f82340c2dcc3e6cb24dd87bcc67a3ac5f541f2c1ba513b4386cd93549ff6ef98da6399489e4c97bd9b655b641104c8343e9fb686872a25b9df3c26496c7b0d317c7b1601ca3c7c933b357998312d167666ba35e161512f970279cbd584408f5999b64f3b1b7202fb6d111aa3e0ffd597506b41fcdc690c148ff68e7ab2117bbf171e9627d67d1b1b76c4b3b2d452a2061655cbc5d0666cd5965cf85025cac2df9e78cbe2c3611bab359654bcda308c00c463d67a1e0", @generic="e6a9cc4c523239f2eca8d9939a517ba196ce8e4c1125726c8bd8d69f9aea8c9ee2bd8bbd76c0866872b49943e1d50b95ba62aa7c70dc2ab6bd1d36a347a9921e3bad5d76a5b2f3e25ac17a3c7d11c4487d2704e1d0889d262d45d29798711be8a241c8b91e8958e6d9"]}]}, 0x2234}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000002540)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup(r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x28, r7, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x43}, @void, @val={0xc, 0x99, {0x1, 0x2a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r11, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002580)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r11, @ANYBLOB="ff7f0000000000002e2f66696c65302f66696c6530002548b566d1e08f157392bedeb3d4ba41c2a3eed4455a240d3d62c649124459275a7299be7f70c1fa61e87c85110ab447b14caaa123b6d738ce9cec22d2bf2e45c86ed0dad12e6169a8bb7abf6900cc228bda0db9607aac6003b65802cf0354c8e89603e2ed5d8f5085fce02a1ee98d038ad72e4f08b7fa5a97110f3943c5cfd8d6182c61"]) [ 848.782173] ? fault_around_bytes_set+0x83/0xa0 16:25:22 executing program 5: setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x9, 0x5, 0x5, 0x7, 0xff, 0x9, 0xfffb}, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6096153f00183afffe800000000000000000002000000000ff0200000000000000000000000000018800907860000000fc000000000000000000000000000010"], 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf={0x5d, &(0x7f0000000140)="8d806b9f81c69668462cc5fab372af39656027c993e8f7f5205da676e237dee5539b100870d846d690b6e3f13f1c61d4ce137b3773ed92f09b124765219f632daf2462b6479c58806da0fc8cdb7609f6ee0182dc135abc6ed4532ced7b"}) [ 848.782196] ? lock_downgrade+0x6d0/0x6d0 [ 848.782223] ? cap_capable+0x1cd/0x230 16:25:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 848.782251] ? security_capable+0x95/0xc0 [ 848.782278] ? capable+0xe1/0x100 [ 848.782305] sg_new_write.isra.0+0x529/0x770 [ 848.782334] ? sg_common_write.constprop.0+0x1a30/0x1a30 16:25:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 7) [ 848.782356] ? lock_downgrade+0x6d0/0x6d0 16:25:22 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) [ 848.782399] ? _cond_resched+0x10/0x30 [ 848.782421] ? scsi_block_when_processing_errors+0x2a6/0x370 16:25:22 executing program 4: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "ebe9721bf5a36ab874eabc28af9589aa"}, 0x11, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0xc4, 0x6, @buffer={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693c4c87d2c7a040d6f2f0a89aaf3d31e66c489dac480f691223991ccf4b29c98dd8b43e77309c9fa0acb7865e3c636d87834", &(0x7f0000000480)=""/253, 0x3, 0x10030, 0xffffffffffffffff, &(0x7f0000000340)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x0, 0x0, "dbf57d"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x8b\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x45) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000003}) sendfile(r1, r4, &(0x7f0000000000)=0x8, 0x7fff) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) unshare(0x48020200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) [ 848.782444] ? scsi_check_sense+0x10f0/0x10f0 [ 848.782470] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 848.782490] ? SOFTIRQ_verbose+0x10/0x10 [ 848.782511] ? find_held_lock+0x2c/0x110 [ 848.782543] sg_ioctl_common+0x828/0x2570 16:25:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f465", 0x33, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 848.782570] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 848.782595] ? do_vfs_ioctl+0x283/0x10d0 16:25:22 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x162e, &(0x7f0000000040)={0x0, 0x9e0, 0x4, 0x0, 0x365}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000480)="a7d168d8dfc3fd8ea2ff0abffa74a4554faf10d3097d4ff9851d66b80e079c65cc4c5d78cf4942542d99ab1bbee415ea00ed75b40676f039f27af47ed0921280050886f9661fb2e8c7015b8ffefa256967703f0243c225e5306d300d220d276525e877a8a6ba1767a5eef04ca5c216c9ff34d5a82aba8b2d3f287a25ca67a8", 0x7f}, {&(0x7f0000000380)="b25fab601135ad43e752a4668e94495e306f0277f074b41234655ba0952d5c2e61aae2def719870678a2d82b29d3646ed5d9787b", 0x34}, {&(0x7f0000000640)="5d125a11a0bac0284a638141850eddeeb928ba95d48d17d89374b42e2898f81ccf8d64b51b1f6bc788dab345eb31ff6833a9fb86622fabf21fdcf40033dcc65a6b09397a7838a6aed1c0c3a90b580d9d78adf9c4d303c5a3f9cd594e5a88451cdf6cd7a3a62c370172abbf2d9bda54765580a69729be36b6fcd3a5159a586111b3a5e2dcab536af6ca6b808787f41d72e9cdfc74934f928b1ff47864300e156479320b91fcea8ec94034c26f502086615ad38b622857a54964806604a15a07795dd7294e8aa4a0a39141a072c0f5c68bea9dad6fc4bc1adc083819eaa49e1ed5e115c25558d329e7b2", 0xe9}, {&(0x7f0000000500)}, {&(0x7f0000000540)="2d311ab9390cb2cc0109b0b9e75c4b3e69cf1cd78be046912f84083253b4aface8b8c3868af19e55e0808d39bd8af39031", 0x31}, {&(0x7f0000000740)="7edaeeb42e902656", 0x8}, {&(0x7f0000000780)="db8fcb81e70b3ce6045c5b2c2eb9ebf58c132ed6f9bf7f379e66bdbf7cce29601049e5a8c7b4f633f5e46081732492a813d220755d0cfd5edf42dd1d75ab166f1d50494789d5b7ce882c3d509d929141c66f7b91c809b00e04e6f261da2a180bbc9ce02cd66425acef82a15317e71329c77c5dacef7b2b12f663f3f8d43b62bfb0146e392c7f3652393eda13", 0x8c}, {&(0x7f0000000840)="49a5a3c812e193ff8d23f2a7dd50af46f688a02579950d6474a48d1946481762f9e74080696e3f8144c22263019f399c8d661f307114bc7bc23b9a27b4da3dc3e42d9f5d3e3dc76071d8b479b25674fec3f12c5a1cc299a1aa45c6042c33ecdee1efd463dd8eee33845a8a93df3899cfc0a1d318bc6c6f0d6f37125e0029ce868a40eec330dd87a06a4333be050e0cb0057d928bd0af24e8529c0d3b9638f71372496d5b3fb9676fb65c3f48e2c2f9336f97ccfbdb0b3199153673b7924b", 0xbe}, {&(0x7f0000000900)="8cedddadfca5f523961007f09589c3", 0xf}], 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x11, r0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r6, 0x0, &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x12345, {0x0, r7}}, 0x3) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) recvmmsg(r8, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xfe}], 0x1, 0x10062, 0x0) r9 = socket$inet(0x2, 0x80000, 0x10000) r10 = getpgrp(0x0) r11 = pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r9, 0x0) open_tree(r12, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000000)=r10) [ 848.782615] ? sg_write+0x120/0x120 [ 848.782635] ? generic_block_fiemap+0x60/0x60 [ 848.782656] ? lock_downgrade+0x6d0/0x6d0 [ 848.782676] ? __mutex_unlock_slowpath+0xe1/0x600 [ 848.782699] ? wait_for_completion_io+0x270/0x270 [ 848.782733] ? selinux_file_ioctl+0xb6/0x270 [ 848.782753] ? sg_compat_ioctl+0x120/0x120 [ 848.782776] sg_ioctl+0x8f/0x120 [ 848.782801] __x64_sys_ioctl+0x19a/0x210 [ 848.782826] do_syscall_64+0x33/0x40 [ 848.782848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.782862] RIP: 0033:0x7f16a9b0ab19 [ 848.782881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.782893] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.782916] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 848.782928] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 848.782941] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 848.782953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.782965] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 848.806419] FAULT_INJECTION: forcing a failure. [ 848.806419] name failslab, interval 1, probability 0, space 0, times 0 [ 848.806442] CPU: 0 PID: 7382 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 848.806453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.806459] Call Trace: [ 848.806485] dump_stack+0x107/0x167 [ 848.806508] should_fail.cold+0x5/0xa [ 848.806530] ? create_object.isra.0+0x3a/0xa20 [ 848.806553] should_failslab+0x5/0x20 [ 848.806573] kmem_cache_alloc+0x5b/0x310 [ 848.806593] ? mark_held_locks+0x9e/0xe0 [ 848.806618] create_object.isra.0+0x3a/0xa20 [ 848.806634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 848.806661] kmem_cache_alloc_bulk+0x168/0x320 [ 848.806689] io_submit_sqes+0x6fe6/0x8610 [ 848.806743] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 848.806761] __do_sys_io_uring_enter+0x6b2/0x1890 [ 848.806785] ? find_held_lock+0x2c/0x110 [ 848.806812] ? io_submit_sqes+0x8610/0x8610 [ 848.806839] ? __mutex_unlock_slowpath+0xe1/0x600 [ 848.806861] ? wait_for_completion_io+0x270/0x270 [ 848.806885] ? rcu_read_lock_any_held+0x75/0xa0 [ 848.806903] ? vfs_write+0x354/0xb10 [ 848.806923] ? fput_many+0x2f/0x1a0 [ 848.806944] ? ksys_write+0x1a9/0x260 [ 848.806965] ? __ia32_sys_read+0xb0/0xb0 [ 848.806997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 848.807029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 848.807053] do_syscall_64+0x33/0x40 [ 848.807073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.807085] RIP: 0033:0x7f16dfbacb19 [ 848.807104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.807114] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 848.807136] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 848.807147] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 848.807158] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 848.807168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.807179] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 848.819448] loop6: detected capacity change from 0 to 2048 [ 848.849002] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 848.949133] FAULT_INJECTION: forcing a failure. [ 848.949133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 848.949157] CPU: 0 PID: 7401 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 848.949168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 848.949174] Call Trace: [ 848.949200] dump_stack+0x107/0x167 [ 848.949222] should_fail.cold+0x5/0xa [ 848.949248] __alloc_pages_nodemask+0x182/0x600 [ 848.949270] ? _down_write_nest_lock+0x160/0x160 [ 848.949290] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 848.949308] ? vmacache_find+0x55/0x2a0 [ 848.949346] alloc_pages_current+0x187/0x280 [ 848.949364] ? exc_page_fault+0xca/0x1a0 [ 848.949388] kmalloc_order+0x35/0x160 [ 848.949414] kmalloc_order_trace+0x14/0xa0 [ 848.949437] blk_rq_map_user_iov+0x2aa/0x1a60 [ 848.949459] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 848.949475] ? trace_hardirqs_on+0x5b/0x180 [ 848.949497] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 848.949530] ? blk_rq_unmap_user+0x750/0x750 [ 848.949549] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 848.949571] ? __import_iovec+0x458/0x590 [ 848.949602] ? import_iovec+0x83/0xb0 [ 848.949630] sg_common_write.constprop.0+0xba7/0x1a30 [ 848.949663] ? sg_build_indirect.isra.0+0x710/0x710 [ 848.949682] ? fault_around_bytes_set+0x83/0xa0 [ 848.949701] ? lock_downgrade+0x6d0/0x6d0 [ 848.949725] ? cap_capable+0x1cd/0x230 [ 848.949758] ? capable+0xe1/0x100 [ 848.949789] sg_new_write.isra.0+0x529/0x770 [ 848.949815] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 848.949835] ? lock_downgrade+0x6d0/0x6d0 [ 848.949880] ? _cond_resched+0x10/0x30 [ 848.949900] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 848.949920] ? scsi_check_sense+0x10f0/0x10f0 [ 848.949944] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 848.949962] ? SOFTIRQ_verbose+0x10/0x10 [ 848.949981] ? find_held_lock+0x2c/0x110 [ 848.950010] sg_ioctl_common+0x828/0x2570 [ 848.950033] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 848.950054] ? do_vfs_ioctl+0x283/0x10d0 [ 848.950072] ? sg_write+0x120/0x120 [ 848.950090] ? generic_block_fiemap+0x60/0x60 [ 848.950109] ? lock_downgrade+0x6d0/0x6d0 [ 848.950127] ? __mutex_unlock_slowpath+0xe1/0x600 [ 848.950148] ? wait_for_completion_io+0x270/0x270 [ 848.950179] ? selinux_file_ioctl+0xb6/0x270 [ 848.950197] ? sg_compat_ioctl+0x120/0x120 [ 848.950218] sg_ioctl+0x8f/0x120 [ 848.950240] __x64_sys_ioctl+0x19a/0x210 [ 848.950262] do_syscall_64+0x33/0x40 [ 848.950282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 848.950294] RIP: 0033:0x7f16a9b0ab19 [ 848.950312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 848.950322] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.950344] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 848.950355] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 848.950366] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 848.950376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.950387] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 849.021659] loop6: detected capacity change from 0 to 2048 [ 849.025800] FAULT_INJECTION: forcing a failure. [ 849.025800] name failslab, interval 1, probability 0, space 0, times 0 [ 849.025825] CPU: 0 PID: 7410 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 849.025835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.025842] Call Trace: [ 849.025867] dump_stack+0x107/0x167 [ 849.025891] should_fail.cold+0x5/0xa [ 849.025914] ? create_object.isra.0+0x3a/0xa20 [ 849.025937] should_failslab+0x5/0x20 [ 849.025956] kmem_cache_alloc+0x5b/0x310 [ 849.025977] ? mark_held_locks+0x9e/0xe0 [ 849.026001] create_object.isra.0+0x3a/0xa20 [ 849.026017] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 849.026051] kmem_cache_alloc_bulk+0x168/0x320 [ 849.026079] io_submit_sqes+0x6fe6/0x8610 [ 849.026121] ? __mutex_lock+0x4fe/0x10b0 [ 849.026148] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 849.026166] __do_sys_io_uring_enter+0x6b2/0x1890 [ 849.026195] ? _raw_spin_unlock_irq+0x1f/0x30 [ 849.026212] ? _raw_spin_unlock_irq+0x27/0x30 [ 849.026232] ? io_submit_sqes+0x8610/0x8610 [ 849.026251] ? finish_task_switch+0x126/0x5d0 [ 849.026266] ? finish_task_switch+0xef/0x5d0 [ 849.026282] ? __switch_to+0x572/0xf70 [ 849.026298] ? __switch_to_asm+0x3a/0x60 [ 849.026313] ? __switch_to_asm+0x34/0x60 [ 849.026338] ? __schedule+0x82c/0x1ea0 [ 849.026370] ? io_schedule_timeout+0x140/0x140 [ 849.026389] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 849.026411] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 849.026431] ? ksys_write+0x1a9/0x260 [ 849.026460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 849.026480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 849.026504] do_syscall_64+0x33/0x40 [ 849.026523] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.026536] RIP: 0033:0x7f16dfbacb19 [ 849.026554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.026565] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 849.026586] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 849.026597] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 849.026608] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.026619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.026630] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 849.048851] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 849.136643] FAULT_INJECTION: forcing a failure. [ 849.136643] name failslab, interval 1, probability 0, space 0, times 0 [ 849.136665] CPU: 1 PID: 7419 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 849.136676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.136682] Call Trace: [ 849.136706] dump_stack+0x107/0x167 [ 849.136736] should_fail.cold+0x5/0xa [ 849.136760] ? create_object.isra.0+0x3a/0xa20 [ 849.136782] should_failslab+0x5/0x20 [ 849.136800] kmem_cache_alloc+0x5b/0x310 [ 849.136825] create_object.isra.0+0x3a/0xa20 [ 849.136839] ? kasan_unpoison_shadow+0x33/0x50 [ 849.136863] kmalloc_order+0xfe/0x160 [ 849.136887] kmalloc_order_trace+0x14/0xa0 [ 849.136910] blk_rq_map_user_iov+0x2aa/0x1a60 [ 849.136937] ? copy_user_generic_string+0x2c/0x40 [ 849.136964] ? iovec_from_user+0x104/0x400 [ 849.136983] ? blk_rq_unmap_user+0x750/0x750 [ 849.137003] ? __import_iovec+0x458/0x590 [ 849.137033] ? import_iovec+0x83/0xb0 [ 849.137059] sg_common_write.constprop.0+0xba7/0x1a30 [ 849.137089] ? sg_build_indirect.isra.0+0x710/0x710 [ 849.137107] ? fault_around_bytes_set+0x83/0xa0 [ 849.137127] ? lock_downgrade+0x6d0/0x6d0 [ 849.137149] ? cap_capable+0x1cd/0x230 [ 849.137180] ? capable+0xe1/0x100 [ 849.137203] sg_new_write.isra.0+0x529/0x770 [ 849.137227] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 849.137245] ? lock_downgrade+0x6d0/0x6d0 [ 849.137283] ? _cond_resched+0x10/0x30 [ 849.137302] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 849.137321] ? scsi_check_sense+0x10f0/0x10f0 [ 849.137343] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 849.137360] ? SOFTIRQ_verbose+0x10/0x10 [ 849.137377] ? find_held_lock+0x2c/0x110 [ 849.137405] sg_ioctl_common+0x828/0x2570 [ 849.137427] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 849.137446] ? do_vfs_ioctl+0x283/0x10d0 [ 849.137464] ? sg_write+0x120/0x120 [ 849.137481] ? generic_block_fiemap+0x60/0x60 [ 849.137498] ? lock_downgrade+0x6d0/0x6d0 [ 849.137515] ? __mutex_unlock_slowpath+0xe1/0x600 [ 849.137535] ? wait_for_completion_io+0x270/0x270 [ 849.137564] ? selinux_file_ioctl+0xb6/0x270 [ 849.137580] ? sg_compat_ioctl+0x120/0x120 [ 849.137600] sg_ioctl+0x8f/0x120 [ 849.137621] __x64_sys_ioctl+0x19a/0x210 [ 849.137641] do_syscall_64+0x33/0x40 [ 849.137660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.137672] RIP: 0033:0x7f16a9b0ab19 [ 849.137689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.137698] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.137718] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 849.137729] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 849.137739] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.137749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.137760] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 849.157648] FAULT_INJECTION: forcing a failure. [ 849.157648] name failslab, interval 1, probability 0, space 0, times 0 [ 849.157675] CPU: 0 PID: 7420 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 849.157689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.157697] Call Trace: [ 849.157728] dump_stack+0x107/0x167 [ 849.157758] should_fail.cold+0x5/0xa [ 849.157787] ? create_object.isra.0+0x3a/0xa20 [ 849.157817] should_failslab+0x5/0x20 [ 849.157840] kmem_cache_alloc+0x5b/0x310 [ 849.157867] create_object.isra.0+0x3a/0xa20 [ 849.157883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 849.157910] kmem_cache_alloc_bulk+0x168/0x320 [ 849.157938] io_submit_sqes+0x6fe6/0x8610 [ 849.157992] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 849.158010] __do_sys_io_uring_enter+0x6b2/0x1890 [ 849.158042] ? find_held_lock+0x2c/0x110 [ 849.158068] ? io_submit_sqes+0x8610/0x8610 [ 849.158096] ? __mutex_unlock_slowpath+0xe1/0x600 [ 849.158118] ? wait_for_completion_io+0x270/0x270 [ 849.158142] ? rcu_read_lock_any_held+0x75/0xa0 [ 849.158159] ? vfs_write+0x354/0xb10 [ 849.158179] ? fput_many+0x2f/0x1a0 [ 849.158201] ? ksys_write+0x1a9/0x260 [ 849.158221] ? __ia32_sys_read+0xb0/0xb0 [ 849.158254] do_syscall_64+0x33/0x40 [ 849.158274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.158287] RIP: 0033:0x7f16dfbacb19 [ 849.158305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.158316] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 849.158338] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 849.158349] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 849.158359] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.158370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.158381] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 849.229469] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.229521] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 849.229543] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 849.229562] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 849.229581] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 849.229600] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 849.229618] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 849.229637] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 849.229655] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 40 d7 b0 98 62 51 2d df ba 11 b9 33 ad fc [ 849.229674] sd 0:0:0:0: [sg0] tag#0 CDB[70]: f9 40 99 0e 19 06 57 32 01 df da ea 31 fc 56 cf [ 849.229692] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 08 a2 4d 89 25 ff 9c 02 6e 91 4e 53 00 b3 00 ee [ 849.229711] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 42 b6 93 c4 c8 7d 2c 7a 04 0d 6f 2f 0a 89 aa f3 [ 849.229729] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: d3 1e 66 c4 89 da c4 80 f6 91 22 39 91 cc f4 b2 [ 849.229748] sd 0:0:0:0: [sg0] tag#0 CDB[b0]: 9c 98 dd 8b 43 e7 73 09 c9 fa 0a cb 78 65 e3 c6 [ 849.229765] sd 0:0:0:0: [sg0] tag#0 CDB[c0]: 36 d8 78 34 [ 849.231247] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.283316] loop6: detected capacity change from 0 to 2048 [ 849.301202] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 849.450632] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 849.450681] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 849.450702] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 849.450721] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 849.450740] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 849.450758] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 849.450777] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 849.450795] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 849.450813] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 40 d7 b0 98 62 51 2d df ba 11 b9 33 ad fc [ 849.450831] sd 0:0:0:0: [sg0] tag#0 CDB[70]: f9 40 99 0e 19 06 57 32 01 df da ea 31 fc 56 cf [ 849.450850] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 08 a2 4d 89 25 ff 9c 02 6e 91 4e 53 00 b3 00 ee [ 849.450868] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 42 b6 93 c4 c8 7d 2c 7a 04 0d 6f 2f 0a 89 aa f3 [ 849.450886] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: d3 1e 66 c4 89 da c4 80 f6 91 22 39 91 cc f4 b2 [ 849.450904] sd 0:0:0:0: [sg0] tag#0 CDB[b0]: 9c 98 dd 8b 43 e7 73 09 c9 fa 0a cb 78 65 e3 c6 [ 849.450921] sd 0:0:0:0: [sg0] tag#0 CDB[c0]: 36 d8 78 34 16:25:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:25:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x2, 0x15, 0xff, 0x0, 0x2, 0x71540, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20080, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x1020, 0x1, 0xeaa, 0x1, 0x0, 0xc00, 0x5, 0x0, 0xfffffff8, 0x0, 0x8}, 0x0, 0x7, r0, 0x9) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="14aa4feeaf178521dbf43f4180c159fc764916abdea39ad724b0aaea608eb89723ffb795dafdace0cea7", 0x2a, 0x1000}, {&(0x7f00000001c0), 0x0, 0xbff}], 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="6e725f696e6f6465733d6f30313738302d37782d2c736d61636b66736861743d522c666f776e65723eaa67f9cb29fb517368835ff8ce5c862338d0442b5099bb6c509a92730adaf5c654ec2202e615dd397dccb6a3a1243fa571bf65d3d487d5bcb8209018b58ee71ae239f7bbdfb181c9261c91af129cf1ff5b19bb6f141da263450e961e200cea3c8f42fca515696baa8866e231ecbae89758f4cddc4d3b0a52b3c2f091b863fc869c176c0fa68772359e354058eeb5225895ed1e2eb1ddaeee4e7fbd2987b893ec73cb5a9b191a14d1a40138d2650dc6d00ade71e5e709a18f6303a018afa74039d9443bb26026930dbc58", @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=]),fsmagic=0x000000007fffffff,\x00']) 16:25:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 8) 16:25:36 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 16:25:36 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x0, 0x9]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) r4 = dup3(r1, r1, 0x80000) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x5, 0x9, 0x6, 0x0, "f99acecf0c7f6cd10e7cdd018f13cfe216dc66cf47b2f2e0513b0311a60a8c7bcee9232b5d49458873e9a1651e06bb3c35dfb6f8cf063d4e04836b4c3d424dd6", "f3e1a56dda72104d52ab4d6162c3adc9dd38ee9683e9da12c5433656e9a9d89e", [0x80000001, 0x4]}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99"}) creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf4) acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16:25:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f465", 0x33, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:25:36 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000dc0)=@ethtool_sset_info={0x19}}) syncfs(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x603) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @private0, 0x8}}, 0x0, 0x0, 0x2f, 0x0, "aa3262f5718a75c5e4c107b36be5b731cc4ae77e17704e82b2f5a9337ad14b50884654f3309f0ef8bd0753b6aa533ec31376d261e48a66f039d98a9ac4d5d3ad5ba22181cac531a7c335b46ce3d875ce"}, 0xd8) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)=ANY=[]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00'}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 16:25:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r3, 0x1, 0x8000, 0x0, {{}, {@val={0x8, 0x1, 0x208}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x0, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "6b1c867d0bab758b4a2ebfbff734ae98d0666bad928688d8c496a9c9e4f0feb16e2764f33d568d577b812b3e5fcd2d52dd262ff32f6c82ccfe4fb6b88ccbdd9ea9159bd1e1702984d18a9e631ba3e5395322ab702cec405711c355915cb447b3eb2f237730e033539852a48402a9f812ffe1c71a7942f633dd2f3087c48ff4c0ba071856bc3be7df4a8b38315e116791ec36ce4afb940b1ff76f08dbfc02d8d42c430914f99274bfc5273185a3369fbdc26e7cbc684c53f8c7f34e80e40de5cb917b61eba9f17fb535d1fe97dd"}, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "f587e6e361e71332527f06ca56b5f7bd4cb133d393d086fa91ce8e86d157c7277a6df564df7c13da50bc12a3435fcb9f0bb3f6a894cfc7feb8a41d61c6041d0f69a904e1dfc2b92a30403aac6d7ca84a"}, @NL80211_ATTR_VENDOR_ID={0x0, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x0, 0xc4, 0xfffffff7}, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "23a7e0398e10a83034716a503390791b1a03e44df086b2c05fc0addf5429f2186540f7ce62a709379f1c6df7c519abf43a1175c6b59624d3c6a3158dcf2d5115606dd53863c8419fa2e94b8a8b3774d5f4ec690d4f6503b5c35a6461b3af102346445e3610e9bdc872e18467ed67c0fcd51e596116bb5a5f4303bd86ee5c708d44288741cb0ec57741abe83a249cb480bc79f9cd30c631a24dee0baa4159fade0f6dae3bc6e90262106848733f5265ee1c7d0a93c5b1f1c68173dc3fbfc502b285bc33decbb1"}]}, 0x30}}, 0x0) [ 863.584031] FAULT_INJECTION: forcing a failure. [ 863.584031] name failslab, interval 1, probability 0, space 0, times 0 [ 863.586529] CPU: 1 PID: 7449 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 863.587984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.589731] Call Trace: [ 863.590295] dump_stack+0x107/0x167 [ 863.591063] should_fail.cold+0x5/0xa [ 863.591954] ? bio_alloc_bioset+0x3b7/0x600 [ 863.593001] should_failslab+0x5/0x20 [ 863.593804] __kmalloc+0x72/0x390 [ 863.594540] bio_alloc_bioset+0x3b7/0x600 [ 863.595412] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 863.596493] ? trace_hardirqs_on+0x5b/0x180 [ 863.597403] ? bvec_alloc+0x2f0/0x2f0 [ 863.597925] loop6: detected capacity change from 0 to 2048 [ 863.598206] ? kmalloc_order+0xfe/0x160 [ 863.598247] blk_rq_map_user_iov+0x473/0x1a60 [ 863.601287] ? copy_user_generic_string+0x2c/0x40 [ 863.602314] ? iovec_from_user+0x104/0x400 [ 863.603210] ? blk_rq_unmap_user+0x750/0x750 [ 863.604147] ? __import_iovec+0x458/0x590 [ 863.605040] ? import_iovec+0x83/0xb0 [ 863.605853] sg_common_write.constprop.0+0xba7/0x1a30 [ 863.606934] ? sg_build_indirect.isra.0+0x710/0x710 [ 863.607995] ? fault_around_bytes_set+0x83/0xa0 [ 863.608974] ? lock_downgrade+0x6d0/0x6d0 [ 863.609853] ? cap_capable+0x1cd/0x230 [ 863.610675] ? capable+0xe1/0x100 [ 863.611415] sg_new_write.isra.0+0x529/0x770 [ 863.612335] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 863.613462] ? lock_downgrade+0x6d0/0x6d0 [ 863.614372] ? _cond_resched+0x10/0x30 [ 863.615176] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 863.616395] ? scsi_check_sense+0x10f0/0x10f0 [ 863.617324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 863.618432] ? SOFTIRQ_verbose+0x10/0x10 [ 863.619287] ? find_held_lock+0x2c/0x110 [ 863.620170] sg_ioctl_common+0x828/0x2570 [ 863.621055] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 863.622142] ? do_vfs_ioctl+0x283/0x10d0 [ 863.622997] ? sg_write+0x120/0x120 [ 863.623766] ? generic_block_fiemap+0x60/0x60 [ 863.624716] ? lock_downgrade+0x6d0/0x6d0 [ 863.625595] ? __mutex_unlock_slowpath+0xe1/0x600 [ 863.626614] ? wait_for_completion_io+0x270/0x270 [ 863.627636] ? selinux_file_ioctl+0xb6/0x270 [ 863.628569] ? sg_compat_ioctl+0x120/0x120 [ 863.629462] sg_ioctl+0x8f/0x120 [ 863.630177] __x64_sys_ioctl+0x19a/0x210 [ 863.631033] do_syscall_64+0x33/0x40 [ 863.631815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.632913] RIP: 0033:0x7f16a9b0ab19 [ 863.633694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.637601] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.639216] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 863.640731] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 863.642235] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.643745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.645257] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 863.659830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 863.661628] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 863.665746] loop0: detected capacity change from 0 to 8192 [ 863.670743] Process accounting resumed [ 863.670976] FAULT_INJECTION: forcing a failure. [ 863.670976] name failslab, interval 1, probability 0, space 0, times 0 [ 863.674435] CPU: 0 PID: 7448 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 863.675981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.677863] Call Trace: [ 863.678466] dump_stack+0x107/0x167 [ 863.679300] should_fail.cold+0x5/0xa [ 863.680180] ? create_object.isra.0+0x3a/0xa20 [ 863.681217] should_failslab+0x5/0x20 [ 863.682084] kmem_cache_alloc+0x5b/0x310 [ 863.683014] ? mark_held_locks+0x9e/0xe0 [ 863.683955] create_object.isra.0+0x3a/0xa20 [ 863.684958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 863.686124] kmem_cache_alloc_bulk+0x168/0x320 [ 863.687179] io_submit_sqes+0x6fe6/0x8610 [ 863.688177] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 863.689310] __do_sys_io_uring_enter+0x6b2/0x1890 [ 863.690410] ? find_held_lock+0x2c/0x110 [ 863.691353] ? io_submit_sqes+0x8610/0x8610 [ 863.692362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 863.693479] ? wait_for_completion_io+0x270/0x270 [ 863.694593] ? rcu_read_lock_any_held+0x75/0xa0 [ 863.695658] ? vfs_write+0x354/0xb10 [ 863.696524] ? fput_many+0x2f/0x1a0 [ 863.697363] ? ksys_write+0x1a9/0x260 [ 863.698241] ? __ia32_sys_read+0xb0/0xb0 [ 863.699180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 863.700391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 863.701593] do_syscall_64+0x33/0x40 [ 863.702457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.703645] RIP: 0033:0x7f16dfbacb19 [ 863.704518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.708760] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 863.710517] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 863.712168] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 863.713811] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.715463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.717108] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 [ 863.793733] Process accounting resumed 16:25:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:25:36 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x11, 0x80, 0xc2, 0x24}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x27}}, "dfe34aa5edde5634"}}}}}, 0x0) 16:25:36 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ff", 0x37, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) [ 863.965869] FAULT_INJECTION: forcing a failure. [ 863.965869] name failslab, interval 1, probability 0, space 0, times 0 [ 863.968586] CPU: 1 PID: 7476 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 863.970035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.972025] Call Trace: 16:25:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffff) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$unix(r4, &(0x7f0000001280)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x1000}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000740)) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r10, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$unix(r4, &(0x7f00000005c0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001e00)="c1d8e2ed8b408cfdcf21d1655431e6e54d63cfc29617f450ffa2f027fe7e8f1ee959722dbd128c546c51cd58bc65ae2339cd1be8885cc7f02a2bad85f0cd0ba48eac7c9ecb4ad6cad2009b5182de6c3ef8ce834fa86990bc110c382998f224b21af7638a4dfb90125be5ff7dab72fb8c5b2bc156b635466213bc064531918f0fb65247606f89b762a96c6097ac78435545e60844520186f696cd3856deba7dabca288388a3d0a01a9c4cc5110af9c4b5197097da2d73ecc6f8b2dc0bb46613587babadfef490da90bcc52ee4026758c6b3b8783d85c1d9f42d384bc6dde2e706f5a35ed6a00b8d9fe814e1b42920a4930d02e4cb72b6fe2d5d5c16fdbae39bfb8799cb91ab6ce436ef0180ceecf7017eca1d91ea2b5980b24716d6e5293b2d300e1540319d6acdd94617006ec3ac02070cf2f7aa79298cde00ded8c098dcd9580e4aeacc7f72bc301adc88f9eaa022f71211ce36e66ce530112696f7630f5cb04bc7b517f9c68622c8d8644b049de797da7e1cf0a9a232146bb83d58fbe8474866db0b7407d8d1b04067e92bccc5c21bbcc034b92edabda81a1a9dba869165dc1688f3eb245c677c3ece03217f3ad604dfa0598ddeef8f7ad296f56893d1289f1221133ec63a9d5edbbc75d7741c761c6e5f00496dce1a2103bf5c55fa60892fa958baa300d3521be1ba7687219fd7e85270b8170c590a1ef14a4637768dbf3f77a2f68dfd6a65bb2460e66b5bcc6e18b0103a2a20b300097915546c412d45c29b2624c18c5e9bf8db7ec9b42d8978aaa7cd43010878cc600d0a651e5345ee5c36dc21f897ae4f60ad22ae590d98e3aba1280525e144817fe4787b3747a5f648ec5e30cb6efbed48a078e76eda519b9d3d4896d6e95e1ab708ae26c81ac634fe8c2a7ebfe1d1a0b0a48aa196ca29a65ad5bb485d416094375f63a1b646b44d1fe3acea6066b3ca8bb3bea84a36245db0b3e15bf38676df45e97dc6d1a5cee23f949cb266c60787829e85b4eccc1d1e232f247df83e43e610596717a098cad2ab63d072bd50b2ffabb11276ae9d5acf12e70c0226049780ca5f37005d8f65f5b6a2d01c833f90e2aeee9164e3833b9fca393c570ffe9545922e1027df1e38d8237fc369b6d6cdb2f59a54a6103170114829f3ecd77a049c20b9b573f7ec7850558d8fd438a4664f6c6c9aa94e3334fa177cda6f2efb7c79c216ab500cb524969d8e3c238cbeacd52debc8ae6b38c773e340eedcfbe900e618a1212b2e85b136c4d86b79a4eb298fb822081ce9741dce41f083d5f7e86dafa18f7c4b3973a482b5a4c088c8d0fe90af13e75c8b5668ab5f30b2e2d1cc4ce4dcb14ab60c5993d5a87768f954b90d98a81e4ec8cb6f8c66bcbeb18c5c08f81bf33adbddacd5146585ff3a9984d110f426774392e4655be68e6c9789a1970d5a19c54ecdfc400237e69bdaf826836b14bf9962587f97656ad457fc5efa72cf0ab545e3f9f7b4acdab1ec4c7a1d4a9cf4204ea3e89bfb945447827f0dd684f0efb5b5f6a9a070baa0bba0e497ecabcc207edb303c9497c460a3c646a6e092ae8440b7b3d2209cf27472b972686d9960389e22fd16abd9243c46aec9674340bfb54f423f35f0987e890f0964b0685a84f8c2976bd559b8fd5cdd921b6c811db88a9dc28826702f6279041d127c6da538cd5cc43ed658d1574f23ddaae5690c517d74278f1fa4314db198be617d50ccb994855599b9905df43012f00d3ee2b3d4c4a0564416e391a48af3e73d706d2da9a9bf7ddb72a8d67c6e3b404798dae46647538918fad899b37ac93a56f8ef5462990ed86e9803219db2eac8f6cd7f9c63b1fe3c6034fd4e7aa5ff700a622402fa51a83af6d0c615d3cf0ad66945b96130ac4d8866448066cd3fb717f53d5e89849ca0c82ba447dd3fcd87c8a20b9c842b9780b5dc8eccfa8c7b0373e2c9e671745d72d21c96565b7bbdaeae11826603def366af4adc34e3b147bc09177f3d11f2b750a3e8506661aac6b303f63b2a6df6a5b2770b63c1d10953e96c675410e76d24f6386cd65aa52979f5df8d4177e91ffae408144a8c7c67f5dd600137a415e17e683dd6fa576ba530f1869a5c6750b2d236a681c73e4293b8097d69b22a0b438de6a9722d8a005fe57b77bc3559dbdd4a383cc814e64c583113fbc80f68d975155b3be6a451414412aa7b1d28c43b393e4a598e7bf297f6452952c14a878c350bcf4c052ba48ab53663b0fd666b1d1ded8b8418a2a5da7a58ce446fed16c9555723911a4baadb4c5bab4fa096d46ce39d61ef9528e44932266861c0c98e0799eb31e20d5c26326461d3ffd1dd3cb57b29a255cc144b02362da9fa292fcd02f7ff420a97e6d8c938f8ca3b17ee042e00a76b464d88c021016567979ae3e7f78e7481e3b49ffa8632ac19301348e6bf6caddca90a8cb34d1a9c336847fbdad821bd1de11fc023b0b9ada3a7c7457764cb31c0a872c793d6f5b43a553703b6eb49746aa27bda803b9e714b25eaebd0e395e04f6fd0e35ced7964038df429da91a83a0e761321e63d9c7c0fbde1311bb956ea3deb5a8ad59ef2ddd10bf96df47ed0be94e3121fd9e6c709353791a3fd5b50d5611463e8bd4814a81ea1216b9414c6dd6b67f6c0792248b69816dd4ad27c11a8e03c8bf3e45d551596024790eb3605f276d088994981fb1dee5e2f3f65f1b9982791170baaa0d763d2dd62f6df36072363982692291ed14003123fe390fdaf4587a94f174ca508f010c078757788caa16f97eb948300ef882d09a23668138f0e295d72809987013520fcfaf9b95b1ddf80f84060e82f0ac84a44eaaefeb9cb886c67be54a4d5f875b7bb2705566a191bd5a9f8d9283d9ca9b730916170ad91fcec75053dac898e88deb279fad33d088c18bc462a8986676f4390ce6b13f98c8c4223c19f9e4e327adc10f48547fd38bf2713e6b2f67bcfe4646b6860bea750066516ab51616d9fd1879feabcae40e8377fd442eee81c2e9020dbd67a46715fff1a347bdc0dd2535cb16125452348916de4c7e0dc3529700091b32a0ccc25754f4b054c7a3040c72570afa9b6cc9bfc89e42dbdbb965fd73b14cf44ce13fd2493a87b3bcb6ca476a085730056ade654d2d6a2f4f9f39801b43fb1574de15b262c9105bfd0deb62758eaeed3313e01fec1f137b998b3fee8d435f2d936ae3484bf354c0c8b621f5cb4c37473b7b1f6b90d92034e961ddccec3b1cfa92b34571185622331b9fb29a3044052147859fe2112e0a11400c4df36a8b8f1fa60ba3febe4362348f977a3229ad88b8ca94434b7aa6e62e3e44f57fcd621a4556cea122ff9689ada7a88ec2f09399b6e1e4c081cbba8e1f02b8d00deeaf6718bba9f442138a74fb79fdb6281311d1405010000006e762d55621aa94e6219939341ff7a32ce593e52b67b2707410c8a211f8a9ce40a335e242561f84afd5d0252a7111c705d9d48157a04aa08f5dc353ad8e2dadb8ffa9f3cb5eeb55a0fb662bdd3d2be8f350e6296d95649ae97b787414284e74d9dfd199e0952d9d315b7192d3923f7992653084364388a62bab298e8b96db658e8585bde36a9345f60c6035704b5603b40b6e21a9a3b26cdde832a4521b4fef9811c4db7b5baebb2d10de3897c8be80d4b705221ae87c51556a4b3ebb3bbd71e6cdd76833028826c6ddec3398a620fbd23122cb688b948cdb49248aaacd6032e04a2617403b82595e73acbfddfcbdd050930ae1e9db51c88bd9c706c5ef8a7d03af4ed7a402542d2c4c2ec7f18aa997bee9237ccf3b04c232b730e19da3f38395ae240f049314a0c6bad75ebdfc7dba34920deaf869200c9d19c47be01e8fa54f031e036fe97323b28d1b3b0814a42daf6c3767c498741110c70dca8e01b642c73fdee3ecb03c749404ae2930e68f93699a24994ce4919ff44c461cff9d420817e5310c3d9c40fc67789f666fcb79149006493264bda1fd4e5d3c75904ea0a3212e3aadb0d333ddb0d8fda78277cdb2b8a86db1d956be1439cbfe115c77e8aaafe832aebd4ad709a4a497ee99ae73f9754b8ea01e65084362fe1527aea801b1c502660c2d464880b7f833c73de04e8899027d41a6f2d5b29d63a4e4456deedefe6aa45afe27cecc441af97d0269ee48b065d3ce6f1e448dcaa4f4e95c34d6243ea51751c1c4bac2344cfc97a03ed6e31a1f5bdba7935605345071c9437e8e3964b2a110a3c8671ebc04328025d450932fc3fe97f11611863583cd664bc70f6b1502319d896f2d6a42b9f041da75b4e3386b14fa5baf30a0856cb6c011eaa4c046af7c66ef5c693165c461708e116457e1fc6688bc784cc05a3acc4cf49d79221449fa0481401352f8a48909b2bc37940417479843256e1d49294d11dfc0ec97828a424e4706f3ff6fbb6ed1a38bf18b0fd06c68e245f102a4de2313757503f28efaf9720aa1aafe4fd323856304bbc5cd23241fafefa32668ea9c85d28ddfd69a5dedf89d45adf2d37b9c3cbd03feb395f38ccf436a8914368f49a4a8cfdbd50687de16d0e7350b5bb6d88d9f7d30a85551607fdd5651960b58c7a7550071c73d40269c0729eca488d1104fb5f14eeedc7fa49afc0580f2f8730af87fa04164327e9b92aa55333dc2644bcef0f56ebe44388f00d89e315011739b8df5de094a916c6a298d604ff76b5ccb64cc9f94e952448a74d01f69065b3a30418f0dc6b35b009fef8a5f32686f4565d45198bb188e5ba1cead05613419f66f071b790efec3e30b34487f9a0221f7528df85f545621a7138f32e896f84bb5c86e7ee584197030dca9f52332687b444492eeee999408c83d6e3facaef95b8c48b3d403b7ece3f7d0d4f2d3bd63ff66922efd9030887f080fc75f5b69e7ced18cf8b4a5ae9e9bc8a24a1a2a743dc8ce7de3432cc941108527ec8bd93a97f970ee8735913ef5bacb5d8dc625d7098e4f10059793990ac9ba81dd8eecec7a082dc555bd94d04d4970ca92c2bac1d51de1f01d625df901da164cfab0eed30de2c74d9803d7199d536b9a40d5836075ad1e0b4bccccc11369ed3801cce3758457dd260ee34ac9099c03553e3d473e150a8dba6625ef90e6774997e0ec83a5d1832adba1ab50f3d02acfe93b2dca6fb3fe1a38498cc05c4769e8dd56d379102f7ed8b76468ad1faaf5ae1e02ebac2a0cbcad36468fe33d6605e6c9891241f39ca3479139206810adde02dcceae430f979dd485fb700ba7cbf42b80240a60f1069d3c7861efea27c302c15656ce535ac9933da32074b620be6ef82184801b2d191bfbe1e358572f484c0a07329e36d78a6b1d0ed8b1fa8cc7516a6afd7d794c4ff42ac4f293677a2358a7a32f233cdfbff5a46a7259ac586640d6300e0d5bdef864679698ed4e32ff99a82d2de1e5ea3ec4cb54ed15348f7eeec3eb77a727296bce74b5605c3e83fe5390794f3ba987fe65681cdc002229a57940ae5143ce3a268815762a167753d35512ec32462fc17845dee9cca70a1f4808a9d0b1c96f2a713789a83e17861afda3c4126ac723707b8c3a4d73f40d8671ef8012ee2244a27536fcfeb54446a68865f5bd4bb8ce389a1b2cbbe2c1eb80aef98fc179c41f87199e0ceba1648f0a6baf0f5fd893947322fdefca60c14430596a2650893f554b968f5b9c221608cfa0ef4ba226b7c273a86d508ec0d1f1fb2810796836ef3d203306b3d0da5553de4ae409b3ddd12add4ba68649c282c3ffe93b686f028a8d14ae91729d1f18084ae43ee3105a387199a7c6d24ae9c5a69f4384c194b8f72c8de3bfa3529a7e443a3a3a4c51a1ad8f051e4efe182ee1887c0e23dc7305dd5bf61246dc262e85682898a0199f6ef9e7509d724aac609017b226aae0f450b8b1aff010000000000005a20965b83211a08e16da60e3e15d2a9b507bb7040b4670cdbcd422ac469e262998e416ea54e094d70727c7b91ab5a52fc4b374b5fc87e4cc36a24f38ad087ec79383bca33156bcfd9d87d7cba65cf0778b6133fbe9f3ea5095c22835091c1a4c8ba45bd434e33f374c08cd59203b7d032f7f6df7cb144bbe14e0211594e3797de6d50a2b0be98607b95981badcc665b6f8c6f43d406d8b8403059af9d1a19d2d05a2fe23ed8d2308e808e94b14198111c104f33156a6342ef1fd1ce1780c798f5fe8c0599884e626967e3b1f4eb", 0x1112}, {&(0x7f00000002c0)="aee7a4d03e5395db8e57e082c1823902c3acdca70d07f631633d3711c159348188822d8880f893de9a21d9d21292db44f9366fd93b09772a3a2fab64529d4d79f32d564fad8a984dadbd5df5e3cb7c858a23920cecd07228544be50255059acf2f15324a4e52d2dd20de6a9df6eafb47bddbab743b5bbab7ee2b", 0x7a}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="204d8ced0a80c47779230f56c32786b6899e915e800001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000051de0000000214f300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r10, @ANYBLOB="38000000000000000100000001000000", @ANYRES16=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r6, @ANYRESOCT, @ANYRES32=r5, @ANYRES32, @ANYRESOCT, @ANYRES32=r7], 0xa8, 0x40048c4}, 0x48008) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 16:25:37 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 16:25:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 863.972727] dump_stack+0x107/0x167 [ 863.973638] should_fail.cold+0x5/0xa [ 863.974450] ? create_object.isra.0+0x3a/0xa20 [ 863.975413] should_failslab+0x5/0x20 [ 863.976226] kmem_cache_alloc+0x5b/0x310 [ 863.977080] ? mark_held_locks+0x9e/0xe0 [ 863.977937] create_object.isra.0+0x3a/0xa20 [ 863.978867] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 863.979948] kmem_cache_alloc_bulk+0x168/0x320 [ 863.980914] io_submit_sqes+0x6fe6/0x8610 [ 863.981825] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 863.982874] __do_sys_io_uring_enter+0x6b2/0x1890 [ 863.983889] ? find_held_lock+0x2c/0x110 [ 863.984745] ? io_submit_sqes+0x8610/0x8610 [ 863.985657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 863.986670] ? wait_for_completion_io+0x270/0x270 [ 863.987697] ? rcu_read_lock_any_held+0x75/0xa0 [ 863.988687] ? vfs_write+0x354/0xb10 [ 863.989474] ? fput_many+0x2f/0x1a0 [ 863.990249] ? ksys_write+0x1a9/0x260 [ 863.991053] ? __ia32_sys_read+0xb0/0xb0 [ 863.991911] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 863.993023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 863.994112] do_syscall_64+0x33/0x40 [ 863.994898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.995986] RIP: 0033:0x7f16dfbacb19 [ 863.996777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.000658] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 864.002267] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 864.003775] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 864.005287] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.006790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.008310] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 16:25:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) close(0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) syz_io_uring_setup(0x13dd, &(0x7f0000000200)={0x0, 0x23d0, 0x20, 0x2, 0x3a5}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd, 0x100000000, &(0x7f0000000400)="f8c44747e6481cf350708b9e81448b975a6a68cb170afbe090cfdda794f771ab42018bd3fc290e29f3b85bca31a885e57503137b51928cf868b7c322a5c61a22e69739c09c7629615b6e7ee4a02d6a60837d0e9ec99f41ace6094289239ed23856d03c0ddc72ed6c5ee76bebbdfaab5adc15671a9b30a56eaead6d56d3475c12cedb22032e4bc1dadef5a6275610a287dc00780607cbe2c72ce903cd8c0a34152f211357f2eb1c0f", 0xa8, 0x10, 0x1}, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) 16:25:37 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002780)={0x0, 0x80, 0xff, 0x1f, 0xff, 0x1f, 0x0, 0x100000001, 0x400a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000002740), 0x2}, 0x6000, 0xd2d9, 0x6, 0x3, 0x53fb, 0x6, 0x200, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x4, r0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000002580)=[{&(0x7f0000000180)="28df34b5d53a1662be8dee4ee06397add4f3639751db21fbba42f79dac600bf911a4", 0x22, 0x3f}, {&(0x7f00000001c0)="7cbd86a59dbdb520c8ae3a1dc79e9e228cfc7fe160dcd5e13cc313a353caae9df7467d089f5719b81a251e56cfbb45cfdfa03b4add478da3d97757dc561b35b3208be120400fad6a4fb11e52a998472c41c047e9bf7c04418913", 0x5a, 0x4815}, {&(0x7f0000000240)="13670a860eba1576401a74fc74d60e0a4660e366c3a62b7a80f11eb7f415ddd74bb0b6de", 0x24, 0xfff}, {&(0x7f0000000280)="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", 0x1000, 0x5af2}, {&(0x7f0000001280)="775d77525746769545bb069fc3d388cc31ec813ca92bbca1aee58513f67bf398afd9abb17920f69335b727671de74011dea0d2320ced0a3415c982af0f8c40e3c8ecf4cc0836b178f971a87b29fb0a0acdfe59c93ceb81fbf1db54f06b", 0x5d, 0x5fd3c004}, {&(0x7f0000001300)="6774e321e25038d933e352dd601688b549995064e11041a54ac112c7b4e719600a1c5bc86d8875be0db22da7a25d1fa09b6df6bceda28b5636a6a647d6d2e86b9bac106aaee954eed6dbb042d21b84fe8fc04f4125858063d0258e1c850422f2c114066b112e651661d27f9488d971d4c86b0c31e63614e04440302a48840c94fb130ba21ed4a931219bba4cb34a74d83073a0be6fa70e437036", 0x9a, 0x100}, {&(0x7f00000013c0)="d0c7b092de52f6a603d0c25708ed8ce9fa5a1f3546fdbbc305211c3706d3811a6fed64f1d547d5559aeacfe123fc2b04afcb4435974b32505bce74075e9d34a4072efbd04b218b9f80f74339d0bc5050b27cd60248463edd37b7f66bda83e05ca79e14c561fe6c95a211724415e5af6ad87f1fd8932cbd9d3fec00aff5a030605f23a80d99461a8c6f415e75eca19bf3339508dbef8da8d5079f8af9448ecb2a6bc8b921c0e6f788828ea05d", 0xac, 0x80000000}, {&(0x7f0000001480)="d9b1fbbf3f2273baffdf582355cf35a16540e6001d49dcf46ae49d4185f92218e7533db3016318ae497a8fd55bb323b1102c38887d2b981818b648b79c5bd2d53a0993d66d187ed3424cac6b35d0268eb0f725a64b13f021277cf833e5747b7c9d875abe87a52d2b37d9565a1a7fe42c41c2da10f01696f9ec7ba7f32cbbc224d8744d844aaca65cabcd2b41fb7e5a75ba9b4ef123e6075b155a8081a4385848a898def7c66dd97e8bc2f0148605a23335c77b866274981abf08f4522291ad743ba91d0ec2070679cc0d1788c0bf31b733ffefaa2cf635c5be22df6feb638b", 0xdf, 0x4d0}, {&(0x7f0000001580)="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", 0x1000, 0x5}], 0x0, &(0x7f0000002680)={[{@rodir}, {@numtail}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@shortname_win95}, {@numtail}], [{@hash}, {@dont_hash}]}) [ 864.087704] loop0: detected capacity change from 0 to 135266304 16:25:37 executing program 4: r0 = syz_io_uring_setup(0x67aa, &(0x7f0000000340), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x4c07, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r7 = syz_io_uring_setup(0x1f, &(0x7f0000000180)={0x0, 0xf81c, 0x4, 0x0, 0x57}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f00000003c0)="fe", 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r4, 0x0, &(0x7f0000000400)="40c1025799543b218bb1a81c831447fd162ff0f3bb94ca68909d84341bbafc283ae5a15041b5ec05a9fdbfab958082bd16b88fcc30525637ca23557c97fdd8b27adf2d0ac20322a1c7095d39ccdf22ced15e5f403676ca923bd596fed7f0a725491ee56565f7060fc61b2380c3e07f28b2782dac776e72cb2bc1a52901a2ec43770d09ee30d4802a8b94b67599a6b7c4", 0x90, 0x2000c004}, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xd7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000000080)=0x7, r4, &(0x7f00000000c0)=0xc2a, 0x8, 0xa) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r9}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r3, 0x2df400000000000, 0x0, 0x1, 0x0, 0x1, {0x0, r9}}, 0x5) io_uring_enter(0xffffffffffffffff, 0x4c07, 0x0, 0x0, 0x0, 0x0) dup2(r7, 0xffffffffffffffff) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:25:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ff", 0x37, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:25:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x26, &(0x7f0000000080)={&(0x7f0000001e00)={0x2c, 0x19, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x16, 0x0, 0x0, @uid}]}, 0x2c}}, 0x0) 16:25:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:25:52 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x8000, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sched_getattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x10000, 0x9, 0x800}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x8, 0x80, 0xfa, 0x0, 0xffff, 0x1421, 0xf, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x98b8, 0x2, 0x4, 0x4, 0x401, 0x41, 0x0, 0x4}, 0x0, 0x4, r2, 0xa) socket$inet6_udplite(0xa, 0x2, 0x88) creat(&(0x7f0000000040)='./file0\x00', 0x15b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) sendfile(r1, r0, 0x0, 0x4000007ffffffc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16:25:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 9) 16:25:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:25:52 executing program 7: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x0, 0x0, @empty, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@remote}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}}}, 0x0) syz_emit_ethernet(0x8b, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x9100, 0x5, 0x1, 0x4}, {0x8100, 0x7}}, {@llc_tr={0x11, {@llc={0xfe, 0x4, 'H', "8bcf2f0f7ebdf1999ae06917cf5cdd2a87fa5cf7f0cf23cfda9949f9475ac97711dde0e32800084e38a956305c81600832552678be6405e3a1ef1fba504f6dd8be3220238f070816e4a2cead2b5e70694f0d05d0912f2940a9b67bafb31b62f3bed80f057176764e8417a8a253d24536ed76"}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x22f, 0xaa9, 0x522, 0xc43]}) 16:25:52 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 879.154512] loop6: detected capacity change from 0 to 2048 [ 879.172254] FAULT_INJECTION: forcing a failure. [ 879.172254] name failslab, interval 1, probability 0, space 0, times 0 [ 879.172438] FAULT_INJECTION: forcing a failure. [ 879.172438] name failslab, interval 1, probability 0, space 0, times 0 [ 879.175599] CPU: 0 PID: 7510 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 879.175611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.175617] Call Trace: [ 879.175642] dump_stack+0x107/0x167 [ 879.175664] should_fail.cold+0x5/0xa [ 879.175686] ? create_object.isra.0+0x3a/0xa20 [ 879.175708] should_failslab+0x5/0x20 [ 879.175727] kmem_cache_alloc+0x5b/0x310 [ 879.175746] ? lock_release+0x680/0x680 [ 879.175769] create_object.isra.0+0x3a/0xa20 [ 879.175785] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 879.175808] __kmalloc+0x16e/0x390 [ 879.175835] bio_alloc_bioset+0x3b7/0x600 [ 879.175854] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 879.175870] ? trace_hardirqs_on+0x5b/0x180 [ 879.175888] ? bvec_alloc+0x2f0/0x2f0 [ 879.175908] ? kmalloc_order+0xfe/0x160 [ 879.175939] blk_rq_map_user_iov+0x473/0x1a60 [ 879.175967] ? iovec_from_user+0x16b/0x400 [ 879.175988] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 879.176008] ? iovec_from_user+0x104/0x400 [ 879.176041] ? blk_rq_unmap_user+0x750/0x750 [ 879.176063] ? __import_iovec+0x458/0x590 [ 879.176094] ? import_iovec+0x83/0xb0 [ 879.176121] sg_common_write.constprop.0+0xba7/0x1a30 [ 879.176154] ? sg_build_indirect.isra.0+0x710/0x710 [ 879.176172] ? fault_around_bytes_set+0x83/0xa0 [ 879.176191] ? lock_downgrade+0x6d0/0x6d0 [ 879.176214] ? cap_capable+0x1cd/0x230 [ 879.176246] ? capable+0xe1/0x100 [ 879.176270] sg_new_write.isra.0+0x529/0x770 [ 879.176296] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 879.176315] ? lock_downgrade+0x6d0/0x6d0 [ 879.176354] ? _cond_resched+0x10/0x30 [ 879.176373] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 879.176393] ? scsi_check_sense+0x10f0/0x10f0 [ 879.176416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 879.176434] ? SOFTIRQ_verbose+0x10/0x10 [ 879.176452] ? find_held_lock+0x2c/0x110 [ 879.176481] sg_ioctl_common+0x828/0x2570 [ 879.176503] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 879.176523] ? do_vfs_ioctl+0x283/0x10d0 [ 879.176541] ? sg_write+0x120/0x120 [ 879.176559] ? generic_block_fiemap+0x60/0x60 [ 879.176577] ? lock_downgrade+0x6d0/0x6d0 [ 879.176594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 879.176615] ? wait_for_completion_io+0x270/0x270 [ 879.176646] ? selinux_file_ioctl+0xb6/0x270 [ 879.176663] ? sg_compat_ioctl+0x120/0x120 [ 879.176683] sg_ioctl+0x8f/0x120 [ 879.176705] __x64_sys_ioctl+0x19a/0x210 [ 879.176727] do_syscall_64+0x33/0x40 [ 879.176746] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.176759] RIP: 0033:0x7f16a9b0ab19 [ 879.176777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.176787] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.235964] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 879.237512] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 879.239043] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 879.240574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.242097] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 879.243665] CPU: 1 PID: 7506 Comm: syz-executor.3 Not tainted 5.10.237 #1 [ 879.245177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.246928] Call Trace: [ 879.247494] dump_stack+0x107/0x167 [ 879.248283] should_fail.cold+0x5/0xa [ 879.249085] ? create_object.isra.0+0x3a/0xa20 [ 879.250047] should_failslab+0x5/0x20 [ 879.250854] kmem_cache_alloc+0x5b/0x310 [ 879.251716] ? mark_held_locks+0x9e/0xe0 [ 879.252587] create_object.isra.0+0x3a/0xa20 [ 879.253509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 879.254582] kmem_cache_alloc_bulk+0x168/0x320 [ 879.255551] io_submit_sqes+0x6fe6/0x8610 [ 879.255600] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 879.256464] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 879.256490] __do_sys_io_uring_enter+0x6b2/0x1890 [ 879.259950] ? find_held_lock+0x2c/0x110 [ 879.260832] ? io_submit_sqes+0x8610/0x8610 [ 879.261746] ? __mutex_unlock_slowpath+0xe1/0x600 [ 879.262765] ? wait_for_completion_io+0x270/0x270 [ 879.263785] ? rcu_read_lock_any_held+0x75/0xa0 [ 879.264776] ? vfs_write+0x354/0xb10 [ 879.265558] ? fput_many+0x2f/0x1a0 [ 879.266328] ? ksys_write+0x1a9/0x260 [ 879.267129] ? __ia32_sys_read+0xb0/0xb0 [ 879.267987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.269101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 879.270190] do_syscall_64+0x33/0x40 [ 879.270973] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.272063] RIP: 0033:0x7f16dfbacb19 [ 879.272852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.276748] RSP: 002b:00007f16dd122188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 879.278356] RAX: ffffffffffffffda RBX: 00007f16dfcbff60 RCX: 00007f16dfbacb19 [ 879.279864] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 879.281369] RBP: 00007f16dd1221d0 R08: 0000000000000000 R09: 0000000000000000 [ 879.282866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.284382] R13: 00007ffde3bea19f R14: 00007f16dd122300 R15: 0000000000022000 16:25:52 executing program 7: chdir(0x0) openat(0xffffffffffffffff, 0x0, 0x806c1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x80900, 0x140) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x290a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x3, 0x0) openat(r0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum, 0x0, @desc2}) r1 = mq_open(&(0x7f0000000240)='-@\x00t\xef\"\x00\x0e\x99\x15\x0e\xfb@Y\xd0@\x9a\xff\xfeb\n\x1cq\xcb6\x02\x00'/50, 0x1, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000240), 0x0, 0x5) clock_gettime(0x0, &(0x7f0000000180)) mq_timedsend(r1, &(0x7f0000000380)="7524ca4b82904f5e1c18b4c04ce445ceeac6ca6a4c08b3ebf9b927f6074a2067ecc2518caebb91e96d382dbe8efd71ac8e8f85d6e67f41773ed5c03513057eed164792a358031c3427df0024e19c6dae07df23b719f5cf37c360887f900361c3c692280fc411b918b26b79dc0eda1d7a18210d60e289ad6ef78cb22f2f1f3c5c69e0e77b7d0afd76c7f895f20ca563daacee65400c11b5648a04c16afc900ce02e6fccbd510547d6cce3975d8122c7a9b96213e908", 0xb5, 0x10000000af, &(0x7f00000001c0)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040)=0x7fff, 0x100000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000280)='./file1\x00', 0x2) openat(r3, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0) 16:25:52 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:25:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/41, 0x29}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/10, 0xa}, {&(0x7f0000001200)=""/125, 0x7d}, {&(0x7f0000001280)=""/41, 0x29}, {&(0x7f00000012c0)=""/190, 0xbe}, {&(0x7f0000001380)=""/18, 0x12}], 0x7}, 0x8000}, {{&(0x7f0000001440)=@qipcrtr, 0x80, &(0x7f0000002800)=[{&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/44, 0x2c}, {&(0x7f0000001600)=""/21, 0x15}, {&(0x7f0000001640)=""/100, 0x64}, {&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/167, 0xa7}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x7}, 0x10001}, {{&(0x7f0000002880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/57, 0x39}, {&(0x7f0000002940)=""/3, 0x3}, {&(0x7f0000002980)=""/97, 0x61}, {&(0x7f0000002a00)=""/39, 0x27}], 0x4}, 0x3}, {{&(0x7f0000002a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b00)=""/139, 0x8b}], 0x1, &(0x7f0000002c00)=""/114, 0x72}, 0x200}, {{&(0x7f0000002c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d00)=""/2, 0x2}, {&(0x7f0000002d40)=""/25, 0x19}, {&(0x7f0000002d80)=""/242, 0xf2}], 0x3, &(0x7f0000002ec0)=""/26, 0x1a}, 0x4}, {{&(0x7f0000002f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1, &(0x7f0000003fc0)=""/248, 0xf8}, 0x7}, {{&(0x7f00000040c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/15, 0xf}, {&(0x7f0000004180)=""/227, 0xe3}], 0x2, &(0x7f00000042c0)=""/149, 0x95}, 0x1d3}, {{&(0x7f0000004380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004400)=""/27, 0x1b}, {&(0x7f0000004440)=""/37, 0x25}], 0x2, &(0x7f00000044c0)=""/210, 0xd2}, 0x10000}, {{&(0x7f00000045c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004640)=""/158, 0x9e}, {&(0x7f0000004700)=""/223, 0xdf}], 0x2, &(0x7f0000004840)=""/124, 0x7c}, 0xfffffc89}], 0x9, 0x20, &(0x7f0000004b00)) stat(&(0x7f0000004b80)='./file0/../file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004d00)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000005080)={{}, {}, 0x80, 0x0, 0x0, &(0x7f0000004d40)='./file0\x00', &(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0)="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", 0x1b4, 0x0, &(0x7f0000004f80)={0x2, 0x5c, {0x1, 0xc, 0x1d, "ad7d9472ebe0080be8b9819f27fd433e233faab8be1dec898fb5f2430d", 0x32, "e584c0bdcfec430c0ee44800edc07bfde1dd9a3701bd66971d844d30f20f0e854b04e2650d844510617d9e61f5719eac7382"}, 0x8f, "c28af037da17bf13f9165f19eb01384f8e355f04cdf8c233aed8ffdb9b916ad3b0adfc945e04c2700c35688865562e546cebda65d3d25650f409af7f7c32358798164e69a99381b477599a9946cb1f8af5e5604e014bce13a786cdd88cdee3ac23a6c9daa06664ba94c4416fd4d8fb256b6e7a662377bcb21c2f98cf254e2b43d56e625643a9276363c0775c422faa"}, 0xf7}) sendmsg$nl_generic(r0, &(0x7f0000004cc0)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x1c, 0x40, 0x400, 0x70bd29, 0x25dfdbff, {0x11}, [@typed={0x8, 0x60, 0x0, 0x0, @uid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:25:52 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x1}, {}, {0x6}]}) r1 = syz_io_uring_setup(0x5eb4, &(0x7f0000000180)={0x0, 0x8000}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000340)) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x80800) syz_io_uring_submit(r2, r5, &(0x7f0000000300)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2000000c}, r8}, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[r0, r0, r0, r0, r9]}, 0x5) 16:25:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)=ANY=[@ANYBLOB="c88b2f51000000000000", @ANYRES32, @ANYBLOB="7a9039f4e5f29ede9aa5446b8e6c75e804b1068e844df79b036693df7d817a69aaf13b905a9dc30bdd490fe0ecca14bf3c4b3c5a6371998ba34599cc5ebf4a17654e2c310650db874b027c953f3e1e2cbfd601be51dc48ce91e7ed1b5d853670571bcc58e14ce6de9796679347611f01a791e8e65bee3d3a6c453adb67526e02c24ddb172d986f15a4406921be89e1d7b694fdc27f57e33c2eb8a031ff3c3e5fed94b39009fa6e1a9a8851d983e552d28424"]) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x462cc, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x4, 0xffff, 0x1, 0x5, 0xfff, 0x8, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x4, 0x0, 0x1, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58a7, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x7d2d, 0x1bc, 0x3, &(0x7f0000000000)={[0xc7]}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='!!$.-]$:/\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) 16:25:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ff", 0x37, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:25:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 10) [ 879.449334] FAULT_INJECTION: forcing a failure. [ 879.449334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.451910] CPU: 1 PID: 7526 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 879.453367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 879.455128] Call Trace: [ 879.455697] dump_stack+0x107/0x167 [ 879.456491] should_fail.cold+0x5/0xa [ 879.457303] _copy_to_user+0x2e/0x180 [ 879.458115] put_sg_io_hdr+0x508/0x660 [ 879.458938] ? copy_overflow+0x30/0x30 [ 879.459779] ? sg_ioctl_common+0x1f29/0x2570 [ 879.460727] ? lock_downgrade+0x6d0/0x6d0 [ 879.461604] ? do_raw_write_lock+0x11a/0x280 [ 879.462541] sg_new_read+0x3c6/0x4b0 [ 879.463331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 879.464454] ? _raw_write_unlock_irq+0x1f/0x30 [ 879.465423] sg_ioctl_common+0x1f45/0x2570 [ 879.466323] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 879.467426] ? do_vfs_ioctl+0x283/0x10d0 [ 879.468298] ? sg_write+0x120/0x120 [ 879.469079] ? generic_block_fiemap+0x60/0x60 [ 879.469196] loop6: detected capacity change from 0 to 2048 [ 879.470024] ? __mutex_unlock_slowpath+0xe1/0x600 [ 879.470046] ? wait_for_completion_io+0x270/0x270 [ 879.470076] ? selinux_file_ioctl+0xb6/0x270 [ 879.474385] ? sg_compat_ioctl+0x120/0x120 [ 879.475282] sg_ioctl+0x8f/0x120 [ 879.475999] __x64_sys_ioctl+0x19a/0x210 [ 879.476880] do_syscall_64+0x33/0x40 [ 879.477672] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 879.478763] RIP: 0033:0x7f16a9b0ab19 [ 879.479553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.483477] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.485104] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 879.486619] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 879.488138] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 879.489657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.491168] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 879.505604] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:25:52 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 879.564986] kauditd_printk_skb: 10 callbacks suppressed [ 879.565004] audit: type=1326 audit(1749140752.653:120): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7517 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f477fc7ab19 code=0x0 16:26:08 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:26:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:08 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000500)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9, 0x2, 0x0, 0x20, 0x0, 0xb, 0x1020a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x5, 0x5}, 0x800, 0x0, 0x4, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x6, r0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_setup(0x1d78, &(0x7f0000000480)={0x0, 0x93f1, 0x0, 0x2, 0x18a}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000400)) r7 = inotify_init1(0x800) copy_file_range(r6, &(0x7f0000000180)=0x8, r7, &(0x7f0000000280)=0x714, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x9) r8 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x180000030) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @local, 0x7}, 0x1c) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 16:26:08 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x301200) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58df57e61106a34c12a01d49e22cddfcdad84229841442090f3f61a6b74f35fc09689b047bd00fbe7713dedc4db3e95b7cb35b70e258d5e5bb63677bb342a6a8c375a1be669e00b842397237905c2eb1214ab0990b15a8cae90fd69ba5eef1196235ef0f2998dd370929ae68da3ee088751effd42b43f34379e67058b3ef53a56544873f6ead550836d26bba98c51d22a55625e894bb6d5d9e0bde670e94fb4d01c531ef00e24467b4941bb616d475f6c2874815f766efadef9edc1248ff58ef5009a123b44de12b7f198198cf82", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="24007a800c0003008fd44105669e2e7614000100d4e64ae4b2c727a9056964907799b2b6"], 0x40}}, 0x0) 16:26:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53", 0x39, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 11) 16:26:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r0, r1) write$P9_RREADLINK(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1040000017d597204b19b7f4bc6c6530"], 0x10) pwrite64(r1, &(0x7f00000000c0)="ad", 0x1, 0x0) 16:26:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000500)={0x0, 0x72b5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x800) bind$802154_raw(r6, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000100)) r7 = signalfd4(r2, &(0x7f0000000580)={[0x401]}, 0x8, 0x80000) io_uring_enter(r7, 0x1c0b, 0xc5dd, 0x0, &(0x7f00000005c0)={[0x6]}, 0x8) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 895.434357] loop6: detected capacity change from 0 to 2048 [ 895.452006] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 895.461283] FAULT_INJECTION: forcing a failure. [ 895.461283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.464089] CPU: 0 PID: 7560 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 895.465693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 895.467625] Call Trace: [ 895.468251] dump_stack+0x107/0x167 [ 895.469104] should_fail.cold+0x5/0xa [ 895.469998] copy_page_to_iter+0x41e/0xf80 [ 895.471001] blk_rq_unmap_user+0x552/0x750 [ 895.472004] ? blk_rq_map_kern+0x9e0/0x9e0 [ 895.473026] sg_finish_rem_req+0x73/0x320 [ 895.474001] sg_new_read+0x3d1/0x4b0 [ 895.474873] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 895.476094] ? _raw_write_unlock_irq+0x1f/0x30 [ 895.477174] sg_ioctl_common+0x1f45/0x2570 [ 895.478178] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 895.479387] ? do_vfs_ioctl+0x283/0x10d0 [ 895.480342] ? sg_write+0x120/0x120 [ 895.481192] ? generic_block_fiemap+0x60/0x60 [ 895.482238] ? __mutex_unlock_slowpath+0xe1/0x600 [ 895.483363] ? wait_for_completion_io+0x270/0x270 [ 895.484504] ? selinux_file_ioctl+0xb6/0x270 [ 895.485531] ? sg_compat_ioctl+0x120/0x120 [ 895.486519] sg_ioctl+0x8f/0x120 [ 895.487313] __x64_sys_ioctl+0x19a/0x210 [ 895.488562] do_syscall_64+0x33/0x40 [ 895.489427] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 895.490618] RIP: 0033:0x7f16a9b0ab19 [ 895.491482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.495683] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 895.497465] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 895.499120] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 895.500785] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 895.502453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.504113] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:26:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x1288, 0x23, 0x400, 0x70bd2b, 0x25dfdbfd, {0xf}, [@generic="821423f8dc80ebe472e823ae36987fd3aabf7bbbb6", @generic="cb0b8c7fab6bcb", @nested={0x10ea, 0x3a, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x75, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x84, 0x0, 0x0, @str='-\x00'}, @generic="8a8d21ff045fb182a7c64f7cd75e92ef1fe8deefcb8b42fe39f3", @generic="4ad8425f81e1844deb2dc9eaa8353bf957dc575491311fa75b8de9c4970c6a4e21896509b9a1244f7affe4a9bcc7dd2108d50c0a5775e24d34ad39a96f8ce672", @generic="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", @generic="44ef324eeb12f67a3031c36ff56b795cf9b43f59c72bdcf7604ca27bc5d4db514dc97e92e5a8b1f183d0b9a7e8dd6ed9d119d48da522620abca3577bc14c29028b2492660d5b3a556cb4c47ba5b38708593e08d7a16dda39810fc3a3aac9892589a096ae740b6fb16323bcdb", @typed={0x8, 0xe, 0x0, 0x0, @u32=0x200}]}, @nested={0xf3, 0x8a, 0x0, 0x1, [@generic="41dc3e2a31c63b0fb2b581d6f4a07eabae7d4f805ea47abe4b69c90960da476506c3053f24ba0b0d64b17530e42aa6a26ea777cf6849ff010b7287093b6bc87695c3b2c13863e4585c087c5e59cf99d5cda0eb3ca3c8347ec376a352087aadc9534226442597f4274b9ce0136fa097ea4dcb6a75316f63d7c0101106c8e7971ebb78d456f093fa15facdfadccc06d903960e1f24e0372f267fda162fd9994a875ba99e6607a514b0601950d2d4ec0010a8a29bd44532b94ed200f21ac3ab29fc2662714a43220847a880c2e017597527dfa4e3a7bfa6f0c9e1ad69e4b97c25738af8ac56052ed7c6d2e1890028b306"]}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x8}, @generic="0ce21fb1065c127700d23baac34232ca24afc7c502ef987c568605367deb56d696e7c22b55daf06426cdd8c16d8fd60795c6dea4993c46958c738f7d3386028b51d493a394c6c4bcde75626c0ceecc1dff4dbf0d8f1eb6fb3554af9d988d46140b2ad69bb4a172e255"]}, 0x1288}, 0x1, 0x0, 0x0, 0x4000000}, 0x40081) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="800100001a0001000000000000000000e0000002000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c0000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000100626c616b6532732d313630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006c7a6a68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005df1724117f20bbca599e8f7ef73769815d24e45ce56803ddc88dd38558ddbf33bfeaa3511b23d4f69226417c1fffab1c0b57ae9eced32460ed2687eaf89b1bdc8c2bc8e93befacbacf303"], 0x180}}, 0x0) 16:26:08 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:08 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f8706f6c3d6c6f6361642c00"]) 16:26:08 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53", 0x39, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f00000000c0)="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") r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x10, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251"]}]}, 0x24}}, 0x0) 16:26:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:26:08 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 895.691750] tmpfs: Unknown parameter 'øpol' [ 895.703200] loop6: detected capacity change from 0 to 2048 [ 895.721076] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 909.762831] devpts: called with bogus options [ 909.770109] audit: type=1400 audit(1749140782.875:121): avc: denied { tracepoint } for pid=7598 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 16:26:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303033c465157c74a50f9f3231b21f6ff3153437373737373737"]) 16:26:22 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:22 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 16:26:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 12) 16:26:22 executing program 5: gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x7ff) readv(0xffffffffffffffff, &(0x7f0000001600), 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) clock_gettime(0x0, &(0x7f0000000b40)) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x4c07, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x2) 16:26:22 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53", 0x39, 0x400}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:22 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = getpgrp(0x0) pidfd_open(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x7ff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7f, 0x80, 0x80, 0x1, 0x0, 0x5d11, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x5}, 0x10020, 0x4, 0x7, 0x8, 0x3ff, 0x1000, 0x8, 0x0, 0x200, 0x0, 0x5a5abb21}, r1, 0x9, r0, 0x0) 16:26:22 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x9888}, 0x200}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @broadcast}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x4c07, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x6549, 0x79e7, 0x2, &(0x7f00000000c0)={[0x5]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r109}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, r54}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r90}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) [ 909.779696] devpts: called with bogus options [ 909.785241] loop6: detected capacity change from 0 to 2048 [ 909.793953] FAULT_INJECTION: forcing a failure. [ 909.793953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.795642] CPU: 1 PID: 7615 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 909.796616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 909.797776] Call Trace: [ 909.798152] dump_stack+0x107/0x167 [ 909.798668] should_fail.cold+0x5/0xa [ 909.799211] ? copyout.part.0+0x112/0x140 [ 909.799791] copy_page_to_iter+0x878/0xf80 [ 909.800410] blk_rq_unmap_user+0x552/0x750 [ 909.801014] ? blk_rq_map_kern+0x9e0/0x9e0 [ 909.801626] sg_finish_rem_req+0x73/0x320 [ 909.802207] sg_new_read+0x3d1/0x4b0 [ 909.802730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 909.803466] ? _raw_write_unlock_irq+0x1f/0x30 [ 909.804107] sg_ioctl_common+0x1f45/0x2570 [ 909.804709] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 909.805440] ? do_vfs_ioctl+0x283/0x10d0 [ 909.806150] ? sg_write+0x120/0x120 [ 909.806785] ? generic_block_fiemap+0x60/0x60 [ 909.807485] ? __mutex_unlock_slowpath+0xe1/0x600 [ 909.808162] ? wait_for_completion_io+0x270/0x270 [ 909.808865] ? selinux_file_ioctl+0xb6/0x270 [ 909.809476] ? sg_compat_ioctl+0x120/0x120 [ 909.810066] sg_ioctl+0x8f/0x120 [ 909.810539] __x64_sys_ioctl+0x19a/0x210 [ 909.811112] do_syscall_64+0x33/0x40 [ 909.811631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 909.812361] RIP: 0033:0x7f16a9b0ab19 [ 909.812880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000180)={0x0, r109, "d765295eadf254b425e9b8221578dff3cb326bbbc581750ab6471883c40ce366d0622431d43292330cc96db0f169b1f9dccb0c11866d4a08686f7cc10728d14106754e37084eb6e1e3212b57b2d026942edf86393ff55321238c076f6a8a4ee5e5659e82148776e47f0fc036c3853d9c140c678a89e4d1ba473d5f5ba3ee70a09424a4adc771b16cc2f04486fd6fde8a5f1764bebf31004a2bbb0e7caf2f2845a97bb6dd746ce53fbd0412dc909218b479ef82726d2fd42db81a4ac04aad33a8b1bae4f1002ab5fe448fda93d1b04a8bb7ed9510736111ca502cd292d4326baf6804b9849725e6c38baf4e234597750b876c7205e7d5185111021a7f4b42bf1a", "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"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r210, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r211}, {}, {}, {}, {}, {}, {}, {}, {}, {r212}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r212}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r212}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r211}, {}, {}, {}, {}, {0x0, r211}, {}, {}, {}, {0x0, r211}, {}, {}, {}, {}, {}, {}, {0x0, r211}, {0x0, r211}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r212}, {}, {}, {}, {0x0, r211}, {}, {}, {r212}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r211}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r211}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r212}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057d40)={0xfffffffffffffff9, [{0x0, r174}, {r11}, {}, {}, {r66, r130}, {r87}, {r105, r134}, {}, {}, {r13, r132}, {r94, r160}, {r27, r36}, {r141, r99}, {r115}, {}, {0x0, r153}, {0x0, r37}, {}, {r152}, {0x0, r207}, {}, {r194}, {}, {0x0, r204}, {}, {}, {0x0, r204}, {r55, r183}, {0x0, r44}, {r51, r191}, {0x0, r28}, {r13}, {r59}, {0x0, r188}, {}, {}, {0x0, r118}, {}, {0x0, r207}, {r171}, {r108}, {r10}, {}, {}, {r77, r159}, {}, {0x0, r131}, {r76, r106}, {r84, r48}, {0x0, r39}, {0x0, r187}, {r147}, {r139, r71}, {}, {0x0, r35}, {}, {r43, r15}, {r80}, {0x0, r103}, {}, {r26}, {}, {}, {r201}, {}, {}, {0x0, r97}, {0x0, r34}, {0x0, r78}, {r128}, {0x0, r199}, {}, {}, {0x0, r14}, {r45, r14}, {r53, r62}, {r86}, {0x0, r24}, {r120, r81}, {}, {}, {r100}, {r22}, {0x0, r142}, {r146, r123}, {}, {r190}, {r20}, {0x0, r102}, {r163}, {}, {}, {r189, r138}, {0x0, r50}, {0x0, r158}, {r101}, {}, {}, {r21, r75}, {r93}, {r125}, {0x0, r165}, {r23}, {r121}, {}, {r41}, {0x0, r157}, {}, {0x0, r149}, {}, {r89, r202}, {}, {0x0, r61}, {r25}, {r38, r172}, {0x0, r83}, {}, {r51}, {0x0, r134}, {0x0, r122}, {0x0, r142}, {}, {0x0, r127}, {0x0, r91}, {r98, r148}, {r74}, {r67, r184}, {r19, r70}, {}, {}, {r150, r56}, {}, {r144}, {}, {}, {r166, r129}, {r43, r151}, {0x0, r200}, {r33, r110}, {r18, r12}, {r46, r60}, {r16}, {}, {0x0, r170}, {0x0, r57}, {r117, r140}, {}, {}, {r198}, {r63, r116}, {r11, r47}, {r77}, {}, {}, {}, {r18, r88}, {0x0, r58}, {0x0, r30}, {}, {}, {r205}, {}, {}, {r209, r52}, {}, {r203}, {}, {}, {}, {r136, r112}, {}, {r178}, {}, {}, {r173}, {r206}, {r6, r182}, {}, {}, {r162, r50}, {r74}, {}, {r196, r145}, {r114, r175}, {}, {}, {r49, r137}, {r96}, {0x0, r113}, {}, {}, {0x0, r104}, {r73, r40}, {0x0, r167}, {r136}, {0x0, r17}, {}, {r168, r62}, {r109}, {}, {r126, r208}, {r161}, {r29}, {}, {0x0, r102}, {}, {r179, r187}, {r133}, {r143}, {0x0, r119}, {r164}, {r192}, {r169, r65}, {0x0, r116}, {r72}, {r82, r197}, {r85}, {r42}, {r186}, {}, {}, {}, {0x0, r79}, {}, {r180}, {r68}, {0x0, r9}, {}, {r156}, {}, {0x0, r137}, {0x0, r95}, {}, {0x0, r7}, {r69}, {}, {0x0, r181}, {r111}, {r92, r31}, {r8, r204}, {}, {r51, r32}, {0x0, r195}, {}, {0x0, r107}, {0x0, r154}, {}, {0x0, r5}, {r64}, {r124, r135}, {r185, r176}, {0x0, r177}, {}, {0x0, r193}, {r155}], 0x4, "b83e192d0571b1"}) [ 909.815803] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.817178] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 909.818193] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 909.819203] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.820200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.821221] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 909.823347] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 909.828684] device lo entered promiscuous mode [ 909.869611] device lo left promiscuous mode [ 909.875120] device lo entered promiscuous mode 16:26:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xeebb, 0x1, &(0x7f0000000500)=[{&(0x7f00000003c0)="ac", 0x1}], 0x1391819, &(0x7f0000000540)={[{@sbsector={'sbsector', 0x3d, 0x800}}], [{@euid_eq}]}) rt_sigtimedwait(&(0x7f0000000640), 0x0, &(0x7f0000000680)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 909.886772] device lo left promiscuous mode 16:26:23 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:23 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:23 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @ipv4=@private}]}]}, 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="280000001000010180040000000c00008008003500000000"], 0x28}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@random="47609b1b25bd", @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x2000, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @private, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@noop, @cipso={0x86, 0x11, 0x0, [{0x0, 0xb, "4ebb010932cbdf53cd"}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 16:26:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', 0x8, 0x2, &(0x7f0000000080)=[{&(0x7f0000000180)="eb3c906d6b6640e2aec2a10ec0c9010000000000f34313", 0x17, 0x4}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000c0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xa018396b05116a86, 0x100) openat(r1, &(0x7f00000001c0)='./file0\x00', 0xc2c00, 0x86) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) 16:26:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 13) [ 909.953486] loop0: detected capacity change from 0 to 60928 16:26:23 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 16:26:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2, 0x0, &(0x7f0000001640), 0x10018d6, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x20, 0x8, 0x7f, 0x5d, 0x2, 0x6, 0x9, 0x3c8, 0x40, 0x207, 0x80000000, 0x1f, 0x38, 0x1, 0x6, 0x8, 0x8001}, [{0x7, 0x1c8, 0x5, 0x2, 0x1, 0x33d3, 0x2, 0x88}], "3054938d89fc73f50c7030adf10902fdb3a2534078b90f0f2403df43caf481c9131af921e4fa4463864e390a4e96f2000d90f0d6e49e5a9900eb9fc3aacd27cc7ad51f5193129312a5110994414554129d535c689a0815b5d0b98940cd336b97c990701100c3b288a554a8b9ea39321692aaa354f94f23af51e0a8ecb9dfd23221b3bfbbc7ea2e8b9a2e75d8ad459ee3e89e6bd676ee1fbbb3260a83bf363b5d2b8da3a1aaa04a240c4bd41828c4fd952ca6ea009513975555cddd21d4a6b1a6a4b011a53c844ff35daf34a3851b66b315640175d904f150e810cd1f5ba67b1419c56229ac4c3a398db08c8faab3cf8de3"}, 0x169) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r4, &(0x7f00000000c0)='./file1\x00', 0x82882, 0x90) sendfile(r1, r2, 0x0, 0x100000001) [ 909.989094] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 909.999773] loop4: detected capacity change from 0 to 41948160 [ 910.041089] FAT-fs (loop4): invalid media value (0x00) [ 910.041783] FAT-fs (loop4): Can't find a valid FAT filesystem [ 910.050682] FAULT_INJECTION: forcing a failure. [ 910.050682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.052060] CPU: 1 PID: 7644 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 910.052852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 910.053814] Call Trace: [ 910.054127] dump_stack+0x107/0x167 [ 910.054544] should_fail.cold+0x5/0xa [ 910.054984] ? copyout.part.0+0x112/0x140 [ 910.055462] copy_page_to_iter+0x878/0xf80 [ 910.055956] blk_rq_unmap_user+0x552/0x750 [ 910.056458] ? blk_rq_map_kern+0x9e0/0x9e0 [ 910.056957] sg_finish_rem_req+0x73/0x320 [ 910.057438] sg_new_read+0x3d1/0x4b0 [ 910.057871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 910.058479] ? _raw_write_unlock_irq+0x1f/0x30 [ 910.059008] sg_ioctl_common+0x1f45/0x2570 [ 910.059502] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 910.060104] ? do_vfs_ioctl+0x283/0x10d0 [ 910.060582] ? sg_write+0x120/0x120 [ 910.061002] ? generic_block_fiemap+0x60/0x60 [ 910.061519] ? __mutex_unlock_slowpath+0xe1/0x600 [ 910.062074] ? wait_for_completion_io+0x270/0x270 [ 910.062637] ? selinux_file_ioctl+0xb6/0x270 [ 910.063145] ? sg_compat_ioctl+0x120/0x120 [ 910.063636] sg_ioctl+0x8f/0x120 [ 910.064030] __x64_sys_ioctl+0x19a/0x210 [ 910.064517] do_syscall_64+0x33/0x40 [ 910.064948] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 910.065538] RIP: 0033:0x7f16a9b0ab19 [ 910.065968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 910.068091] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.068972] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 910.069794] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 910.070616] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 910.071436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.072262] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 910.112096] loop7: detected capacity change from 0 to 33559040 [ 910.254416] loop4: detected capacity change from 0 to 41948160 [ 910.261015] FAT-fs (loop4): invalid media value (0x00) [ 910.262276] FAT-fs (loop4): Can't find a valid FAT filesystem [ 910.782561] loop0: detected capacity change from 0 to 60928 [ 924.225124] FAULT_INJECTION: forcing a failure. [ 924.225124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.226853] CPU: 1 PID: 7665 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 924.227811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.228988] Call Trace: [ 924.229370] dump_stack+0x107/0x167 [ 924.229889] should_fail.cold+0x5/0xa [ 924.230424] ? copyout.part.0+0x112/0x140 [ 924.231016] copy_page_to_iter+0x878/0xf80 [ 924.231877] blk_rq_unmap_user+0x552/0x750 [ 924.232524] ? blk_rq_map_kern+0x9e0/0x9e0 [ 924.233125] sg_finish_rem_req+0x73/0x320 [ 924.233701] sg_new_read+0x3d1/0x4b0 [ 924.234218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 924.234942] ? _raw_write_unlock_irq+0x1f/0x30 [ 924.235583] sg_ioctl_common+0x1f45/0x2570 [ 924.236175] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 924.236896] ? do_vfs_ioctl+0x283/0x10d0 [ 924.237457] ? sg_write+0x120/0x120 [ 924.237961] ? generic_block_fiemap+0x60/0x60 [ 924.238586] ? __mutex_unlock_slowpath+0xe1/0x600 [ 924.239261] ? wait_for_completion_io+0x270/0x270 [ 924.239938] ? selinux_file_ioctl+0xb6/0x270 [ 924.240562] ? sg_compat_ioctl+0x120/0x120 [ 924.241150] sg_ioctl+0x8f/0x120 [ 924.241623] __x64_sys_ioctl+0x19a/0x210 [ 924.242191] do_syscall_64+0x33/0x40 [ 924.242718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 924.243436] RIP: 0033:0x7f16a9b0ab19 [ 924.243951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.246510] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.247571] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 924.248569] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 924.249744] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.250726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 16:26:37 executing program 0: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000100)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:26:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd68cba6}, 0x400, 0x0, 0x0, 0x0, 0x7ffffffe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1f, 0xa, 0x6, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004084) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002a00274e000000000000000000000000040000000904bb80999e00009c0000003feab3e8ba7e311fd86eb105767b95a2f3de57972c88120685b4bebe5d927ecfa34d67510923564ac2d2a90175994abc7eb6a192bc899fcbf03c9dfaf84a7a990d30bb681300df9c50cbe4c9c910de7f8b1e477d4541d807000000f63a7329b5d66dd65e8e9f790917faa047c22f183a812a7cba481493ba404199aabf9b017ce97bd20af88c6c7dc62de15f3b8845c998234ac25e26137d32b7"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x1, 0x40, 0x6, 0x0, 0x1, 0x20, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x80, 0x5}, 0x4a00, 0x5, 0x7ff, 0x5, 0x400, 0x3, 0x8b2, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x6, 0x6, 0xa00, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) lseek(r2, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) flock(r4, 0x4) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/10, 0xa}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 16:26:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r3}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r3}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @empty}, 0x0, 0x400, 0x1, {0x0, r3}}, 0xffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000300)="eace24db7376a52cabd6565e49cd", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 16:26:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:37 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 16:26:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 14) 16:26:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x4, 0x3, 0xfffffffc, 0x2, 0x3, 0x400, 0xfffe, 0x0, 0xfffffffc, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r3}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000200)=0x6, 0x3) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) flock(r0, 0x8) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x73}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x176}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) sendfile(r1, r0, 0x0, 0xffffffff000) [ 924.251714] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 924.252398] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 924.276519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=7675 comm=syz-executor.4 16:26:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x3, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, @perf_config_ext={0xffff}, 0x8620}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="010000b559bed40001000000040000000300000000000000f3373ddea18150aff81ca70aff4c882834905112460835d5ebc3daf9cf", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffff0000000000002e2f66696c653000"]) io_uring_enter(r6, 0x6478, 0xad9f, 0x0, &(0x7f0000000240)={[0x5]}, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000080)=0x3ff, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x800, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, {0x40}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x8e) lseek(0xffffffffffffffff, 0x1, 0x1) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x3, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000280)="3a8062c8aca251782d6231158b44af923db4ced515d8fe4409c1a81a14636d39e25b89fa55ccd840b5b1715c9ea6c0793ce2412b82f265caa05eab109e84b0b57deea3b8497f93057bc8eb512c5f364de02647d2116eae58838f95171bb402174f9ac23fb4af118ab491c55699e92dcf3d282f9380806c58940e68d3a5de0b0ba2620bdd647a504afb382483d2b9d7a408b3970fd48644b095a51fdd42b30d4430b929f8720e2cd50c618ec698cb34b22f459cfe4a726db8913b25d92f46562c2c49f7865102c073886f91c00077c595b00a3b7263317da4d71c843e93febd14647248e68344e1dd82b0", 0xea}], 0x1, 0xc, 0x0, {0x3}}, 0x81) [ 924.334364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=7681 comm=syz-executor.4 16:26:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:37 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a}], 0x800000, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:37 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) 16:26:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 924.417448] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:26:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 15) [ 924.524491] FAULT_INJECTION: forcing a failure. [ 924.524491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.527237] CPU: 0 PID: 7706 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 924.528840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.530766] Call Trace: [ 924.531382] dump_stack+0x107/0x167 [ 924.532229] should_fail.cold+0x5/0xa [ 924.533123] ? copyout.part.0+0x112/0x140 [ 924.534088] copy_page_to_iter+0x878/0xf80 [ 924.535088] blk_rq_unmap_user+0x552/0x750 [ 924.536093] ? blk_rq_map_kern+0x9e0/0x9e0 [ 924.537108] sg_finish_rem_req+0x73/0x320 [ 924.538071] sg_new_read+0x3d1/0x4b0 [ 924.538936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 924.540150] ? _raw_write_unlock_irq+0x1f/0x30 [ 924.541221] sg_ioctl_common+0x1f45/0x2570 [ 924.542207] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 924.543405] ? do_vfs_ioctl+0x283/0x10d0 [ 924.544353] ? sg_write+0x120/0x120 [ 924.545198] ? generic_block_fiemap+0x60/0x60 [ 924.546237] ? __mutex_unlock_slowpath+0xe1/0x600 [ 924.547356] ? wait_for_completion_io+0x270/0x270 [ 924.548493] ? selinux_file_ioctl+0xb6/0x270 [ 924.549513] ? sg_compat_ioctl+0x120/0x120 [ 924.550497] sg_ioctl+0x8f/0x120 [ 924.551286] __x64_sys_ioctl+0x19a/0x210 [ 924.552234] do_syscall_64+0x33/0x40 [ 924.553104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 924.554292] RIP: 0033:0x7f16a9b0ab19 [ 924.555156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.559449] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.561225] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 924.562881] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 924.564544] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.566201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 924.567856] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:26:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 16:26:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 16) 16:26:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r0, &(0x7f0000000000), 0x5ac, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r4, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b65ae5b5d5dee79000000000068df49fc6e2bb0d200ca89e4fa7634509807000000000000", @ANYRES16=r5, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001002000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x800, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040095) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 16:26:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="aad263665ba51145213b466f981382a8bcf3f8aac2e29c8c098bb7eee6350b565c34b2776f981340a3886692d1c4249af13873933215add68bd94af0e86f2f2384bb5e2aebee2a671d83ab463f0246fad8838e65f4ea7cfc4fb037e800"/107, @ANYBLOB="847bfc02f5d26af6000008107bad2f669e73f1d104250000"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000004cc80)={{0x0, 0x2, 0xfffffffffffffff9, 0x6d, 0xa6, 0x0, 0x4e4, 0xe49f, 0x4, 0x7fffffff, 0x5, 0x2, 0xe6b, 0x0, 0x20}}) fallocate(r4, 0xa, 0x800, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004dc80)) lseek(r0, 0x9, 0x3) lseek(r1, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r8, 0x0, r1, 0x0, 0x200f5ef, 0x0) 16:26:52 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 16:26:52 executing program 0: ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(r2, &(0x7f0000000100)='./file0\x00', 0x102, 0x100) r3 = fcntl$getown(r2, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000340)={0x2, 0x2, 0x1, 0x1, r3}) syz_io_uring_setup(0x23b4, &(0x7f0000000140)={0x0, 0xf5a6, 0x8, 0x3, 0xea, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r5}}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0xffffffffffffff80, 0x0, 0x10001, 0x4, 0x1, {0x0, r5}}, 0x4) 16:26:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530002c87af821976945ffe872c042e6395824e3ee4907d440cc408b12d5200e05634de93acadd365e4db65c8fa8891ef2e1462c2cfba9e02ef30e546553ce59a4c2932f82beab3e8a73bb01b8cca8cbfc11886fd459d583dbad6b17c92b9d02c798a4d19b27138f4cbe17bd81c4ad52db9fb71f8e4fcbac0c3e9b7ac38346d9438ff6f08749198ab23efe900d8f4c369ad8e57972b9aa62d3968c9b9eb8010b5b9feb2fbefbc5fafc579ab1506590b15d2d21d506ae0f0cbf148c969bb8c1d7e5ecfa213942de5e52ba4dc1b504021f3a14445e3ef56231514f6ebf014ce5892be612c4bf8f2ef000bd514fa2af8b06c36071a1158ca531a8f2395504a5b3354d510d4cf3b91b1c29233ad250a9fd96516721d316c0fa26605cedbc8ba412e96931fe32a3666531291183df40231b1adc696266388960affa14cbe33b1c58ae5e38475482fa9bf1bc86b40a4d0fbab7eb9f1aa1a00d582b5e874271999df8add9caa2a67546926837ea68684ecc3dac07e7ae5d52ff2b2e69d39f4f3cd2800107d3fd3337008664251dd2203005e13ce197cb525802b390a34d92fd8c055175fc4e61683bd2aefcc5505341b3c5ee904976072fe48e3d92b5711940c8c54d05b5dcfd9ae87d2f558ca33b32862c91f4aabf11dea335898b4c59f5c98c4f29b048f3dab86b7db944d00"/513]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f, 0x80000000}) close(r0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fe8800000000000000000000ce4190da000000010000000000000000e000000100000000000000000000000000000000000000000000000000000000fc00"/108, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000020000000000000000000000000000000000000000000000000000000000000000000000000000000026137e9523018d65049b9626aa6600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bdb80000080000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r2) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x81}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x101, 0x0, 0x10000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f666924d4d19dd38ab20e3f0df7e9fc6e8b38115c9593898615aa362a9f779e75e4982d737caa6841eb1a2fb9ae4f13a1ece25ba8647f01843dfd52e4669707a631135ff0aaad0863b3ed20875ea76ab877cc40627e71ed78480dfcffffffffffffff72b640a02e6db7c0b6c9083be8c2f28a62a2a00000"], 0x81) lseek(r1, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file2', [{0x20, '/dev/snd/seq\x00'}], 0xa, "dd7601c123256ac8ff0c439bac9eee97ecc22d3379cb81e43340c7b7dd74f563e69435b6c6754f53ef243b546794bbeae1b25112e9bc4977a807ebe4bd1ed4032d4dc989622ee71bafc81a490a41f949689363d3202e8dc0df8367ccc803ab440f316580f8757d700462c7877ed780366d673b46d0d36b9360c6185bdc35c89338a1359173c6ba1c7f78c425bd8844ae6dc287931a"}, 0xae) copy_file_range(r5, 0x0, r1, 0x0, 0x200f5ef, 0x0) 16:26:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 939.486166] FAULT_INJECTION: forcing a failure. [ 939.486166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.489915] CPU: 0 PID: 7720 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 939.491544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 939.493507] Call Trace: [ 939.494131] dump_stack+0x107/0x167 [ 939.494986] should_fail.cold+0x5/0xa [ 939.495879] ? copyout.part.0+0x112/0x140 [ 939.496864] copy_page_to_iter+0x878/0xf80 [ 939.498020] blk_rq_unmap_user+0x552/0x750 [ 939.499017] ? blk_rq_map_kern+0x9e0/0x9e0 [ 939.500018] sg_finish_rem_req+0x73/0x320 [ 939.500991] sg_new_read+0x3d1/0x4b0 [ 939.501855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 939.503067] ? _raw_write_unlock_irq+0x1f/0x30 [ 939.504125] sg_ioctl_common+0x1f45/0x2570 [ 939.505121] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 939.506319] ? do_vfs_ioctl+0x283/0x10d0 [ 939.507258] ? sg_write+0x120/0x120 [ 939.508098] ? generic_block_fiemap+0x60/0x60 [ 939.509142] ? __mutex_unlock_slowpath+0xe1/0x600 [ 939.510259] ? wait_for_completion_io+0x270/0x270 [ 939.511387] ? selinux_file_ioctl+0xb6/0x270 [ 939.512403] ? sg_compat_ioctl+0x120/0x120 [ 939.513399] sg_ioctl+0x8f/0x120 [ 939.514192] __x64_sys_ioctl+0x19a/0x210 [ 939.515141] do_syscall_64+0x33/0x40 [ 939.516007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 939.517208] RIP: 0033:0x7f16a9b0ab19 [ 939.518073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 939.522369] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.524138] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 939.525805] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 939.527472] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 939.529140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 939.530806] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 939.549367] loop6: detected capacity change from 0 to 2048 [ 939.572691] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:26:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 17) 16:26:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002100210c00000000000000000200000008000000", @ANYRESHEX, @ANYBLOB="d2770d00"], 0x20}}, 0x0) 16:26:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) [ 939.677274] FAULT_INJECTION: forcing a failure. [ 939.677274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.678730] CPU: 1 PID: 7741 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 939.679522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 939.680477] Call Trace: [ 939.680784] dump_stack+0x107/0x167 [ 939.681212] should_fail.cold+0x5/0xa [ 939.681650] ? copyout.part.0+0x112/0x140 [ 939.682130] copy_page_to_iter+0x878/0xf80 [ 939.682624] blk_rq_unmap_user+0x552/0x750 [ 939.683124] ? blk_rq_map_kern+0x9e0/0x9e0 [ 939.683620] sg_finish_rem_req+0x73/0x320 [ 939.684098] sg_new_read+0x3d1/0x4b0 [ 939.684534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 939.685128] ? _raw_write_unlock_irq+0x1f/0x30 [ 939.685655] sg_ioctl_common+0x1f45/0x2570 [ 939.686145] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 939.686752] ? do_vfs_ioctl+0x283/0x10d0 [ 939.687213] ? sg_write+0x120/0x120 [ 939.687630] ? generic_block_fiemap+0x60/0x60 [ 939.688138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 939.688705] ? wait_woken+0x250/0x250 [ 939.689140] ? wait_for_completion_io+0x270/0x270 [ 939.689690] ? selinux_file_ioctl+0xb6/0x270 [ 939.690198] ? sg_compat_ioctl+0x120/0x120 [ 939.690686] sg_ioctl+0x8f/0x120 [ 939.691086] __x64_sys_ioctl+0x19a/0x210 [ 939.691553] do_syscall_64+0x33/0x40 [ 939.691978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 939.692568] RIP: 0033:0x7f16a9b0ab19 [ 939.692998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 939.695086] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.695969] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 939.696791] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 939.697602] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 939.698418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 939.699228] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:26:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:26:52 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 16:26:52 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fcntl$setstatus(r0, 0x4, 0x6000) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSCTTY(r2, 0x540e, 0x6) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x20800, 0x0) [ 939.750767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:26:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 939.769917] loop6: detected capacity change from 0 to 2048 16:26:52 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r10, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) fgetxattr(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="8eecef2f2cfe735a8a68b8d5d4735c2e00"], &(0x7f00000003c0)=""/76, 0x4c) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r12 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r12, &(0x7f0000000480)=@hci, &(0x7f0000000380)=0x80) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r13, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x53bb, &(0x7f0000000240)={0x0, 0xfd3b, 0x10, 0x1, 0x153, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd, 0x7fff, {0x0, r1}, 0x9, 0x8, 0x1, {0x0, 0x0, r0}}, 0x8) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="b9b3ad61b70718be9a31ea29f838a6720cda9d19038a51c7456a8b9992e1bfbc4111565b41e4d4b3ed4c1f0a2fab9ec63e7bdbbf0377604638d15cf5a00263d522e359ebef5f34b8df20f0365df7cb2b2f17135c872d0a7a86b3bca4cc60f5ba3c43c5a08505ec8a2e89631fb2e000f4a9552f0bfa4a", 0x76, 0x24048000}, 0x0) 16:26:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:09 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) socket$netlink(0x10, 0x3, 0xb) 16:27:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fadvise64(r0, 0xffffffff, 0x1, 0x1) [ 956.648957] FAULT_INJECTION: forcing a failure. [ 956.648957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.651054] CPU: 1 PID: 7771 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 956.652228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 956.653659] Call Trace: [ 956.654116] dump_stack+0x107/0x167 16:27:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 16:27:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 18) 16:27:09 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xc, &(0x7f0000000580)=""/174}, &(0x7f0000000180)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x7, 0x7, 0x1, 0x3}, 0x0, 0x0, r1, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r2, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0xa0243, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2c801, 0x0) renameat2(r3, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x0) 16:27:09 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 16:27:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:09 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000509c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000050bc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) [ 956.654886] should_fail.cold+0x5/0xa [ 956.654902] ? copyout.part.0+0x112/0x140 [ 956.654920] copy_page_to_iter+0x878/0xf80 [ 956.654947] blk_rq_unmap_user+0x552/0x750 [ 956.654975] ? blk_rq_map_kern+0x9e0/0x9e0 [ 956.655021] sg_finish_rem_req+0x73/0x320 [ 956.655038] sg_new_read+0x3d1/0x4b0 [ 956.655056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 956.655071] ? _raw_write_unlock_irq+0x1f/0x30 [ 956.655090] sg_ioctl_common+0x1f45/0x2570 [ 956.655107] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 956.655124] ? do_vfs_ioctl+0x283/0x10d0 [ 956.655138] ? sg_write+0x120/0x120 [ 956.655152] ? generic_block_fiemap+0x60/0x60 [ 956.655168] ? __mutex_unlock_slowpath+0xe1/0x600 [ 956.655185] ? wait_for_completion_io+0x270/0x270 [ 956.655210] ? selinux_file_ioctl+0xb6/0x270 [ 956.655224] ? sg_compat_ioctl+0x120/0x120 [ 956.655240] sg_ioctl+0x8f/0x120 [ 956.655258] __x64_sys_ioctl+0x19a/0x210 [ 956.655275] do_syscall_64+0x33/0x40 [ 956.655290] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.655300] RIP: 0033:0x7f16a9b0ab19 [ 956.655314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 956.655322] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.655338] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 956.655349] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 956.655361] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 956.655370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 956.655379] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 956.663239] loop6: detected capacity change from 0 to 2048 [ 956.668777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r6}, {}, {}, {}, {r10}, {}, {}, {}, {0x0, r9}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {r7}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) [ 956.839915] FAULT_INJECTION: forcing a failure. [ 956.839915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.842058] CPU: 1 PID: 7799 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 956.843225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 956.844635] Call Trace: [ 956.845093] dump_stack+0x107/0x167 [ 956.845723] should_fail.cold+0x5/0xa [ 956.846371] ? copyout.part.0+0x112/0x140 [ 956.847072] copy_page_to_iter+0x878/0xf80 [ 956.847796] blk_rq_unmap_user+0x552/0x750 [ 956.848520] ? blk_rq_map_kern+0x9e0/0x9e0 [ 956.849268] sg_finish_rem_req+0x73/0x320 [ 956.849977] sg_new_read+0x3d1/0x4b0 [ 956.850614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 956.851501] ? _raw_write_unlock_irq+0x1f/0x30 [ 956.852280] sg_ioctl_common+0x1f45/0x2570 [ 956.853009] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 956.853885] ? do_vfs_ioctl+0x283/0x10d0 [ 956.854587] ? sg_write+0x120/0x120 [ 956.855203] ? generic_block_fiemap+0x60/0x60 [ 956.855974] ? __mutex_unlock_slowpath+0xe1/0x600 [ 956.856808] ? wait_for_completion_io+0x270/0x270 [ 956.857634] ? selinux_file_ioctl+0xb6/0x270 [ 956.858377] ? sg_compat_ioctl+0x120/0x120 [ 956.859098] sg_ioctl+0x8f/0x120 [ 956.859674] __x64_sys_ioctl+0x19a/0x210 [ 956.860365] do_syscall_64+0x33/0x40 [ 956.861005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 956.861875] RIP: 0033:0x7f16a9b0ab19 [ 956.862516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 956.865645] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 956.866937] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 956.868147] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 956.869363] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 956.870580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 956.871801] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 956.887449] loop6: detected capacity change from 0 to 2048 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r16}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {0x0, r17}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r14}, {}, {}, {}, {r18}, {}, {}, {}, {0x0, r17}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {r15}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051bc0)={0xffffffffffffff3d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}, {}, {0x0, r1}, {}, {}, {r5, r8}, {r13, r16}], 0x0, "3b9ad3b9988105"}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r19 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r19, &(0x7f0000000880)=""/4096, 0x1000) lseek(r19, 0xfffffffffffff014, 0x1) getdents64(r19, 0x0, 0x0) 16:27:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x800, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) close_range(r0, r1, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:27:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 19) 16:27:09 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) 16:27:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 16:27:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x80000, &(0x7f0000000180)={[{@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_mixed}, {@shortname_winnt}], [{@seclabel}]}) 16:27:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6000}, 0x6d64}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="245967000000210c00000000000000000a000000080000000000000008001e0001000100"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x0, 0xff, 0x3, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd721, 0x4, @perf_bp={&(0x7f0000000100)}, 0x20, 0x0, 0x27, 0x9, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x4, r2, 0x8) syncfs(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) accept4$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x93893adf31b8bbaa) 16:27:10 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) 16:27:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 20) 16:27:27 executing program 5: r0 = syz_io_uring_setup(0x4d4d, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') socket$inet(0x2, 0x3, 0xff) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r3, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/143, 0x8f}], 0x1, &(0x7f0000000180)=""/99, 0x63}, 0x0, 0x12042, 0x1, {0x2, r6}}, 0x17) 16:27:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 16:27:27 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) socket$netlink(0x10, 0x3, 0xb) [ 974.103286] FAULT_INJECTION: forcing a failure. [ 974.103286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.105382] CPU: 1 PID: 7834 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 974.106546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.107950] Call Trace: [ 974.108400] dump_stack+0x107/0x167 [ 974.109029] should_fail.cold+0x5/0xa [ 974.109675] ? copyout.part.0+0x112/0x140 [ 974.110378] copy_page_to_iter+0x878/0xf80 16:27:27 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 16:27:27 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000007, 0x10, 0xffffffffffffffff, 0x10000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8400, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r2}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r2}}, 0x1) syz_io_uring_submit(0x0, r0, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=@l2, 0x0, 0x80800, 0x1, {0x0, r2}}, 0xf497) 16:27:27 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x200010c, &(0x7f0000000600)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4d0001, 0x8a, 0x2}, 0x18) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) execveat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) [ 974.111106] blk_rq_unmap_user+0x552/0x750 [ 974.112091] ? blk_rq_map_kern+0x9e0/0x9e0 [ 974.112840] sg_finish_rem_req+0x73/0x320 [ 974.113550] sg_new_read+0x3d1/0x4b0 [ 974.114186] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 974.115073] ? _raw_write_unlock_irq+0x1f/0x30 [ 974.115848] sg_ioctl_common+0x1f45/0x2570 [ 974.116579] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 974.117461] ? do_vfs_ioctl+0x283/0x10d0 [ 974.118154] ? sg_write+0x120/0x120 [ 974.118770] ? generic_block_fiemap+0x60/0x60 [ 974.119534] ? __mutex_unlock_slowpath+0xe1/0x600 [ 974.120351] ? wait_for_completion_io+0x270/0x270 [ 974.121184] ? selinux_file_ioctl+0xb6/0x270 [ 974.121934] ? sg_compat_ioctl+0x120/0x120 [ 974.122660] sg_ioctl+0x8f/0x120 [ 974.123242] __x64_sys_ioctl+0x19a/0x210 [ 974.123932] do_syscall_64+0x33/0x40 [ 974.124564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 974.125442] RIP: 0033:0x7f16a9b0ab19 [ 974.126084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.129210] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.130502] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 974.131749] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 974.132976] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.134177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.135387] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 974.142871] loop6: detected capacity change from 0 to 2048 [ 974.166295] EXT4-fs (loop6): Can't read superblock on 2nd try 16:27:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:27 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000, 0x0, 0x0) 16:27:27 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 16:27:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='.\',:^h*\x00', &(0x7f00000001c0)=',|\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='[]-\x00']) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x4c07, 0x0, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r5, 0x101, 0x0, 0x8, 0x3, 0x1, {0x0, r6}}, 0x1000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) fstatfs(r8, &(0x7f0000000440)=""/106) syz_io_uring_submit(r7, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(r0, &(0x7f00000002c0)='./file0\x00', 0xf0feeeeee60d67d0) [ 974.295958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 [ 974.326682] loop6: detected capacity change from 0 to 2048 [ 974.339083] EXT4-fs (loop6): Can't read superblock on 2nd try [ 991.921029] loop6: detected capacity change from 0 to 2048 [ 991.938660] EXT4-fs (loop6): Can't read superblock on 2nd try 16:27:44 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) socket$netlink(0x10, 0x3, 0xb) 16:27:44 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) 16:27:44 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = fork() r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x4, 0x9, 0x7, 0x6, 0x0, 0x8, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe59, 0x2, @perf_bp={&(0x7f0000000880), 0x8}, 0x2000, 0x3, 0x1f, 0x2, 0xd3b, 0x1, 0x49, 0x0, 0x7, 0x0, 0x6}, r1, 0x4, r3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setfsuid(r5) r6 = geteuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) setfsuid(r7) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000180)="572a779887223ef8a2a0631caaa86852216811ffad351745c8fd65c0feaa6a508e1839b9f33e", 0x26, 0x8}, {&(0x7f00000001c0)="818a275df12cbb287241c7442a183916f533e4d7a6bab3d16be3cf387f438328044873b8a0e01e7e8f4bb86cb244ce542a60f98acf3abce67e8bc3e1c74d62dad5d05fcd8c47620440c2e6be2ed2f41a7ec7c07a54e76d868219", 0x5a, 0x400}, {&(0x7f0000000240)="e817ffa3d448c298c08a9e70ca0e5a20a89713d63cffd25c5fddeb2ec3d665423cf0279fe4e0f82b2052e553e3cf59f4b343d717db8df3bbd1768e02f1224651f5f4eb2301a682df9b7e2b54bfce9428cc4f90d697234c6fc165573852a378d99ff7822c81b66685f76284f01f9c0d95fa0bd071e6a190bf24b88ff561ad544362228cbe7f37d7876ba4ee8951bde13073b1d35ccacbfbda6a8e1e1fa6e8548c5e79417ea3c5a143eeff9c97016a8c4d98149413550fbfd6c0d89a4f03c7793a3a06c91746df4d3cd293c7c507aea5f9e2d11c7a81adeba0", 0xd8, 0x29b}, {&(0x7f0000000340)="4e253c2b7835c696c9f618e48d7c77fb8e7671997d0e544a911e7a874f49f8544ad68e6432277d8c870d7f78073860cc8769448efad95978a617e152214a6f484e26cdddd9ddf010d83c94c74ff4d98ff316c35036b710d21f6a8eb390f3d292733a27c08807c6f57674fffc9a5aeee468d1ad4dffbbc250801a8f7511923f3ce1f92ab73a879ea62f204b89eeb1ff8d139b870f2307f21ad7bb773c4f642028f09f23a892a801e233cf34ed617cd83f0e80ad", 0xb3, 0x6}, {&(0x7f0000000400)="6b6de182226876fdfa349f2be08a3d0587a9af51d4f994774c547f3da8e4a28c4932ad7a004187b5a5320c7e6f101d72c057eed164b29f513a85d8efdd36af726d6f00c762f3d1caaf98f2b49de7f61d67df8304c84a6d4164db0aed0061af2478a20bea6da3b7b7e9b360c1396d83a713ae6c26f0b3081b4271346ba6c00fb011c7ecc0d941ea05f98f47678b9d46fb41414cac1aa90534a558a1baa43e73b21164271c8121f2f7568537f4e5e3c739e956740b47bafffabc419a6b2da34261011dd58372ee873c1970e6bf4661c14b", 0xd0, 0x6}, {&(0x7f0000000500)="1ef9fc149a6489d5f2f6b0cb2aa1272df77c", 0x12, 0xb61}, {&(0x7f0000000540)="03a8f740cb2d1764631f8fe525f27b3e5671c363102730484fb6e4d8209fff96add1b23f0d2147a4609038c28fa800824e", 0x31, 0x81}, {&(0x7f0000000580)="2dd5c22857c8a785d0b36d5636f13137fe057e20159b50f3f0711e88110c4394ccbf012f4ea0747935509c95ab735d43bc069c06bc6be17d09c81007051ef8ed9df9b08e05efa3ff02b70cc7a88a209ad3bc876e8de8a72cbaca4ffb8fae07fe6e86165eb7c0cf91f6bb6cb3e530ca9dab5abb2eb7f15d5f68cf415f1d8d67516e358b969fe19e1810986490d3948b3e760141c1389f6d5f92908e5fef6817", 0x9f, 0x3ff}, {&(0x7f0000000640)="f957cccb13493f38ec79a29e4a350502787adffbd3da05aa3dc569ba45a5a5ba953df048b2374b167a42fc6f1bc304951b31678bb51f2b599504e4228dd62d3bda95115e26ec0ba037ff6795b191d5", 0x4f, 0xea}], 0x8008, &(0x7f00000009c0)={[{}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x25, 0x2d, 0x34]}}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x3a, 0x2f, 0x3a, 0x30, 0x2d, 0x2f, 0x33]}}}}, {@mode={'mode', 0x3d, 0x4}}, {@gid={'gid', 0x3d, r4}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x5d, 0x0, 0x37]}}], [{@subj_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '[}+!!'}}, {@fowner_gt={'fowner>', r5}}, {@fowner_lt={'fowner<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x9c03}}, {@euid_gt={'euid>', r7}}, {@euid_gt={'euid>', 0xee00}}]}) dup3(r0, r0, 0xef564bbac3aef38e) 16:27:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 21) 16:27:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x13}, 0x10, 0x700, 0xd1dd, 0xd60}}) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x400) getxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="f48175730100642e00"], &(0x7f0000000400)=""/19, 0x13) 16:27:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xff, 0x7f, 0x6, 0xff, 0x0, 0x8, 0x9f34ba82adf4215b, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x40100, 0xfffffffffffffff8, 0x3, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x5, 0x0, 0x8}, r0, 0x2, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r1, &(0x7f0000000240)='net/ip_vs_stats\x00') r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000140)={0x1, 0x9, 0x9}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pidfd_open(r1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x1c1400) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x10, 0x4, 0x0, 0x0, {}, [@typed={0x14, 0x46}, @nested={0x17, 0x10, 0x0, 0x1, [@generic="487f19a7e87584f18c0000ff07ffff4431a5e8"]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) 16:27:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) [ 991.950189] FAULT_INJECTION: forcing a failure. [ 991.950189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.952895] CPU: 0 PID: 7878 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 991.954406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 991.956235] Call Trace: [ 991.956841] dump_stack+0x107/0x167 [ 991.957641] should_fail.cold+0x5/0xa [ 991.958483] ? copyout.part.0+0x112/0x140 [ 991.959404] copy_page_to_iter+0x878/0xf80 [ 991.960351] blk_rq_unmap_user+0x552/0x750 [ 991.961306] ? blk_rq_map_kern+0x9e0/0x9e0 [ 991.962262] sg_finish_rem_req+0x73/0x320 [ 991.963183] sg_new_read+0x3d1/0x4b0 [ 991.964010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 991.965179] ? _raw_write_unlock_irq+0x1f/0x30 [ 991.966189] sg_ioctl_common+0x1f45/0x2570 [ 991.967124] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 991.968257] ? do_vfs_ioctl+0x283/0x10d0 [ 991.969160] ? sg_write+0x120/0x120 [ 991.969957] ? generic_block_fiemap+0x60/0x60 [ 991.970944] ? __mutex_unlock_slowpath+0xe1/0x600 [ 991.972005] ? wait_for_completion_io+0x270/0x270 [ 991.973085] ? selinux_file_ioctl+0xb6/0x270 [ 991.974047] ? sg_compat_ioctl+0x120/0x120 [ 991.974980] sg_ioctl+0x8f/0x120 [ 991.975731] __x64_sys_ioctl+0x19a/0x210 [ 991.976628] do_syscall_64+0x33/0x40 [ 991.977481] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 991.978614] RIP: 0033:0x7f16a9b0ab19 [ 991.979445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 991.983497] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.985306] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 991.987203] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 991.988776] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 991.990371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.991949] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 992.040548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 16:27:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:45 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 16:27:45 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/5, 0x5}], 0x3, 0x8, 0x6c) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0xf8, 0x6, 0x4, 0x0, 0x81, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xffff, 0x9}, 0x8, 0x1, 0x9, 0x5, 0x101, 0x0, 0x8, 0x0, 0x10000, 0x0, 0xe05d}, 0x0, 0x2, r0, 0x8) 16:27:45 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = fork() r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x4, 0x9, 0x7, 0x6, 0x0, 0x8, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe59, 0x2, @perf_bp={&(0x7f0000000880), 0x8}, 0x2000, 0x3, 0x1f, 0x2, 0xd3b, 0x1, 0x49, 0x0, 0x7, 0x0, 0x6}, r1, 0x4, r3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setfsuid(r5) r6 = geteuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) setfsuid(r7) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000180)="572a779887223ef8a2a0631caaa86852216811ffad351745c8fd65c0feaa6a508e1839b9f33e", 0x26, 0x8}, {&(0x7f00000001c0)="818a275df12cbb287241c7442a183916f533e4d7a6bab3d16be3cf387f438328044873b8a0e01e7e8f4bb86cb244ce542a60f98acf3abce67e8bc3e1c74d62dad5d05fcd8c47620440c2e6be2ed2f41a7ec7c07a54e76d868219", 0x5a, 0x400}, {&(0x7f0000000240)="e817ffa3d448c298c08a9e70ca0e5a20a89713d63cffd25c5fddeb2ec3d665423cf0279fe4e0f82b2052e553e3cf59f4b343d717db8df3bbd1768e02f1224651f5f4eb2301a682df9b7e2b54bfce9428cc4f90d697234c6fc165573852a378d99ff7822c81b66685f76284f01f9c0d95fa0bd071e6a190bf24b88ff561ad544362228cbe7f37d7876ba4ee8951bde13073b1d35ccacbfbda6a8e1e1fa6e8548c5e79417ea3c5a143eeff9c97016a8c4d98149413550fbfd6c0d89a4f03c7793a3a06c91746df4d3cd293c7c507aea5f9e2d11c7a81adeba0", 0xd8, 0x29b}, {&(0x7f0000000340)="4e253c2b7835c696c9f618e48d7c77fb8e7671997d0e544a911e7a874f49f8544ad68e6432277d8c870d7f78073860cc8769448efad95978a617e152214a6f484e26cdddd9ddf010d83c94c74ff4d98ff316c35036b710d21f6a8eb390f3d292733a27c08807c6f57674fffc9a5aeee468d1ad4dffbbc250801a8f7511923f3ce1f92ab73a879ea62f204b89eeb1ff8d139b870f2307f21ad7bb773c4f642028f09f23a892a801e233cf34ed617cd83f0e80ad", 0xb3, 0x6}, {&(0x7f0000000400)="6b6de182226876fdfa349f2be08a3d0587a9af51d4f994774c547f3da8e4a28c4932ad7a004187b5a5320c7e6f101d72c057eed164b29f513a85d8efdd36af726d6f00c762f3d1caaf98f2b49de7f61d67df8304c84a6d4164db0aed0061af2478a20bea6da3b7b7e9b360c1396d83a713ae6c26f0b3081b4271346ba6c00fb011c7ecc0d941ea05f98f47678b9d46fb41414cac1aa90534a558a1baa43e73b21164271c8121f2f7568537f4e5e3c739e956740b47bafffabc419a6b2da34261011dd58372ee873c1970e6bf4661c14b", 0xd0, 0x6}, {&(0x7f0000000500)="1ef9fc149a6489d5f2f6b0cb2aa1272df77c", 0x12, 0xb61}, {&(0x7f0000000540)="03a8f740cb2d1764631f8fe525f27b3e5671c363102730484fb6e4d8209fff96add1b23f0d2147a4609038c28fa800824e", 0x31, 0x81}, {&(0x7f0000000580)="2dd5c22857c8a785d0b36d5636f13137fe057e20159b50f3f0711e88110c4394ccbf012f4ea0747935509c95ab735d43bc069c06bc6be17d09c81007051ef8ed9df9b08e05efa3ff02b70cc7a88a209ad3bc876e8de8a72cbaca4ffb8fae07fe6e86165eb7c0cf91f6bb6cb3e530ca9dab5abb2eb7f15d5f68cf415f1d8d67516e358b969fe19e1810986490d3948b3e760141c1389f6d5f92908e5fef6817", 0x9f, 0x3ff}, {&(0x7f0000000640)="f957cccb13493f38ec79a29e4a350502787adffbd3da05aa3dc569ba45a5a5ba953df048b2374b167a42fc6f1bc304951b31678bb51f2b599504e4228dd62d3bda95115e26ec0ba037ff6795b191d5", 0x4f, 0xea}], 0x8008, &(0x7f00000009c0)={[{}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x25, 0x2d, 0x34]}}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x3a, 0x2f, 0x3a, 0x30, 0x2d, 0x2f, 0x33]}}}}, {@mode={'mode', 0x3d, 0x4}}, {@gid={'gid', 0x3d, r4}}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x5d, 0x0, 0x37]}}], [{@subj_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '[}+!!'}}, {@fowner_gt={'fowner>', r5}}, {@fowner_lt={'fowner<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x9c03}}, {@euid_gt={'euid>', r7}}, {@euid_gt={'euid>', 0xee00}}]}) dup3(r0, r0, 0xef564bbac3aef38e) 16:27:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 22) 16:27:45 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) [ 992.255770] FAULT_INJECTION: forcing a failure. [ 992.255770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.258444] CPU: 0 PID: 7908 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 992.259938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.261749] Call Trace: [ 992.262326] dump_stack+0x107/0x167 [ 992.263119] should_fail.cold+0x5/0xa [ 992.263942] ? copyout.part.0+0x112/0x140 [ 992.264854] copy_page_to_iter+0x878/0xf80 [ 992.265791] blk_rq_unmap_user+0x552/0x750 [ 992.266725] ? blk_rq_map_kern+0x9e0/0x9e0 [ 992.267670] sg_finish_rem_req+0x73/0x320 [ 992.268574] sg_new_read+0x3d1/0x4b0 [ 992.269396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.270531] ? _raw_write_unlock_irq+0x1f/0x30 [ 992.271531] sg_ioctl_common+0x1f45/0x2570 [ 992.272456] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 992.273588] ? do_vfs_ioctl+0x283/0x10d0 [ 992.274466] ? sg_write+0x120/0x120 [ 992.275250] ? generic_block_fiemap+0x60/0x60 [ 992.276224] ? __mutex_unlock_slowpath+0xe1/0x600 [ 992.277286] ? wait_for_completion_io+0x270/0x270 [ 992.278344] ? selinux_file_ioctl+0xb6/0x270 [ 992.279299] ? sg_compat_ioctl+0x120/0x120 [ 992.280215] sg_ioctl+0x8f/0x120 [ 992.280959] __x64_sys_ioctl+0x19a/0x210 [ 992.281845] do_syscall_64+0x33/0x40 [ 992.282652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.283764] RIP: 0033:0x7f16a9b0ab19 [ 992.284578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.288615] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.290302] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 992.291870] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 992.293441] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.294997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 992.296556] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:27:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x20, 0x3f, 0x2, 0x8, 0x0, 0x5, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x10, 0x10000, 0x49, 0x0, 0x2, 0xed40, 0xfff8, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 992.315771] loop7: detected capacity change from 0 to 2048 [ 992.321670] EXT4-fs (loop7): Can't read superblock on 2nd try 16:27:45 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 16:27:59 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) socket$netlink(0x10, 0x3, 0xb) 16:27:59 executing program 7: getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/191, &(0x7f0000000180)=0xbf) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000200)={0x8, 'veth1_to_bond\x00', {'vlan1\x00'}, 0x8001}) r1 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x0, '\x00', 0x4}, 0x18) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x49, 0x5}, 0x18) syz_io_uring_setup(0x36f8, &(0x7f0000000380)={0x0, 0xe95a, 0x1, 0x2, 0x31f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r1, 0x4, 0x401, 0x1ff}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000600)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f00000004c0), &(0x7f00000005c0)='./file0/file0\x00', 0x7ff, 0x800, 0x0, {0x0, r5}}, 0x9) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x10000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x50, r2, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000640)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x12, 0x1, {0x0, r5}}, 0x3ff) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x400, 0xc7) r7 = openat$cgroup_freezer_state(r0, &(0x7f00000006c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0/file0\x00'}) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x50, r7, 0x10000000) syz_io_uring_submit(r3, r8, &(0x7f0000000740)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd=r1, 0x6, 0x7, 0x6d5, 0x10, 0x1, {0x3, r5}}, 0x2) 16:27:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 1) 16:27:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:27:59 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = syz_io_uring_setup(0x6210, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x31c0, 0x2903, 0x1, &(0x7f0000000200)={[0x100000000]}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x3}) 16:27:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x42a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0x10002) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r6, r5, 0x0, 0x500000001) 16:27:59 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 16:27:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 23) [ 1006.425178] FAULT_INJECTION: forcing a failure. [ 1006.425178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.427941] CPU: 1 PID: 7930 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1006.429537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.431442] Call Trace: [ 1006.432052] dump_stack+0x107/0x167 [ 1006.432894] should_fail.cold+0x5/0xa [ 1006.433789] ? copyout.part.0+0x112/0x140 [ 1006.434747] copy_page_to_iter+0x878/0xf80 [ 1006.435737] blk_rq_unmap_user+0x552/0x750 [ 1006.436723] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1006.437746] sg_finish_rem_req+0x73/0x320 [ 1006.438704] sg_new_read+0x3d1/0x4b0 [ 1006.439564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1006.440770] ? _raw_write_unlock_irq+0x1f/0x30 16:27:59 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) [ 1006.441851] sg_ioctl_common+0x1f45/0x2570 [ 1006.443023] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1006.444201] ? do_vfs_ioctl+0x283/0x10d0 [ 1006.445149] ? sg_write+0x120/0x120 [ 1006.445975] ? generic_block_fiemap+0x60/0x60 [ 1006.446993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1006.448092] ? wait_for_completion_io+0x270/0x270 [ 1006.449234] ? selinux_file_ioctl+0xb6/0x270 [ 1006.450237] ? sg_compat_ioctl+0x120/0x120 [ 1006.451207] sg_ioctl+0x8f/0x120 [ 1006.451986] __x64_sys_ioctl+0x19a/0x210 [ 1006.452921] do_syscall_64+0x33/0x40 [ 1006.453795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.454970] RIP: 0033:0x7f16a9b0ab19 [ 1006.455822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.460044] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.461803] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1006.463432] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1006.465078] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.466703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.468328] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1006.476152] FAULT_INJECTION: forcing a failure. [ 1006.476152] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.478751] CPU: 1 PID: 7940 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1006.480320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.482240] Call Trace: [ 1006.482845] dump_stack+0x107/0x167 [ 1006.483683] should_fail.cold+0x5/0xa [ 1006.484558] ? __do_sys_memfd_create+0xfb/0x450 [ 1006.485651] should_failslab+0x5/0x20 [ 1006.486523] __kmalloc+0x72/0x390 [ 1006.487321] __do_sys_memfd_create+0xfb/0x450 [ 1006.488347] ? ksys_write+0x1a9/0x260 [ 1006.489235] ? memfd_file_seals_ptr+0x170/0x170 [ 1006.490314] do_syscall_64+0x33/0x40 [ 1006.491161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.492337] RIP: 0033:0x7eff8aae2b19 [ 1006.493212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.497716] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 16:27:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x20, 0x2, &(0x7f00000011c0)=[{&(0x7f0000000180)="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", 0x1000, 0xaa}, {&(0x7f0000001180)="ea04c6a9444b49b8474f8d9f4ce9523327393a7341ac5be6593b734340ba0bf1d827826046da4103995d9bb224682c9cfd45", 0x32, 0x6}], 0x1200085, &(0x7f0000001200)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1f}}, {@discard}], [{@euid_gt={'euid>', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x92\']/}\xaa\'\n+]},\x02,,\\:*'}}, {@subj_type={'subj_type', 0x3d, '!%:%'}}, {@obj_user={'obj_user', 0x3d, '#'}}]}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x4c07, 0x0, 0x0, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x40000, 0x48, 0x1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FICLONE(r2, 0x40049409, r3) [ 1006.499466] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 sendmsg$nl_generic(r1, &(0x7f0000002a40)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a00)={&(0x7f0000001400)={0x15e0, 0x40, 0x2, 0x70bd25, 0x25dfdbfb, {0x15}, [@generic="005a2757a91738b9471209ed03ebc7435b5cd691adfe3cd883027c0517b3eb81da5e7534d01d4e2be3ccbb6b398c6f6b8abc18588cfac06e04fa1960947668f4ab1e2c72752dbe8db0dbd6e99c6817faad6864d44544caab691ac877961e1bcc77df0fcafc379a72f371f8a0f8167bd20654e19d0f55d81f473497ffdafcbcc609ec49de8b431822b8081f674b58bda76260bfdaab3eedd27cca8febe7de60d76f91e81eda867a9377dd33e572a5c79361b8ebd84a7b2b899be2375a5b55d14cc862de9aa8166bf1adc707db89ab2d149ea43b498b1756d928a9f98905bee98a41a6775bf36134ca33903348", @typed={0x1004, 0x6b, 0x0, 0x0, @binary="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"}, @generic="046aa3d67966b77a798a7d57226c2fa2b225bc5284c7d9bbb33631ac1c93637bea7fd89d829f757f3a21fd1f79019fa3bd1022398b717bf8e31d0db0f18cba745b46eb550799629130d642e409ffaad77e0923ccc60270e24d165d871921d756fea8a5ec7ff843bc37129c6786d52567cef80f66a0e53be3356afbd4bf79ea302aaba4fa6c656aa5e616eba90bb48a04d3f65ada04de2cbddf0a51630708c2e854c2a20c4cfd2b1e70feeac1d1398a190423d386c5f2afce0e6ba7eb89", @generic="4150b387039724f26e8818ae5f7e33a0082d27612f6d148e418a65cb33b0bbb9b109", @nested={0x220, 0x96, 0x0, 0x1, [@generic="8165234353704e67ee74ea4012fb765c18d41b09c783f87bf373715fa9e976fd3a59f208a03af5eea1859da749a6767e179a", @generic="8de7a3848ad58567c34c8c3fceada92ecd4e0fc006d4cb6ec48052c3617aecbebce7582d289011e08bce7de20e6c708aa271d1039df5101e0ccf5e8c69f0a1a30f9053eb6b6eea9d2681bf32e3f7386fd158d286b6c28c2b6c50e1e9262c3f4dc7e2ca368c6bee6d57085ef4bfa2cfe9f32bae464713dbaba2759b6f50c0bcd70740e729cce72bb6c62682f922cd3997d1f99e4b739a0587e190140ae4c9fa2207555dec515f96b8d62f9235e35e021d901bde2a1f286d82da0f2757a867cf042b42bbc524e2fabc485b74be355e9fd26f9b7250aa73d8d5bc8882bb1aa08eebf7f7bb3a244bd9a052ccdba299fd0fd6e2b10a24ac44cc69c4", @generic="dcf75139b8385277f58cc6378b3bc9b8a5f29b08d9d8d62fd4d9ed9d6c3a4f81c3299167d8cbae4ff89aacc41aab938130c872690b62f4768dbb448815478c814db142e9f159ec4b8e1b4c338b3c7110b12543256ae94c07219d1b07318afca9b2bc95ba0f46d80ca7b3e2062c0cf39efa4866cabf43dbad549a1bdff9127dba3babf7d68255bcde1d8af7e5ab4c4c1a79748d83d97722343f296f44d79e7d80a1c7bab89014b5d55e0f028b5d06f8e202f3309a07423992574d345631c160bde188586f82fbc1c5410ad179376513fa4e", @typed={0x8, 0x4c, 0x0, 0x0, @fd=r1}, @typed={0x18, 0x71, 0x0, 0x0, @str='inode_readahead_blks'}]}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@mcast2}, @generic="06a378adc5f22ce8f7cb8afe045980a6ccc793015a58fae746f57bc13018875c7bb00d6677b9c7689ebcb4a4067d01b540ba223938ada73b76c3689d3a8ff562875667e7ed652eff1382e57355517ddfdffb71e83665f3a909530c1bf41ed10d0e6ed7dca604df53bec9ca575c", @typed={0x59, 0xd, 0x0, 0x0, @binary="19e70723b21770033e667ba7ae76f48b26ab35994853595ad42ea904b409d9b60b1a179d142d628ea32ac796c597d06178d9378c11629a6c98eb3b6edc3ef01e0f4241f77dd279c6fe46ba8b5f90b51f5fb0714c9a"}, @nested={0x100, 0xb, 0x0, 0x1, [@generic="ca81cc82fb2b0d2746046697ba6f3ce56ee62d7d", @generic="3a23518750d9112da93b93172a3c840d9288a8d27a", @typed={0x8, 0x53, 0x0, 0x0, @fd=r1}, @generic="6292eb76fb17a0555c042bd961028722cfcc5b813e4c7650eb59d75533f275f8717ade6d13d9007416195d65ac1071a76cac03acb457295880e45fddc48f09b53157f0feaf6df02e72c1f9feb7fcf8a9e33d42b0ca437019a33f8df4e8c3c32eb76eff798e373c521a01001d8c501285a68efebf82ef90ef3bf7423d699526f2349ee87521613440261a8adb4e4082866035832bbf31f820c240831d0d9347d2e96f42207af1687bcfddeb67750d013b5880cd601a26b39ddc4af0cb5686f4a2560f5f", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x2}]}]}, 0x15e0}, 0x1, 0x0, 0x0, 0x4000001}, 0x200018c4) mkdirat(r1, &(0x7f0000001300)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1006.501622] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1006.503343] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1006.504995] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1006.506631] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1006.527505] loop0: detected capacity change from 0 to 4096 [ 1006.530964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 [ 1006.534190] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 16:27:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 2) 16:27:59 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 16:27:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 24) [ 1006.575666] loop0: detected capacity change from 0 to 4096 [ 1006.585933] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 16:27:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1006.612417] FAULT_INJECTION: forcing a failure. [ 1006.612417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.613927] CPU: 0 PID: 7958 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1006.614767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.615783] Call Trace: [ 1006.616114] dump_stack+0x107/0x167 [ 1006.616566] should_fail.cold+0x5/0xa [ 1006.617040] ? copyout.part.0+0x112/0x140 [ 1006.617552] copy_page_to_iter+0x878/0xf80 [ 1006.618082] blk_rq_unmap_user+0x552/0x750 [ 1006.618610] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1006.619146] sg_finish_rem_req+0x73/0x320 [ 1006.619655] sg_new_read+0x3d1/0x4b0 [ 1006.620114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1006.620758] ? _raw_write_unlock_irq+0x1f/0x30 [ 1006.621331] sg_ioctl_common+0x1f45/0x2570 [ 1006.621856] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1006.622494] ? do_vfs_ioctl+0x283/0x10d0 [ 1006.622993] ? sg_write+0x120/0x120 [ 1006.623440] ? generic_block_fiemap+0x60/0x60 [ 1006.623990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1006.624587] ? wait_for_completion_io+0x270/0x270 [ 1006.625196] ? selinux_file_ioctl+0xb6/0x270 [ 1006.625736] ? sg_compat_ioctl+0x120/0x120 [ 1006.626262] sg_ioctl+0x8f/0x120 [ 1006.626674] __x64_sys_ioctl+0x19a/0x210 [ 1006.627177] do_syscall_64+0x33/0x40 [ 1006.627632] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.628258] RIP: 0033:0x7f16a9b0ab19 [ 1006.628710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.630955] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.631877] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1006.632744] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1006.633617] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1006.634486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.635351] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:27:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syncfs(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1c8) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x12) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x6fa759d5cac41758, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syncfs(r2) 16:27:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = io_uring_setup(0x5ee1, &(0x7f00000006c0)={0x0, 0xe821, 0x20, 0x3, 0x177}) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x8000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffc, 0xb4, 0xff, @buffer={0x0, 0x92, &(0x7f00000001c0)=""/146}, &(0x7f0000000280)="00dd37eab573f1c8fe5571f0286d05150d4098f1136b92fb3903acf664b1804f5ebb738c6b1db6f218ebec51e1894f79015efbb49ecb7fd48f28a8703d2de5e2486864119aa396a934616227d28593e6f5b31863abf9ba713ac6b348fec867dd15028ab31161ce5162e950bfb374c010901e7c0a5a756b9f37c182d7a31f0007120fc438b7e0193be08b350d119174d5b4df6f7226c539813c7e4c12453c561050e857258d59dc1a26f5705a14d5b1e77bbf5f2d", &(0x7f0000000440)=""/228, 0x9d71, 0x0, 0x3, &(0x7f0000000340)}) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x33, 0x2, 0x0, 0x0, 0x2, 0x60200, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x2}, 0x8000, 0xf5, 0x1, 0x3, 0x200, 0x9, 0xffff, 0x0, 0x10000000, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r2, 0x2) [ 1006.735638] FAULT_INJECTION: forcing a failure. [ 1006.735638] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.737175] CPU: 0 PID: 7971 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1006.738085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1006.739048] Call Trace: [ 1006.739361] dump_stack+0x107/0x167 [ 1006.739794] should_fail.cold+0x5/0xa [ 1006.740243] ? create_object.isra.0+0x3a/0xa20 [ 1006.740781] should_failslab+0x5/0x20 [ 1006.741229] kmem_cache_alloc+0x5b/0x310 [ 1006.741703] create_object.isra.0+0x3a/0xa20 [ 1006.742211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1006.742801] __kmalloc+0x16e/0x390 [ 1006.743218] __do_sys_memfd_create+0xfb/0x450 [ 1006.743736] ? ksys_write+0x1a9/0x260 [ 1006.744162] ? memfd_file_seals_ptr+0x170/0x170 [ 1006.744727] do_syscall_64+0x33/0x40 [ 1006.745155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1006.745767] RIP: 0033:0x7eff8aae2b19 [ 1006.746184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.748386] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1006.749249] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1006.750053] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1006.750857] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1006.751655] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1006.752457] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1006.803796] loop6: detected capacity change from 0 to 2048 [ 1006.840119] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:28:13 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) 16:28:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:28:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 3) 16:28:13 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="2e2f66696c6530006d58b14b67c0d9a262003b634ca0d89cea132a61dc65c21be45ce08a3dab951c445134ad785ed5567e15abcb7de07bf3cd630e69213992b31a8056c149172e418922b4e916f85c377758eb15a4db03aab871c277d8b37daad7f90bef291e887a"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESHEX=r2, @ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r2]) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x404800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000300)=ANY=[@ANYBLOB="01fe091b0650dbe7418e3b927dd80000000100000018000000", @ANYRES32=r3, @ANYBLOB="d3ab0000000000002e2f66696c65300048338a81068724b5"]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x89005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x2a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000500)={0x1138, 0x10000, 0x6f}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f00000002c0)='./file0\x00', 0x821a1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:28:13 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) [ 1020.824167] FAULT_INJECTION: forcing a failure. [ 1020.824167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.826980] CPU: 1 PID: 7986 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1020.828589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.830507] Call Trace: [ 1020.831119] dump_stack+0x107/0x167 [ 1020.831961] should_fail.cold+0x5/0xa [ 1020.832863] _copy_from_user+0x2e/0x1b0 [ 1020.833793] __do_sys_memfd_create+0x16d/0x450 16:28:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf7, 0x1, 0x8, 0x0, 0x0, 0x4009, 0x1001, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x8}, 0xb010, 0x7, 0x6, 0x5, 0x1, 0x1, 0x8, 0x0, 0x919, 0x0, 0x4}, r0, 0xffffffffffffffff, r1, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:28:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 25) 16:28:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000008) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRESOCT, @ANYBLOB="00000000000000002e2f66696c6530ce000000000000005ffe872c042e6395824e3ee4907db24f92f62376a57715c119e546d58f49440cc408b12d5237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x91}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0xa6) openat$hpet(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x4000893}, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e00210c001807d69dae3996bf0400000800000000000100e25c95acae93ca983cd0dec3a3c3cc6c16e1db1be57f27a833cbdb08198a328f10700d5490c39f971b54ed373abd7ad97f096e0e9c7444e45ae839cacc2e4453d584907c79f59c5c895c3baef62f7373032bf6234edd877ecca9c39b65182df1e81d30798ec2fe95a5368220f566e145e9a950587a961700844f6aad5652d0aa40e4fd892fc69ec7537f6f4e0085b1f7a7d1e194e084810f2808f58ee9c224b864181064c11b44dde3e053e62f9ce137b1d92c8d37bd6a294cdd5bfef787dc3c2a539bfbbbb579340c3afc9972d605e999cd226e20ff102465909218cef09c6f7b016f9331d2a17a83b0d047bef4d36d4a730229e27875fafe2c571f89f11a68ec3988bb04f46198573b8396"], 0x1c}}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x77, 0x5}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@loopback}, 0x14) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1f, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6532207b28232c5d2e0a223abaa5ac8d216824d4ee9dd38ab20e3f0df7e9fc08000000000000008615aa362a9f779e75e0982d737caada9dfcd4a2e3f76841eb1a2fb9ae4f13a1ece25ba8647f0184875e636ab877cc0d1f5cce01a84423c1e9aaf2edff23fc6afde68872b640a0d23ee19eb6c9083be8c2f28a62a2a0"], 0x88) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1020.834848] ? memfd_file_seals_ptr+0x170/0x170 [ 1020.836204] do_syscall_64+0x33/0x40 [ 1020.837104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1020.838293] RIP: 0033:0x7eff8aae2b19 [ 1020.839147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.843387] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1020.845142] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1020.846789] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1020.848434] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1020.850082] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1020.851707] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 16:28:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:28:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x0, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x5, 0xf9, 0x0, 0x1f, 0x208, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x1000, 0x1, 0x9, 0x7, 0x4, 0xffff, 0x0, 0x7fff, 0x0, 0x4}, 0xffffffffffffffff, 0x4, r0, 0x9) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1020.876421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1020.884394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 [ 1020.898682] FAULT_INJECTION: forcing a failure. [ 1020.898682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.901414] CPU: 1 PID: 7997 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1020.902961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.904808] Call Trace: [ 1020.905421] dump_stack+0x107/0x167 [ 1020.906250] should_fail.cold+0x5/0xa [ 1020.907104] ? copyout.part.0+0x112/0x140 [ 1020.908068] copy_page_to_iter+0x878/0xf80 [ 1020.909044] blk_rq_unmap_user+0x552/0x750 [ 1020.910047] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1020.911050] sg_finish_rem_req+0x73/0x320 [ 1020.912008] sg_new_read+0x3d1/0x4b0 [ 1020.912871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1020.914106] ? _raw_write_unlock_irq+0x1f/0x30 [ 1020.915175] sg_ioctl_common+0x1f45/0x2570 [ 1020.916160] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1020.917371] ? do_vfs_ioctl+0x283/0x10d0 [ 1020.918349] ? sg_write+0x120/0x120 [ 1020.919193] ? generic_block_fiemap+0x60/0x60 [ 1020.920234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.921363] ? wait_for_completion_io+0x270/0x270 [ 1020.922494] ? selinux_file_ioctl+0xb6/0x270 [ 1020.923512] ? sg_compat_ioctl+0x120/0x120 [ 1020.924495] sg_ioctl+0x8f/0x120 [ 1020.925292] __x64_sys_ioctl+0x19a/0x210 [ 1020.926237] do_syscall_64+0x33/0x40 [ 1020.927101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1020.928289] RIP: 0033:0x7f16a9b0ab19 [ 1020.929160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:28:14 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 1020.933432] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.935395] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1020.937003] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1020.938629] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.940238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.941858] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1020.965765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.967455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.970002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:28:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x2, 0x40, 0x84, 0x0, 0x7, 0x5420, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x10, 0x9, 0x5, 0x5, 0x9, 0x1, 0x6, 0x0, 0x5, 0x0, 0xffffffffffffff85}, r0, 0xe, 0xffffffffffffffff, 0xa) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1020.978828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:28:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:28:14 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 4) 16:28:14 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) 16:28:14 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00') r1 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x1) r3 = gettid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x100}) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={0x0, 0x370}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000700)=0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getpgrp(r5) dup2(r1, r6) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500005c0100000000119078ac1e0101ffffffff00004e2000489078030000000400000098de03549351c81160a313c399548e3bb1f784e3bd2b19d4d8fe291c2a045afc63b544fcca550e05146d1013fecd8e090f9035ff031b0806fe07c1ea1d8128d05d44d38ce5b3"], 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000480)=0x7) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f0000000340)="45352890672ccdb24ccd3df1c4c001d6884e66344abf13b1086e8ff5f4c2d1f00f995e4777411e6f3a1af7737d9ac942df808594fbbb50132764fae031a15550332d3429b84b37c8c75c996580b7816ad13a72516cce6c1570cbffe7a60faa840e4335218135e59ca866308570213d299150ec797441009c3c8e0858c378f9213f8fa6220b419eab5d4492924925bf8b3c3db40fc13aa021aea5db3329f016d28d9357cc3f808dfca5376d5d971e35231ff63856394bb6ef94d878cb380bb01322fd0fa7cfbcc8578967dbc4adb0827d7fbed37d8f91de2b778270e39faae4b0692d1f54361a3617b715e786b15ece824f07996e47472accff9cd1e6", 0xfc, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) recvmmsg(r4, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) [ 1021.112060] FAULT_INJECTION: forcing a failure. [ 1021.112060] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.113559] CPU: 0 PID: 8020 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1021.114404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1021.115424] Call Trace: [ 1021.115765] dump_stack+0x107/0x167 [ 1021.116210] should_fail.cold+0x5/0xa [ 1021.116681] ? shmem_alloc_inode+0x18/0x40 [ 1021.117211] should_failslab+0x5/0x20 [ 1021.117681] kmem_cache_alloc+0x5b/0x310 [ 1021.118184] ? shmem_destroy_inode+0x70/0x70 [ 1021.118725] shmem_alloc_inode+0x18/0x40 [ 1021.119237] ? shmem_destroy_inode+0x70/0x70 [ 1021.119786] alloc_inode+0x63/0x240 [ 1021.120229] new_inode+0x23/0x250 [ 1021.120648] shmem_get_inode+0x15e/0xbc0 [ 1021.121159] __shmem_file_setup+0xb8/0x320 [ 1021.121685] ? _copy_from_user+0xfb/0x1b0 [ 1021.122204] __do_sys_memfd_create+0x275/0x450 [ 1021.122767] ? memfd_file_seals_ptr+0x170/0x170 [ 1021.123348] do_syscall_64+0x33/0x40 [ 1021.123809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1021.124432] RIP: 0033:0x7eff8aae2b19 [ 1021.124892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1021.127127] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1021.128049] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1021.128911] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1021.129774] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1021.130634] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1021.131492] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 16:28:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 5) 16:28:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 26) 16:28:30 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000200), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x4010, r1, 0x10000000) syz_io_uring_setup(0xd30, &(0x7f0000000280)={0x0, 0x5720, 0x10, 0x2, 0xdd, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000300)) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x58583c55, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x7) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r1, 0x2, 0x0, 0x80000001}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1037.700962] FAULT_INJECTION: forcing a failure. [ 1037.700962] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.702683] CPU: 0 PID: 8035 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1037.703741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.704833] Call Trace: [ 1037.705208] dump_stack+0x107/0x167 [ 1037.705707] should_fail.cold+0x5/0xa [ 1037.706225] ? create_object.isra.0+0x3a/0xa20 [ 1037.706843] should_failslab+0x5/0x20 [ 1037.707361] kmem_cache_alloc+0x5b/0x310 [ 1037.707891] create_object.isra.0+0x3a/0xa20 [ 1037.708485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1037.709175] kmem_cache_alloc+0x159/0x310 [ 1037.709751] ? shmem_destroy_inode+0x70/0x70 [ 1037.710347] shmem_alloc_inode+0x18/0x40 [ 1037.710893] ? shmem_destroy_inode+0x70/0x70 [ 1037.711453] alloc_inode+0x63/0x240 [ 1037.711943] new_inode+0x23/0x250 [ 1037.712406] shmem_get_inode+0x15e/0xbc0 [ 1037.712962] __shmem_file_setup+0xb8/0x320 [ 1037.713544] ? _copy_from_user+0xfb/0x1b0 [ 1037.714106] __do_sys_memfd_create+0x275/0x450 [ 1037.714724] ? memfd_file_seals_ptr+0x170/0x170 [ 1037.715356] do_syscall_64+0x33/0x40 [ 1037.715854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.716507] RIP: 0033:0x7eff8aae2b19 [ 1037.717008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.719506] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1037.720477] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1037.721448] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1037.722358] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1037.723274] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1037.724197] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 16:28:30 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) 16:28:30 executing program 7: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14004bde087468d18107193673dfff05df"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x80161}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 16:28:30 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) 16:28:30 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5453, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9c, 0x6, 0x5, 0x7, 0x0, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0x3ff, 0x20}, 0x1, 0x5, 0x4, 0x8, 0x0, 0x4, 0x2ca, 0x0, 0x2, 0x0, 0x3}, r2, 0x4, r1, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x4, 0x4}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FIONCLEX(r0, 0x5450) clock_gettime(0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x46e2, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000640)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r6, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x108) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000600)) [ 1037.775426] FAULT_INJECTION: forcing a failure. [ 1037.775426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.777293] CPU: 0 PID: 8043 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1037.778334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.779416] Call Trace: [ 1037.779776] dump_stack+0x107/0x167 [ 1037.780275] should_fail.cold+0x5/0xa [ 1037.780794] ? copyout.part.0+0x112/0x140 [ 1037.781364] copy_page_to_iter+0x878/0xf80 [ 1037.781944] blk_rq_unmap_user+0x552/0x750 [ 1037.782528] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1037.783114] sg_finish_rem_req+0x73/0x320 [ 1037.783676] sg_new_read+0x3d1/0x4b0 [ 1037.784183] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.784897] ? _raw_write_unlock_irq+0x1f/0x30 [ 1037.785511] sg_ioctl_common+0x1f45/0x2570 [ 1037.786086] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1037.786786] ? do_vfs_ioctl+0x283/0x10d0 [ 1037.787336] ? sg_write+0x120/0x120 [ 1037.787828] ? generic_block_fiemap+0x60/0x60 [ 1037.788436] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1037.789088] ? wait_for_completion_io+0x270/0x270 [ 1037.789761] ? selinux_file_ioctl+0xb6/0x270 [ 1037.790357] ? sg_compat_ioctl+0x120/0x120 [ 1037.790932] sg_ioctl+0x8f/0x120 [ 1037.791384] __x64_sys_ioctl+0x19a/0x210 [ 1037.791936] do_syscall_64+0x33/0x40 [ 1037.792440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.793135] RIP: 0033:0x7f16a9b0ab19 [ 1037.793653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.796148] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.797193] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 16:28:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1037.798160] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1037.799189] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.800129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.801051] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1037.821777] device veth0_vlan entered promiscuous mode [ 1037.834399] loop6: detected capacity change from 0 to 2048 [ 1037.851911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12 comm=kworker/0:1 [ 1037.856865] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:28:30 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) [ 1037.881788] device veth0_vlan entered promiscuous mode 16:28:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 6) 16:28:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 27) [ 1037.936517] FAULT_INJECTION: forcing a failure. [ 1037.936517] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.938014] CPU: 0 PID: 8062 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1037.938844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.939856] Call Trace: [ 1037.940183] dump_stack+0x107/0x167 [ 1037.940634] should_fail.cold+0x5/0xa [ 1037.941103] ? security_inode_alloc+0x34/0x160 [ 1037.941670] should_failslab+0x5/0x20 [ 1037.942131] kmem_cache_alloc+0x5b/0x310 [ 1037.942628] security_inode_alloc+0x34/0x160 [ 1037.943167] inode_init_always+0xa4e/0xd10 [ 1037.943684] ? shmem_destroy_inode+0x70/0x70 [ 1037.944226] alloc_inode+0x84/0x240 [ 1037.944664] new_inode+0x23/0x250 [ 1037.945092] shmem_get_inode+0x15e/0xbc0 [ 1037.945595] __shmem_file_setup+0xb8/0x320 [ 1037.946118] ? _copy_from_user+0xfb/0x1b0 [ 1037.946626] __do_sys_memfd_create+0x275/0x450 [ 1037.947176] ? memfd_file_seals_ptr+0x170/0x170 [ 1037.947744] do_syscall_64+0x33/0x40 [ 1037.948196] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.948817] RIP: 0033:0x7eff8aae2b19 [ 1037.949275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.951484] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1037.952404] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1037.953276] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1037.954133] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1037.954990] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1037.955848] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 16:28:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0xfd, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000700), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018f5ff3a69524a813a82b179bcd679f7", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}, 0x40) 16:28:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1037.979613] FAULT_INJECTION: forcing a failure. [ 1037.979613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.982506] CPU: 1 PID: 8063 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1037.984057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.985940] Call Trace: [ 1037.986541] dump_stack+0x107/0x167 [ 1037.987374] should_fail.cold+0x5/0xa [ 1037.988237] ? copyout.part.0+0x112/0x140 [ 1037.989176] copy_page_to_iter+0x878/0xf80 [ 1037.990347] blk_rq_unmap_user+0x552/0x750 [ 1037.991424] ? blk_rq_map_kern+0x9e0/0x9e0 16:28:31 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0, 0x0, 0x0, 0x0, 0x7f0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r1 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d6, 0x4, 0x40001, 0x378}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1037.992516] sg_finish_rem_req+0x73/0x320 [ 1037.993595] sg_new_read+0x3d1/0x4b0 sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="16b20f32972d21c4a1d17793984272d7a1b4ac2a4bc6a3c1166ac19885244d8d7b7ccd15", 0x24}, {&(0x7f0000000480)="1e4672b99477035f7e582dc7f3849a4225d06e982f82683b721eb278bdac4bb85e4206997894932dc00ed7f61723406a390ba1b589b4d590bb4cec50490bf5ca9f3524aee9158df9217c8b4051c3df002aab718b1dd109a218db01b857464a49567d8b22fca805db3843d7e2c3df402c4da343", 0x73}, {&(0x7f0000000500)="754fe9cb848c91b9fe957bfece6a9e90bd645b14edd68cc07ded84ee0a694cca620a7c3fe2caf37155e0a00e7a1ba1ea710c2aa9a5711a64afb65c7a29b52cf4ba1d80248cc6723c8eac3abb3633aece3a9c4da2aea2fc79523261a90739e3679657efb0515b835b46c3b682228808ab46629cd017f8a73560dba9f0a087910d9f537508c3807522cfaf074751d1fe2e04d94bb1ba6e64fe0f55fd3d017ea31a96c288a4317c6ef27b815b3239fed77a6fc74fb33c3638cec4c931b1542bc15dde87e76ec4f40b4ee4029c0396dd62a3533caf6536d028d3828d9e5e63a6d4b75411bc280294972e1d0c0c", 0xeb}, {&(0x7f0000000600)="e7ca706fb6370f3110b5dd4ffc9cc791230c508934ae01eb068eb7052fa07e7819ea49cd890187239b5caff2e14202e92285a38fe8e74c091ec267ed7d9ac8ec511c9fba159e88fa20ae7bbc4dabe797cd9b8b1ea3120f6efd1bcb4c517c91678fedc6ad06ee92ea775dd7edc12f7e92ba486a1dfa867acf9ea7a12e8677985b6736bc24cd7b9a5ab79ae37820b96eb71cc1c30b5b257b2a5b95024aa57c921634bf1f50cee1de6b3afb4bb8867092ebdd5ef5e2fa10c2528f4e9012c117722a9c29fb0179c90e6cf10e43dcaa981efc4c1e2194dd02c36ecd66f0896a0229e7", 0xe0}], 0x4, &(0x7f0000004440)=ANY=[@ANYBLOB="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"], 0x2608}}], 0x1, 0x24048010) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1037.994503] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.995830] ? _raw_write_unlock_irq+0x1f/0x30 [ 1037.996888] sg_ioctl_common+0x1f45/0x2570 [ 1037.997880] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1037.999082] ? do_vfs_ioctl+0x283/0x10d0 [ 1038.000026] ? sg_write+0x120/0x120 [ 1038.000869] ? generic_block_fiemap+0x60/0x60 [ 1038.001909] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.003017] ? wait_for_completion_io+0x270/0x270 [ 1038.004135] ? selinux_file_ioctl+0xb6/0x270 16:28:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x7fff, 0x6, 0x5, 0xffffffff}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r0, r10, 0x0, 0x7) [ 1038.005151] ? sg_compat_ioctl+0x120/0x120 [ 1038.006261] sg_ioctl+0x8f/0x120 [ 1038.007049] __x64_sys_ioctl+0x19a/0x210 [ 1038.007993] do_syscall_64+0x33/0x40 [ 1038.008860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.010050] RIP: 0033:0x7f16a9b0ab19 [ 1038.010910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.015153] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.016905] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1038.018565] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1038.020210] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.021856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1038.023495] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:28:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1ff, 0x8c40) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f00000006c0)=0x3) open(&(0x7f0000000680)='./file0\x00', 0x0, 0x22) recvmmsg$unix(r0, &(0x7f0000000640)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/69, 0x45}], 0x4, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}], 0x1, 0x21, 0x0) 16:28:31 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 7) [ 1038.102319] FAULT_INJECTION: forcing a failure. [ 1038.102319] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.105137] CPU: 1 PID: 8079 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1038.106732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.108664] Call Trace: [ 1038.109282] dump_stack+0x107/0x167 [ 1038.110114] should_fail.cold+0x5/0xa [ 1038.110977] ? create_object.isra.0+0x3a/0xa20 [ 1038.112037] should_failslab+0x5/0x20 [ 1038.112917] kmem_cache_alloc+0x5b/0x310 [ 1038.113873] create_object.isra.0+0x3a/0xa20 [ 1038.114888] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1038.116068] kmem_cache_alloc+0x159/0x310 [ 1038.117042] security_inode_alloc+0x34/0x160 [ 1038.118069] inode_init_always+0xa4e/0xd10 [ 1038.119046] ? shmem_destroy_inode+0x70/0x70 [ 1038.120065] alloc_inode+0x84/0x240 [ 1038.120906] new_inode+0x23/0x250 [ 1038.121725] shmem_get_inode+0x15e/0xbc0 [ 1038.122677] __shmem_file_setup+0xb8/0x320 [ 1038.123655] ? _copy_from_user+0xfb/0x1b0 [ 1038.124619] __do_sys_memfd_create+0x275/0x450 [ 1038.125686] ? memfd_file_seals_ptr+0x170/0x170 [ 1038.126779] do_syscall_64+0x33/0x40 [ 1038.127643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.128831] RIP: 0033:0x7eff8aae2b19 [ 1038.129700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.133959] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1038.135721] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1038.137351] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1038.138974] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1038.140596] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1038.142219] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 16:28:31 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 16:28:31 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xc400) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)="fcddd43f80455c776cd47a939fe00bf112d3ca563160c20acdb9f159e732f42d1f0cd34c7ae73d0a64471d3716c9478f8bed3f20f323e57051960d0a021ccf786e80d51edbfba91bd04572dd06f4dedae8fd64beb3eaebd69a259092570c4c3e64b76acff046ebed148905f9aeeb62e18d728c86cfdf0be396d1e630cbcd137e839ad7d130ab371a6e4b033e8505f4fe87d9528f200d73b4eff6368fde50ce9842eb6532eb794b7c86ef258fe8f4270047edb54f9386cbf6063b4539c38e87ee20a79be2e148283d5cd2b7641d5f01b2f5af14548a712ee404", 0xd9, 0x20100}, 0x3) r1 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x4, 0x7, 0x3f, 0x7f, 0x0, 0x327e, 0x40, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2b4d, 0x2, @perf_bp={&(0x7f0000000180)}, 0x40434, 0x4, 0x3f, 0x3, 0x3, 0xffff, 0x5, 0x0, 0x957b, 0x0, 0x2}, r2, 0x6, r4, 0xa) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/net', 0x381080, 0x2) fsmount(r5, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0xc4, 0x7, 0x0, 0x6, 0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x40840, 0x5, 0x0, 0x4, 0x4, 0xfffffff8, 0x3, 0x0, 0x4b8, 0x0, 0xff}, r1, 0x5, r0, 0x2) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c6361634a7bd5743068703d6dd39c92f120d1fd0e502c8e303ea826a3"]) 16:28:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 28) 16:28:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xa87e, 0x80}, 0x8000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffe}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r2, r1) r3 = getpgrp(0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x81800) tgkill(0x0, r3, 0x0) recvmmsg$unix(r4, &(0x7f0000001440)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/170, 0xaa}], 0x1, &(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003800eeff000000003600000001000000826fd50a6a2f3ba4b0ae4ea7ebc1285575f8c2b46504d9e7f46206709a3b2bae73bd8a561cd5a9c136121f5241949ef13597ccfa4f622ab4953cb4e28dd4e533fa0ae03bda21918ddd35bfcfa1024e59be6c2e9483675009192de0d4f9741916f6e93580b74a19837433efab9b0c2198ee71340f6ae42a503f2b33effde385b8a012942a826675607d703aece8539c8380810dbd0a6f393569f6404e548337", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000740)=""/109, 0x6d}, {&(0x7f00000007c0)=""/68, 0x44}, {&(0x7f0000000980)=""/196, 0xc4}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000015000100200002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50}}, {{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000b00)=""/214, 0xd6}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000d00)=""/70, 0x46}, {&(0x7f0000000d80)=""/115, 0x73}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/138, 0x8a}, {&(0x7f0000000fc0)=""/143, 0x8f}, {&(0x7f0000001080)=""/102, 0x66}], 0x8, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/136, 0x88}], 0x2, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x5, 0x0, 0x0) pidfd_open(r5, 0x0) r6 = fcntl$dupfd(r2, 0x0, r0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r7, &(0x7f0000000380)=[{&(0x7f0000000040)='3', 0x1}], 0x1) openat(r7, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000080)=0x5) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x10060, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x1, 0xca6e, 0x40, 0xa8c1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r3, 0x0, r6, 0x0) timerfd_create(0x1, 0x80000) r8 = socket$packet(0x11, 0x2, 0x300) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00') [ 1038.266183] FAULT_INJECTION: forcing a failure. [ 1038.266183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.267583] CPU: 0 PID: 8092 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1038.268324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.269268] Call Trace: [ 1038.269563] dump_stack+0x107/0x167 [ 1038.269958] should_fail.cold+0x5/0xa [ 1038.270372] ? copyout.part.0+0x112/0x140 [ 1038.270828] copy_page_to_iter+0x878/0xf80 [ 1038.271293] blk_rq_unmap_user+0x552/0x750 [ 1038.271757] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1038.272230] sg_finish_rem_req+0x73/0x320 [ 1038.272677] sg_new_read+0x3d1/0x4b0 [ 1038.273105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.273682] ? _raw_write_unlock_irq+0x1f/0x30 [ 1038.274177] sg_ioctl_common+0x1f45/0x2570 [ 1038.274635] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1038.275195] ? do_vfs_ioctl+0x283/0x10d0 [ 1038.275631] ? sg_write+0x120/0x120 [ 1038.276027] ? generic_block_fiemap+0x60/0x60 [ 1038.276535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.277080] ? wait_for_completion_io+0x270/0x270 [ 1038.277636] ? selinux_file_ioctl+0xb6/0x270 [ 1038.278131] ? sg_compat_ioctl+0x120/0x120 [ 1038.278609] sg_ioctl+0x8f/0x120 [ 1038.278990] __x64_sys_ioctl+0x19a/0x210 [ 1038.279454] do_syscall_64+0x33/0x40 [ 1038.279873] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.280450] RIP: 0033:0x7f16a9b0ab19 [ 1038.280872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.282954] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.283817] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1038.284621] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1038.285435] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.286244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1038.287049] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1038.288667] loop6: detected capacity change from 0 to 2048 [ 1038.314003] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:28:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, 0x0) 16:28:47 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}]}}) 16:28:47 executing program 7: r0 = epoll_create(0x8000) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000300}) epoll_wait(r0, &(0x7f00000001c0), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 16:28:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 29) 16:28:47 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4000, @fd=r0, 0x9, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0x7, 0x0, {0x0, r4}}, 0xffff0001) 16:28:47 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) lseek(r0, 0x1, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:28:47 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000200)='./file1\x00', 0x206000, 0x18) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r3 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r5, r4, &(0x7f0000000300)=0xf1ea, 0x5) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x105000, 0x0) openat(r6, &(0x7f0000000280)='./file1\x00', 0x200000, 0x190) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000340)=0x7fffffff) sendfile(r1, r2, 0x0, 0x100000001) 16:28:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 8) [ 1054.913236] audit: type=1400 audit(1749140928.019:122): avc: denied { block_suspend } for pid=8106 comm="syz-executor.7" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 1054.916881] FAULT_INJECTION: forcing a failure. [ 1054.916881] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.921072] CPU: 1 PID: 8116 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1054.922676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.924597] Call Trace: [ 1054.925213] dump_stack+0x107/0x167 [ 1054.926078] should_fail.cold+0x5/0xa [ 1054.926965] ? __d_alloc+0x2a/0x990 [ 1054.927813] should_failslab+0x5/0x20 [ 1054.928701] kmem_cache_alloc+0x5b/0x310 [ 1054.929645] ? trace_hardirqs_on+0x5b/0x180 [ 1054.930658] __d_alloc+0x2a/0x990 [ 1054.931475] d_alloc_pseudo+0x19/0x70 [ 1054.932367] alloc_file_pseudo+0xce/0x250 [ 1054.933343] ? alloc_file+0x5a0/0x5a0 [ 1054.934242] ? shmem_get_inode+0x55c/0xbc0 [ 1054.935246] __shmem_file_setup+0x144/0x320 [ 1054.936259] ? _copy_from_user+0xfb/0x1b0 [ 1054.937230] __do_sys_memfd_create+0x275/0x450 [ 1054.938310] ? memfd_file_seals_ptr+0x170/0x170 [ 1054.939414] do_syscall_64+0x33/0x40 [ 1054.940282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.941489] RIP: 0033:0x7eff8aae2b19 [ 1054.942351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.946661] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1054.948437] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1054.950110] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1054.951781] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1054.953443] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1054.955112] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1054.974403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 16:28:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, 0x0) [ 1055.031184] FAULT_INJECTION: forcing a failure. [ 1055.031184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.033970] CPU: 0 PID: 8125 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1055.035523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.037412] Call Trace: [ 1055.038011] dump_stack+0x107/0x167 [ 1055.038839] should_fail.cold+0x5/0xa [ 1055.039700] ? copyout.part.0+0x112/0x140 [ 1055.040644] copy_page_to_iter+0x878/0xf80 [ 1055.041630] blk_rq_unmap_user+0x552/0x750 [ 1055.042644] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1055.043841] sg_finish_rem_req+0x73/0x320 [ 1055.044788] sg_new_read+0x3d1/0x4b0 [ 1055.045649] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1055.046841] ? _raw_write_unlock_irq+0x1f/0x30 [ 1055.047884] sg_ioctl_common+0x1f45/0x2570 [ 1055.048852] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1055.050031] ? do_vfs_ioctl+0x283/0x10d0 [ 1055.050947] ? sg_write+0x120/0x120 [ 1055.051770] ? generic_block_fiemap+0x60/0x60 [ 1055.052785] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1055.053886] ? wait_for_completion_io+0x270/0x270 [ 1055.054988] ? selinux_file_ioctl+0xb6/0x270 [ 1055.055978] ? sg_compat_ioctl+0x120/0x120 [ 1055.056943] sg_ioctl+0x8f/0x120 [ 1055.057725] __x64_sys_ioctl+0x19a/0x210 [ 1055.058652] do_syscall_64+0x33/0x40 [ 1055.059499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1055.060668] RIP: 0033:0x7f16a9b0ab19 [ 1055.061563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.065696] RSP: 002b:00007f16a705f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1055.067397] RAX: ffffffffffffffda RBX: 00007f16a9c1e020 RCX: 00007f16a9b0ab19 [ 1055.068992] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1055.070587] RBP: 00007f16a705f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.072171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.073777] R13: 00007fff3b04270f R14: 00007f16a705f300 R15: 0000000000022000 [ 1070.926304] FAULT_INJECTION: forcing a failure. [ 1070.926304] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.928047] CPU: 1 PID: 8139 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1070.929048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1070.930272] Call Trace: [ 1070.930660] dump_stack+0x107/0x167 [ 1070.931201] should_fail.cold+0x5/0xa [ 1070.931756] ? create_object.isra.0+0x3a/0xa20 [ 1070.932414] should_failslab+0x5/0x20 [ 1070.932963] kmem_cache_alloc+0x5b/0x310 [ 1070.933573] create_object.isra.0+0x3a/0xa20 [ 1070.934204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1070.934944] kmem_cache_alloc+0x159/0x310 [ 1070.935554] __d_alloc+0x2a/0x990 [ 1070.936051] d_alloc_pseudo+0x19/0x70 [ 1070.936596] alloc_file_pseudo+0xce/0x250 [ 1070.937198] ? alloc_file+0x5a0/0x5a0 [ 1070.937760] ? shmem_get_inode+0x55c/0xbc0 [ 1070.938378] __shmem_file_setup+0x144/0x320 [ 1070.939004] ? _copy_from_user+0xfb/0x1b0 [ 1070.939615] __do_sys_memfd_create+0x275/0x450 [ 1070.940259] ? memfd_file_seals_ptr+0x170/0x170 [ 1070.940924] do_syscall_64+0x33/0x40 [ 1070.941467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1070.942213] RIP: 0033:0x7eff8aae2b19 [ 1070.942754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1070.945352] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1070.946449] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1070.947452] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1070.948448] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1070.949449] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1070.950440] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1070.978903] 9pnet: Insufficient options for proto=fd 16:29:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 9) 16:29:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@permit_directio}]}}) 16:29:04 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x153002, 0x80) r2 = syz_io_uring_setup(0x24c0, &(0x7f0000000080)={0x0, 0x3103, 0x20, 0x0, 0x17f, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x420}, 0x1}, 0xa5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {r7, r8}}, './file0\x00'}) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000006c0), 0x420000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'}) r12 = accept4$bt_l2cap(r1, &(0x7f0000000740)={0x1f, 0x0, @fixed}, &(0x7f0000000780)=0xe, 0x80800) syz_io_uring_submit(r3, r4, &(0x7f00000007c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x10100, 0x1, {0x2}}, 0x9) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000800)={0x0, 'veth1_macvtap\x00', 0x1}, 0x18) r13 = syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file0/file0\x00', 0x4, 0x2, &(0x7f0000000940)=[{&(0x7f00000008c0)="1cdeaf17a9b05bdb2b4e033e91fca1b2feb6ab9d1e704822dcb70230649b14d669ca5d7dc7ee723ebab4716655d0c8689d6ad84d7ebd011b03cf2288ca", 0x3d, 0x8}, {&(0x7f0000000900)="879fcf2b88d3c331d9b13e0446", 0xd, 0x1f}], 0x10c9080, &(0x7f0000000980)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}], [{@pcr={'pcr', 0x3d, 0x14}}, {@euid_gt={'euid>', r7}}]}) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x102, 0x0) r15 = syz_open_dev$hiddev(&(0x7f0000000a40), 0x90000000000000, 0x200440) poll(&(0x7f0000000a80)=[{r5, 0x2}, {r11, 0x1084}, {r14, 0x4400}, {r13, 0x90}, {r9, 0x1109}, {r13, 0x10}, {r15, 0x2041}, {r2, 0xc104}], 0x8, 0x2) recvmmsg$unix(r6, &(0x7f0000005500)=[{{&(0x7f0000000ac0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000000b40)=""/49, 0x31}, {&(0x7f0000000b80)=""/118, 0x76}, {&(0x7f0000000c00)=""/244, 0xf4}, {&(0x7f0000000d00)=""/75, 0x4b}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/222, 0xde}], 0x6, &(0x7f0000001f00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000005280)=[{&(0x7f0000002040)=""/165, 0xa5}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/204, 0xcc}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/40, 0x28}, {&(0x7f0000004280)=""/4096, 0x1000}], 0x7, &(0x7f0000005300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005340)=""/19, 0x13}, {&(0x7f0000005380)=""/118, 0x76}], 0x2, &(0x7f0000005440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x100, &(0x7f00000055c0)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r16, 0xc0189371, &(0x7f0000005600)={{0x1, 0x1, 0x18}, './file0\x00'}) 16:29:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x3, 0x47, 0x8f, 0x0, 0xc44, 0x40044, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x1, 0xe311}, 0x1208, 0x4, 0x6, 0x9, 0xffffffffffffffc1, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x4d1a}, 0xffffffffffffffff, 0x9, r1, 0xc) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffb, 0x26, 0x1f, @scatter={0x5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/113, 0x71}]}, &(0x7f00000004c0)="a4fa5a6a7a17992b28b8dddf0b36f9b49f1b7308906efaa5d88b40ecf6f17f83f7dbcbb81b90", &(0x7f0000000640)=""/134, 0x0, 0x10000, 0xffffffffffffffff, &(0x7f0000000500)}) 16:29:04 executing program 7: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x100000000, 0x8}, 0x8005, 0x7f, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000280)={0x2, 0x80, 0x5, 0xf7, 0x50, 0xfc, 0x0, 0x3, 0x5020, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1c00000, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x10020, 0x3, 0x6, 0x9, 0xbd3, 0x7ff, 0x265d, 0x0, 0xff, 0x0, 0xd0}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x30040) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0xd}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 16:29:04 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000280)=0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000003}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x4c07, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r5}}, 0xfffffffc) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r12, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:29:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 30) 16:29:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, 0x0) [ 1071.015582] FAULT_INJECTION: forcing a failure. [ 1071.015582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.017371] CPU: 1 PID: 8155 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1071.018345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.019497] Call Trace: [ 1071.019879] dump_stack+0x107/0x167 [ 1071.020390] should_fail.cold+0x5/0xa [ 1071.020927] ? copyout.part.0+0x112/0x140 [ 1071.021525] copy_page_to_iter+0x878/0xf80 [ 1071.022130] blk_rq_unmap_user+0x552/0x750 [ 1071.022728] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1071.023340] sg_finish_rem_req+0x73/0x320 [ 1071.023923] sg_new_read+0x3d1/0x4b0 [ 1071.024448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1071.025181] ? _raw_write_unlock_irq+0x1f/0x30 [ 1071.025831] sg_ioctl_common+0x1f45/0x2570 [ 1071.026424] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1071.027147] ? do_vfs_ioctl+0x283/0x10d0 [ 1071.027713] ? sg_write+0x120/0x120 [ 1071.028224] ? generic_block_fiemap+0x60/0x60 [ 1071.028847] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1071.029534] ? wait_woken+0x250/0x250 [ 1071.030067] ? wait_for_completion_io+0x270/0x270 [ 1071.030750] ? selinux_file_ioctl+0xb6/0x270 [ 1071.031369] ? sg_compat_ioctl+0x120/0x120 [ 1071.031963] sg_ioctl+0x8f/0x120 [ 1071.032438] __x64_sys_ioctl+0x19a/0x210 [ 1071.033011] do_syscall_64+0x33/0x40 [ 1071.033541] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1071.034266] RIP: 0033:0x7f16a9b0ab19 [ 1071.034794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.037366] RSP: 002b:00007f16a705f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.038439] RAX: ffffffffffffffda RBX: 00007f16a9c1e020 RCX: 00007f16a9b0ab19 [ 1071.039436] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1071.040433] RBP: 00007f16a705f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1071.041428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1071.042432] R13: 00007fff3b04270f R14: 00007f16a705f300 R15: 0000000000022000 16:29:04 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x8000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000440)=0xc) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x302b, &(0x7f00000002c0), &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x236a, &(0x7f0000000540)={0x0, 0x590a, 0x20, 0x1, 0x3a6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000680)) syz_io_uring_submit(r5, r4, &(0x7f0000000640)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000740)={'\x00', 0x19999b8c, 0x3, 0x4}) syz_io_uring_submit(0x0, r4, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000480)=@generic={0x26, "669fa65bd23475476489086fa576f84f0bf482a8d1a40a8dc5650331abb0452aa886c9c3cc97a089b7e5a82a1bf398f11e40fa0a39a52a9579ff42b2aceb90fdc9018e7f006e84f29a642caf82f19fa53590c1f618c586f99f4ee46a74c15242b64dbfff92afa01dc8fe7afd85f87a543266ba7081948066ee4996f0c8b0"}, 0x0, 0x0, 0x1}, 0x1f) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 16:29:04 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8, {r0}}, './file0\x00'}) bind$802154_raw(r9, &(0x7f0000000340), 0x14) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r10, 0x8000000) syz_io_uring_submit(r6, r12, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r14 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r14, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r15 = epoll_create1(0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r14, r2, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r15, &(0x7f0000000040), r4, 0x3, 0x0, 0x0, {0x0, r16}}, 0x31) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1071.077418] loop6: detected capacity change from 0 to 2048 [ 1071.094169] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:29:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'L-', 0x9}, 0x16, 0x1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x80, 0xcb, 0x3, 0x7f, 0x0, 0x100000000, 0x4802, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x4568, 0x40}, 0x100, 0x5d, 0x7ff, 0x9, 0x9, 0xfc82, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 16:29:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x2, 0x3}) fallocate(r0, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x121042, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) openat(r3, &(0x7f0000000080)='./file1\x00', 0x80000, 0xc1) sendfile(r2, r2, 0x0, 0x100000002) 16:29:04 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 10) 16:29:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:29:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@permit_directio}]}}) [ 1071.252931] 9pnet: Insufficient options for proto=fd 16:29:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x29eb, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x10040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 16:29:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x97, 0x0, 0x3, 0x6, 0x0, 0x0, 0xd114d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x20000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f00000013c0)={0x4, &(0x7f0000001340)=[{0x3, 0x6d, &(0x7f0000000180)="d2d34fc2d66ec050c07211f74ef51a5320fbbd0104a29aae8fa14a6caef0182ca577f9aedc4d99b74a1505304d47061990734ce0b093aea27e0e44f16bca95bcc61f4e045883bc2fb0565ef65b861debbc381e868ce527b587f59d3db8990bf5a170fc86f7375b87c93137fa07"}, {0x8, 0x7d, &(0x7f0000000200)="485b5aff0f78c9be6a0262e1478fad44e212bb3d8f2bfacb09906d19750307d67406c8294f62355a0a1554b9e8e9e6e809319971d86e98e073602427d636f2c39d0c450443c0e9d56f0372126c609ac441ddbdb7bb5b6c92ded9f919dd9ef1da90711f892af1c9c5c9f13ef3a3a000dd73912a9fe9c8e335b8129a079e", 0x1}, {0x25, 0xac, &(0x7f0000000280)="07ecd67b0972eeed421aa1c937cd5d58515dd1e7a1019ba4f81c4d4b7ac7105090c3a4afbe8f46c8e46007fb3ed27bf2700a96c07697f349cf751529dc763ab32261f64110982bbdc56251c26a3ec817a77b7c9b32ce9be2ae099da4ad33e45a064ecb0215f848916fcb566e53f765e0a992f81e0918f2d51b24185504e597c16683d9d90e0d7eaeb534ca2ebc365512ff89cb4a08b80bd20a29dade4b93bb51178c603d05fccd8cd0798dae"}, {0xc2e8, 0x1000, &(0x7f0000000340)="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", 0x0, 0x1}]}) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x484000, 0x106, 0x17}, 0x18) 16:29:04 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0)={0x0, 0x63c0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:29:04 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x3602, &(0x7f00000000c0)={&(0x7f0000001100)={0x30, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x0, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private1}]}, 0x30}}, 0x0) [ 1071.284974] FAULT_INJECTION: forcing a failure. [ 1071.284974] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.287363] CPU: 0 PID: 8193 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1071.288769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.290485] Call Trace: [ 1071.291152] dump_stack+0x107/0x167 [ 1071.292062] should_fail.cold+0x5/0xa [ 1071.293041] ? __alloc_file+0x21/0x320 [ 1071.293997] should_failslab+0x5/0x20 [ 1071.294989] kmem_cache_alloc+0x5b/0x310 [ 1071.295845] __alloc_file+0x21/0x320 [ 1071.296804] alloc_empty_file+0x6d/0x170 [ 1071.297671] alloc_file+0x5e/0x5a0 [ 1071.298603] alloc_file_pseudo+0x16a/0x250 [ 1071.299480] ? alloc_file+0x5a0/0x5a0 [ 1071.300463] ? shmem_get_inode+0x55c/0xbc0 [ 1071.301532] __shmem_file_setup+0x144/0x320 [ 1071.302627] ? _copy_from_user+0xfb/0x1b0 [ 1071.303486] __do_sys_memfd_create+0x275/0x450 [ 1071.304643] ? memfd_file_seals_ptr+0x170/0x170 [ 1071.305801] do_syscall_64+0x33/0x40 [ 1071.306577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1071.307880] RIP: 0033:0x7eff8aae2b19 [ 1071.308664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.313359] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1071.314935] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1071.316749] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1071.318348] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1071.319807] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1071.321276] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 16:29:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 31) 16:29:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/84, 0x54) [ 1071.349675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1071.351441] IPv6: NLM_F_CREATE should be set when creating new route [ 1071.362246] FAULT_INJECTION: forcing a failure. [ 1071.362246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.363679] CPU: 1 PID: 8196 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1071.364465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.365398] Call Trace: [ 1071.365715] dump_stack+0x107/0x167 [ 1071.366138] should_fail.cold+0x5/0xa [ 1071.366566] ? copyout.part.0+0x112/0x140 [ 1071.367038] copy_page_to_iter+0x878/0xf80 16:29:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:29:04 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x1954, &(0x7f00000001c0)={0x0, 0x9cbb, 0x4, 0x0, 0x258, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) syz_open_procfs(r4, &(0x7f0000000340)='net/ip6_tables_matches\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x6, 0x1, 0x1, {0x0, 0x0, r0}}, 0x7) [ 1071.367535] blk_rq_unmap_user+0x552/0x750 [ 1071.368185] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1071.368730] sg_finish_rem_req+0x73/0x320 [ 1071.369198] sg_new_read+0x3d1/0x4b0 [ 1071.369629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1071.370219] ? _raw_write_unlock_irq+0x1f/0x30 [ 1071.370733] sg_ioctl_common+0x1f45/0x2570 [ 1071.371219] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1071.371800] ? do_vfs_ioctl+0x283/0x10d0 [ 1071.372255] ? sg_write+0x120/0x120 [ 1071.372678] ? generic_block_fiemap+0x60/0x60 [ 1071.373187] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1071.373744] ? wait_for_completion_io+0x270/0x270 [ 1071.374302] ? selinux_file_ioctl+0xb6/0x270 [ 1071.374801] ? sg_compat_ioctl+0x120/0x120 [ 1071.375278] sg_ioctl+0x8f/0x120 [ 1071.375665] __x64_sys_ioctl+0x19a/0x210 [ 1071.376127] do_syscall_64+0x33/0x40 [ 1071.376553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1071.377137] RIP: 0033:0x7f16a9b0ab19 [ 1071.377571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.379656] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.380508] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1071.381327] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1071.382142] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1071.382949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1071.383758] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:29:04 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r3}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r3}}, 0x1) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x45f3e3cf, 0x9, &(0x7f0000002080)=[{&(0x7f0000000340)="8fe3671364fbb79001cd3e03d3db7a9fd3986f403f13407467bc13102fc268ac7b2f35f5309d0cedce715744e4fdc21d6e1764757521c4049f8d8438a674bc877ff372f1d51e20a040a17484c9b59cb888e664153da5253e", 0x58, 0x9}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="0083a75f51de47dbc18f442a8831b698c7657d2ec739b998421298df645279a8c75e9cce04f33696c295c4a0fee9758a7959f22eb112824b9d216fcc4244f34aac823a6bfa5f2310572199af110b8cb6f6e150bacd5d8c8a6a0419ac9678c3f5793e88556c69930fd1b2185ad642faa50033668ddf7dfc5fa2e4c69664f494a8986cbb36fbe809f7e7c1baa0462c16c175259723602ab4e20ee77ec096e5e76a0ec7dfa9985c3217aa601f48232bdf4d19b92958260d2877ee197c8fe0a19b7ad8727a76c0139fdc5ae7e96e69609a71aef49876e38a7abce8d22741f5cadfe08d9f5135b954f759a9a400afc316a7dcb353b9", 0xf3, 0xae8}, {&(0x7f0000001d80)="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", 0xff, 0x5}, {&(0x7f0000001e80)="73817ade96883869c1fcac34e66c0ca09008e82e96a5cd0fd5ba727ea7987f1b40f11fbd96eaa018441036e47eb9821d62e9959d3a1b058e9178ed0214b50301f604ee8a9388c68a74007ada98c0ec884e761cce14a6c8c0f32ce97964665c0f421a39043624c2cc0232a80df0829f9d4b1e57b6103781a26c01086188fd3405def54d016421abb73b83a69a6d147264de69202b9fa0c81c5d6491b9988e74c17baddd244f70460a1ad62b5239962b833146f7afe273a705c033e3c8b6e541a302bb896773f4b9ef235ffad9ed19cf71721e8c0929654551e65614ccecb5c216df018cb57c1c8d4c2618235eef49e24fcc7a4c2b73", 0xf5, 0x1}, {&(0x7f0000000240)="97883e4d04d6083195dfd2f8c49c8699ee5b352b1c81aaf1ccb005c84a6298260c59e68361a3a8c4897d8f3c783654e32c", 0x31, 0x2}, {&(0x7f0000001f80)="a66811e10e0fef16721d0ab7d7b7e0ef47de1cb451a71fcab6676ee45362098afaa104bc8a976c52e46b731b80764a36a648375a5758253539f9e51ecae036bb0e878ff80f362fb6d3318c1ccaa921582a6bf2d8d90af62c348da2c4e5031deabd4bdd136ef60073cf32c8a407a278636a130bd9b8e3c7746e487eb0b3a42271a2f0ea47fc8ffe4774a71a102250151c98a57a569478f38260edbf43b96d5d154e8a3152203354b4592246250f52200c62798065ef55422006423611cff3f9da62d72558ebc35ad939b9aecbbaf1f1bcbacca2af247b3cb4eae51e", 0xdb, 0x3}, {&(0x7f00000003c0)="2ceff7f8896c03d3eed5bcc6082b70863267476eb7e12eec3dff051f380397355e7b4915b0792e580880", 0x2a, 0x1}, {&(0x7f0000000540)="2a07d497b0751789848df1a260a2f77f8d5a9d7dc1d6895de266cd40a013330bc5b936cc53bef10c032468a5e0db74570d14c9d6cccdb914260fea9dcda5aea0d308451bad70554fee0560465b7430f98351c70d0ae1388e98c8d38eb07283d65213e8d19834bcbb161b23718d0933d4ff06a15c2bdbcb58c0ca", 0x7a, 0x40}], 0x200000, &(0x7f0000000a80)={[{@commit={'commit', 0x3d, 0x6}}, {@sysvgroups}], [{@pcr={'pcr', 0x3d, 0x27}}, {@hash}, {@audit}]}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r5}}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r4, 0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100, 0x12345, {0x0, r5}}, 0x200) 16:29:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0x7, 0x9, 0x3, 0x0, 0xff, 0xc080, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffe8, 0x0, @perf_config_ext={0x6b3a2776, 0x1}, 0x80000, 0x3f, 0x6, 0x8, 0x7, 0x81, 0x7, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0x10, 0xffffffffffffffff, 0x8) 16:29:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x6d2e}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x24, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x10000000}, {0x801, 0x0, 0x3efaf7a2}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) close_range(r0, r2, 0x2) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x4c07, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) unshare(0x48020200) 16:29:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r1, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@permit_directio}]}}) 16:29:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 32) [ 1071.459233] 9pnet: Insufficient options for proto=fd [ 1071.490279] FAULT_INJECTION: forcing a failure. [ 1071.490279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.491724] CPU: 1 PID: 8217 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1071.492510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.493472] Call Trace: [ 1071.493782] dump_stack+0x107/0x167 [ 1071.494205] should_fail.cold+0x5/0xa [ 1071.494641] ? copyout.part.0+0x112/0x140 [ 1071.495120] copy_page_to_iter+0x878/0xf80 [ 1071.495612] blk_rq_unmap_user+0x552/0x750 [ 1071.496106] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1071.496604] sg_finish_rem_req+0x73/0x320 [ 1071.497081] sg_new_read+0x3d1/0x4b0 [ 1071.497519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1071.498120] ? _raw_write_unlock_irq+0x1f/0x30 [ 1071.498646] sg_ioctl_common+0x1f45/0x2570 16:29:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:29:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1071.499132] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1071.499913] ? do_vfs_ioctl+0x283/0x10d0 [ 1071.500418] ? sg_write+0x120/0x120 [ 1071.500839] ? generic_block_fiemap+0x60/0x60 [ 1071.501355] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1071.501822] loop7: detected capacity change from 0 to 135266304 [ 1071.501956] ? wait_for_completion_io+0x270/0x270 [ 1071.503766] ? selinux_file_ioctl+0xb6/0x270 [ 1071.504276] ? sg_compat_ioctl+0x120/0x120 [ 1071.504763] sg_ioctl+0x8f/0x120 [ 1071.505152] __x64_sys_ioctl+0x19a/0x210 [ 1071.505629] do_syscall_64+0x33/0x40 [ 1071.506056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1071.506640] RIP: 0033:0x7f16a9b0ab19 [ 1071.507065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.509174] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.510052] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1071.510876] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1071.511691] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1071.512506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1071.513322] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1071.544534] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1071.572733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 [ 1071.607335] loop7: detected capacity change from 0 to 135266304 [ 1071.632211] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 16:29:21 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 11) 16:29:21 executing program 3: r0 = syz_io_uring_setup(0x3166, &(0x7f00000002c0)={0x0, 0xa6db}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x1497, &(0x7f00000001c0)={0x0, 0x2f6f, 0x20, 0x1, 0x3d7, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r7}}, 0x1) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r7}}, 0x5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x10080) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x110, r9, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:29:21 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:29:21 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x181040, 0x0) r1 = openat(r0, &(0x7f0000000180)='/proc/self/exe\x00', 0x8000, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000080)={0x1, 0x8, 0x9}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x1001) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendfile(r2, r1, 0x0, 0x9) 16:29:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:29:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:29:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 33) 16:29:21 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x202000, 0x90) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0/../file0\x00'}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='freezer']) setxattr$incfs_id(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) [ 1088.813691] FAULT_INJECTION: forcing a failure. [ 1088.813691] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.815299] CPU: 0 PID: 8246 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1088.816210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.817355] Call Trace: [ 1088.817720] dump_stack+0x107/0x167 [ 1088.818222] should_fail.cold+0x5/0xa [ 1088.818749] ? create_object.isra.0+0x3a/0xa20 [ 1088.819374] should_failslab+0x5/0x20 [ 1088.819881] kmem_cache_alloc+0x5b/0x310 [ 1088.820430] create_object.isra.0+0x3a/0xa20 [ 1088.821039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1088.821752] kmem_cache_alloc+0x159/0x310 [ 1088.822338] __alloc_file+0x21/0x320 [ 1088.822848] alloc_empty_file+0x6d/0x170 [ 1088.823404] alloc_file+0x5e/0x5a0 [ 1088.823885] alloc_file_pseudo+0x16a/0x250 [ 1088.824460] ? alloc_file+0x5a0/0x5a0 [ 1088.824974] ? shmem_get_inode+0x55c/0xbc0 [ 1088.825549] __shmem_file_setup+0x144/0x320 [ 1088.826138] ? _copy_from_user+0xfb/0x1b0 [ 1088.826694] __do_sys_memfd_create+0x275/0x450 [ 1088.827302] ? memfd_file_seals_ptr+0x170/0x170 [ 1088.827943] do_syscall_64+0x33/0x40 [ 1088.828459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1088.829143] RIP: 0033:0x7eff8aae2b19 [ 1088.829659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.832140] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1088.833164] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1088.834127] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1088.835082] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1088.836030] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1088.836977] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1088.844931] FAULT_INJECTION: forcing a failure. [ 1088.844931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.846885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6203 comm=kworker/0:0 [ 1088.847684] CPU: 1 PID: 8236 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1088.850721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1088.852597] Call Trace: [ 1088.853200] dump_stack+0x107/0x167 [ 1088.854029] should_fail.cold+0x5/0xa [ 1088.854887] ? copyout.part.0+0x112/0x140 [ 1088.855827] copy_page_to_iter+0x878/0xf80 [ 1088.856793] blk_rq_unmap_user+0x552/0x750 [ 1088.857764] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1088.858744] sg_finish_rem_req+0x73/0x320 [ 1088.859674] sg_new_read+0x3d1/0x4b0 [ 1088.860520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1088.861702] ? _raw_write_unlock_irq+0x1f/0x30 16:29:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = dup(r1) setns(r2, 0x2020000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/rtc_cmos', 0x20802, 0x8c) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7f, 0x1}}, './file1\x00'}) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x465484ea0a276905, 0x3, 0x4, 0x7}) lseek(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) [ 1088.862737] sg_ioctl_common+0x1f45/0x2570 [ 1088.863833] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1088.865000] ? do_vfs_ioctl+0x283/0x10d0 [ 1088.865932] ? sg_write+0x120/0x120 [ 1088.866750] ? generic_block_fiemap+0x60/0x60 [ 1088.867763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1088.868847] ? wait_for_completion_io+0x270/0x270 [ 1088.869950] ? selinux_file_ioctl+0xb6/0x270 [ 1088.870944] ? sg_compat_ioctl+0x120/0x120 [ 1088.871903] sg_ioctl+0x8f/0x120 [ 1088.872676] __x64_sys_ioctl+0x19a/0x210 [ 1088.873603] do_syscall_64+0x33/0x40 [ 1088.874446] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1088.875592] RIP: 0033:0x7f16a9b0ab19 [ 1088.876423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1088.880578] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.882302] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1088.883904] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1088.885512] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1088.887119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1088.888742] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1088.903383] loop6: detected capacity change from 0 to 2048 [ 1088.910906] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:29:35 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:29:35 executing program 0: ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000180)={0x7, 0x525}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/5, 0x5) [ 1102.795182] FAULT_INJECTION: forcing a failure. [ 1102.795182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.798273] CPU: 1 PID: 8269 Comm: syz-executor.2 Not tainted 5.10.237 #1 16:29:35 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 12) 16:29:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 34) 16:29:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:29:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x2, 0x8, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6634, 0x6c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05ffe8000000f4d6ff2df8f461ff52bba1e96d46a9ac0000000006000000", @ANYRES32=r9, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0xa}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x81) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x8204, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xa5, 0x1}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 16:29:35 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x89509, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2, 0x7fffffff}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001500)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600), 0x0) readv(0xffffffffffffffff, &(0x7f0000000340), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000480)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x114) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x20103, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x13d) unshare(0x48020200) 16:29:35 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r3}}, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1102.800242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.802475] Call Trace: [ 1102.803153] dump_stack+0x107/0x167 [ 1102.804086] should_fail.cold+0x5/0xa [ 1102.805052] ? copyout.part.0+0x112/0x140 [ 1102.806120] copy_page_to_iter+0x878/0xf80 [ 1102.807210] blk_rq_unmap_user+0x552/0x750 [ 1102.808301] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1102.809402] sg_finish_rem_req+0x73/0x320 [ 1102.810472] sg_new_read+0x3d1/0x4b0 [ 1102.811425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.812748] ? _raw_write_unlock_irq+0x1f/0x30 [ 1102.813924] sg_ioctl_common+0x1f45/0x2570 [ 1102.815011] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1102.816324] ? do_vfs_ioctl+0x283/0x10d0 [ 1102.817356] ? sg_write+0x120/0x120 [ 1102.818290] ? generic_block_fiemap+0x60/0x60 [ 1102.819428] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1102.820653] ? wait_for_completion_io+0x270/0x270 [ 1102.821901] ? selinux_file_ioctl+0xb6/0x270 [ 1102.823018] ? sg_compat_ioctl+0x120/0x120 [ 1102.824098] sg_ioctl+0x8f/0x120 [ 1102.824965] __x64_sys_ioctl+0x19a/0x210 [ 1102.826014] do_syscall_64+0x33/0x40 [ 1102.826964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.828269] RIP: 0033:0x7f16a9b0ab19 [ 1102.829222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.833895] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.835833] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1102.837657] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1102.839492] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.841115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.842759] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1102.863790] FAULT_INJECTION: forcing a failure. [ 1102.863790] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.866564] CPU: 1 PID: 8285 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1102.868137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.870049] Call Trace: [ 1102.870659] dump_stack+0x107/0x167 [ 1102.871484] should_fail.cold+0x5/0xa [ 1102.872358] ? security_file_alloc+0x34/0x170 [ 1102.873392] should_failslab+0x5/0x20 [ 1102.874270] kmem_cache_alloc+0x5b/0x310 [ 1102.875202] security_file_alloc+0x34/0x170 [ 1102.876191] __alloc_file+0xb7/0x320 [ 1102.877040] alloc_empty_file+0x6d/0x170 [ 1102.877982] alloc_file+0x5e/0x5a0 [ 1102.878803] alloc_file_pseudo+0x16a/0x250 [ 1102.879768] ? alloc_file+0x5a0/0x5a0 [ 1102.880644] ? shmem_get_inode+0x55c/0xbc0 [ 1102.881629] __shmem_file_setup+0x144/0x320 [ 1102.882625] ? _copy_from_user+0xfb/0x1b0 [ 1102.883583] __do_sys_memfd_create+0x275/0x450 [ 1102.884627] ? memfd_file_seals_ptr+0x170/0x170 [ 1102.885717] do_syscall_64+0x33/0x40 16:29:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20140) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xff, 0x7f, 0x81, 0x0, 0x0, 0x0, 0x130, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x28bf, 0x0, @perf_config_ext={0x7ff, 0x8}, 0x0, 0x6, 0xf020, 0x1, 0x4, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x1}, r0, 0xe, r2, 0x3) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1102.886567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1102.887828] RIP: 0033:0x7eff8aae2b19 [ 1102.888351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.890878] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1102.891943] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1102.892953] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1102.893969] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1102.894982] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1102.895988] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1102.951957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 16:29:36 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:29:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0xfffffffffffffb80, 0x94b, 0x9}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x1f, 0x2, 0xe5, 0x0, 0x13aa, 0x180, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0x82c5, 0x9}, 0x2, 0xfffffffffffffff3, 0x1, 0x7, 0x7fffffff, 0x1, 0x94ba, 0x0, 0x5, 0x0, 0x4}, r1, 0xffffffffffffffff, r2, 0x8) 16:29:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 13) [ 1120.706531] FAULT_INJECTION: forcing a failure. [ 1120.706531] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.709247] CPU: 0 PID: 8306 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1120.710903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.712894] Call Trace: [ 1120.713526] dump_stack+0x107/0x167 [ 1120.714417] should_fail.cold+0x5/0xa [ 1120.715351] ? create_object.isra.0+0x3a/0xa20 [ 1120.716438] should_failslab+0x5/0x20 [ 1120.717367] kmem_cache_alloc+0x5b/0x310 [ 1120.718352] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1120.719680] create_object.isra.0+0x3a/0xa20 [ 1120.720729] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.721950] kmem_cache_alloc+0x159/0x310 [ 1120.722953] security_file_alloc+0x34/0x170 [ 1120.723979] __alloc_file+0xb7/0x320 [ 1120.724863] alloc_empty_file+0x6d/0x170 [ 1120.725829] alloc_file+0x5e/0x5a0 [ 1120.726711] alloc_file_pseudo+0x16a/0x250 [ 1120.727713] ? alloc_file+0x5a0/0x5a0 [ 1120.728634] ? shmem_get_inode+0x55c/0xbc0 [ 1120.729647] __shmem_file_setup+0x144/0x320 [ 1120.730676] ? _copy_from_user+0xfb/0x1b0 [ 1120.731662] __do_sys_memfd_create+0x275/0x450 [ 1120.732771] ? memfd_file_seals_ptr+0x170/0x170 [ 1120.733890] do_syscall_64+0x33/0x40 [ 1120.734783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.735992] RIP: 0033:0x7eff8aae2b19 [ 1120.736879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.741295] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1120.743114] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007eff8aae2b19 [ 1120.744801] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00007eff8ab3c0fb [ 1120.746494] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 1120.748179] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1120.749878] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 1120.763767] FAULT_INJECTION: forcing a failure. [ 1120.763767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.765425] CPU: 1 PID: 8314 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1120.766358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.767449] Call Trace: [ 1120.767805] dump_stack+0x107/0x167 [ 1120.768300] should_fail.cold+0x5/0xa [ 1120.768806] ? copyout.part.0+0x112/0x140 [ 1120.769361] copy_page_to_iter+0x878/0xf80 [ 1120.769955] blk_rq_unmap_user+0x552/0x750 [ 1120.770532] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1120.771116] sg_finish_rem_req+0x73/0x320 [ 1120.771664] sg_new_read+0x3d1/0x4b0 [ 1120.772159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.772859] ? _raw_write_unlock_irq+0x1f/0x30 [ 1120.773476] sg_ioctl_common+0x1f45/0x2570 [ 1120.774056] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1120.774753] ? do_vfs_ioctl+0x283/0x10d0 [ 1120.775297] ? sg_write+0x120/0x120 [ 1120.775776] ? generic_block_fiemap+0x60/0x60 [ 1120.776372] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1120.777012] ? wait_for_completion_io+0x270/0x270 [ 1120.777666] ? selinux_file_ioctl+0xb6/0x270 [ 1120.778250] ? sg_compat_ioctl+0x120/0x120 [ 1120.778816] sg_ioctl+0x8f/0x120 [ 1120.779275] __x64_sys_ioctl+0x19a/0x210 [ 1120.779823] do_syscall_64+0x33/0x40 [ 1120.780329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.781013] RIP: 0033:0x7f16a9b0ab19 [ 1120.781535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.783952] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.785194] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1120.786177] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1120.787112] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.788070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.789007] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1120.811120] EXT4-fs (sda): Mount option "nouser_xattr" will be removed by 3.5 [ 1120.811120] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1120.811120] [ 1120.813274] EXT4-fs (sda): Cannot specify journal on remount [ 1120.852494] loop6: detected capacity change from 0 to 2048 [ 1120.861116] EXT4-fs (sda): Mount option "nouser_xattr" will be removed by 3.5 [ 1120.861116] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1120.861116] [ 1120.863199] EXT4-fs (sda): Cannot specify journal on remount [ 1120.866315] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:29:53 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:29:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x5, 0x1}, 0x100, './file0/file0\x00'}) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4000) r3 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) io_uring_enter(r3, 0x4c07, 0x0, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000001680)=[{&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/83, 0x53}, {&(0x7f00000014c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/232, 0xe8}], 0x5, 0x4, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x6, 0x7f, 0x7, 0xb4, 0x0, 0x86, 0x1000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x200, 0x9, 0x5162, 0x7, 0x7, 0x20, 0x3f, 0x0, 0x4, 0x0, 0xfff}, r1, 0x9, r2, 0x3) 16:29:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:29:53 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01912013ed000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) 16:29:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000005c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x204c034, &(0x7f0000000200)=ANY=[@ANYBLOB='barrier,nouser_xattr,delalloc,journal_path=.']) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r0, &(0x7f0000000040)='./mnt\x00', r1, r2, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './mnt\x00'}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) syncfs(r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) umount2(&(0x7f0000000280)='./mnt/file0/../file0\x00', 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r1, r5}}, './mnt/file0\x00'}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setfsuid(r6) statx(r3, &(0x7f00000003c0)='./mnt\x00', 0x2000, 0x800, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000500)='./file0\x00', r7, r5) 16:29:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 35) 16:29:53 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x1c) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:29:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) finit_module(r1, &(0x7f00000000c0)='\\\x00', 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x4c, 0x12, 0x501, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, {0xffff}}}, 0x4c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r1, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:29:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 36) 16:29:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1120.903440] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1120.910474] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. 16:29:54 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/sound', 0x10303, 0x66) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, r4, 0x1) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:29:54 executing program 5: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r2, 0x3, 0xebaa, 0x8000) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xcb24, 0x4, 0x0, 0x1b, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, 0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = eventfd2(0x1000, 0x80800) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x10, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x2004c894) dup(r3) [ 1120.935510] FAULT_INJECTION: forcing a failure. [ 1120.935510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.937015] CPU: 1 PID: 8330 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1120.937892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.938928] Call Trace: [ 1120.939261] dump_stack+0x107/0x167 [ 1120.939728] should_fail.cold+0x5/0xa [ 1120.940208] ? copyout.part.0+0x112/0x140 [ 1120.940738] copy_page_to_iter+0x878/0xf80 [ 1120.941294] blk_rq_unmap_user+0x552/0x750 [ 1120.941834] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1120.942406] sg_finish_rem_req+0x73/0x320 [ 1120.942922] sg_new_read+0x3d1/0x4b0 [ 1120.943408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1120.944080] ? _raw_write_unlock_irq+0x1f/0x30 [ 1120.944668] sg_ioctl_common+0x1f45/0x2570 [ 1120.945212] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1120.945892] ? do_vfs_ioctl+0x283/0x10d0 [ 1120.946409] ? sg_write+0x120/0x120 [ 1120.946875] ? generic_block_fiemap+0x60/0x60 [ 1120.947451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1120.948071] ? wait_for_completion_io+0x270/0x270 [ 1120.948700] ? selinux_file_ioctl+0xb6/0x270 [ 1120.949263] ? sg_compat_ioctl+0x120/0x120 [ 1120.949805] sg_ioctl+0x8f/0x120 [ 1120.950246] __x64_sys_ioctl+0x19a/0x210 [ 1120.950771] do_syscall_64+0x33/0x40 [ 1120.951106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6203 comm=kworker/0:0 [ 1120.951248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1120.951262] RIP: 0033:0x7f16a9b0ab19 [ 1120.954970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.957344] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.958342] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1120.959260] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1120.960167] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.961078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.961989] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:29:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x4030) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 16:29:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{r0, r1/1000+10000}, {0x77359400}}) 16:29:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 14) [ 1121.028922] FAULT_INJECTION: forcing a failure. [ 1121.028922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1121.030574] CPU: 1 PID: 8344 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1121.031391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.032372] Call Trace: [ 1121.032692] dump_stack+0x107/0x167 [ 1121.033124] should_fail.cold+0x5/0xa [ 1121.033584] __alloc_pages_nodemask+0x182/0x600 [ 1121.034143] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1121.034945] ? lock_downgrade+0x6d0/0x6d0 [ 1121.035586] ? lock_acquire+0x197/0x470 [ 1121.036121] alloc_pages_vma+0xbb/0x410 [ 1121.036709] shmem_alloc_page+0x10f/0x1e0 [ 1121.037197] ? shmem_init_inode+0x20/0x20 [ 1121.037702] ? percpu_counter_add_batch+0x8b/0x140 [ 1121.038292] ? __vm_enough_memory+0x184/0x360 [ 1121.038826] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 1121.039457] ? shmem_unuse_inode+0xf60/0xf60 [ 1121.039974] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 1121.040579] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1121.041178] shmem_write_begin+0xf7/0x1d0 [ 1121.041669] generic_perform_write+0x20a/0x4f0 [ 1121.042220] ? page_cache_prev_miss+0x310/0x310 [ 1121.042769] ? evict_inodes+0x470/0x470 [ 1121.043238] ? generic_write_checks+0x2ad/0x390 [ 1121.043786] __generic_file_write_iter+0x39d/0x5d0 [ 1121.044376] generic_file_write_iter+0xdb/0x230 [ 1121.044921] ? iov_iter_init+0x3c/0x130 [ 1121.045392] new_sync_write+0x42c/0x660 [ 1121.045869] ? new_sync_read+0x6f0/0x6f0 [ 1121.046348] ? __x64_sys_pwrite64+0x201/0x260 [ 1121.046879] ? lock_release+0x680/0x680 [ 1121.047347] ? selinux_file_permission+0x92/0x520 [ 1121.047913] ? security_file_permission+0xb1/0xe0 [ 1121.048486] vfs_write+0x7c0/0xb10 [ 1121.048907] __x64_sys_pwrite64+0x201/0x260 [ 1121.049417] ? ksys_pwrite64+0x1b0/0x1b0 [ 1121.049915] do_syscall_64+0x33/0x40 [ 1121.050352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1121.050949] RIP: 0033:0x7eff8aa95ab7 [ 1121.051380] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1121.053508] RSP: 002b:00007eff88057f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1121.054398] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95ab7 [ 1121.055226] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 [ 1121.056055] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1121.056888] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1121.057716] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 16:29:54 executing program 7: socketpair(0x2, 0xa, 0x0, &(0x7f0000001880)) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x20c482) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0xd6, &(0x7f0000000040)="fe2e864a2161c500561213f1a0da56d7105b816786b0077db43f0fdaf3704bd5e22be2030aa7fa0b90aef141adae2acfcfb29a9ed24b1996a38a45868eac9389a230ac14e06b65f56c1f395a4025d43d73e9ccbbf08737f3116be00a2533062462edd705bfb894a73a64fc6ea7ca753938315a669f8bec8708a574691821170eb7c81a00270f4453e3e85ced6c09b6c0abcc1e82addbee90d0ec7fbe85a0f264c6572ea994b2e5d612fbf7fd3623be9516a63d570e9167e23e4400c02df76a40bb43a660d377c9388812e5a7662bc0e4c7e660c7f956"}) [ 1121.114270] loop6: detected capacity change from 0 to 2048 [ 1121.125876] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 16:30:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 15) 16:30:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:30:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 37) 16:30:09 executing program 5: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000140)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) fsync(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r1, 0x0, 0x8a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x40, 0x3, 0x0, 0x0, 0x4307, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10003, 0x40, 0x400, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x1c}}, 0x0) 16:30:09 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) [ 1136.318124] FAULT_INJECTION: forcing a failure. [ 1136.318124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.319847] CPU: 0 PID: 8362 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1136.320786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.321918] Call Trace: [ 1136.322286] dump_stack+0x107/0x167 [ 1136.322787] should_fail.cold+0x5/0xa [ 1136.323300] ? copyout.part.0+0x112/0x140 [ 1136.323863] copy_page_to_iter+0x878/0xf80 [ 1136.324438] blk_rq_unmap_user+0x552/0x750 [ 1136.325020] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1136.325618] sg_finish_rem_req+0x73/0x320 [ 1136.326189] sg_new_read+0x3d1/0x4b0 [ 1136.326701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1136.327411] ? _raw_write_unlock_irq+0x1f/0x30 [ 1136.328028] sg_ioctl_common+0x1f45/0x2570 [ 1136.328596] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1136.329305] ? do_vfs_ioctl+0x283/0x10d0 [ 1136.329856] ? sg_write+0x120/0x120 [ 1136.330358] ? generic_block_fiemap+0x60/0x60 [ 1136.330966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1136.331619] ? wait_for_completion_io+0x270/0x270 [ 1136.332288] ? selinux_file_ioctl+0xb6/0x270 [ 1136.332891] ? sg_compat_ioctl+0x120/0x120 [ 1136.333462] sg_ioctl+0x8f/0x120 [ 1136.333918] __x64_sys_ioctl+0x19a/0x210 [ 1136.334482] do_syscall_64+0x33/0x40 [ 1136.334985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1136.335671] RIP: 0033:0x7f16a9b0ab19 [ 1136.336174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.337937] FAULT_INJECTION: forcing a failure. [ 1136.337937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.338651] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1136.338668] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1136.338675] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1136.338682] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.338689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.338706] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1136.347158] CPU: 1 PID: 8367 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1136.348724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.350609] Call Trace: [ 1136.351212] dump_stack+0x107/0x167 [ 1136.352048] should_fail.cold+0x5/0xa [ 1136.352924] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1136.354147] ? shmem_write_begin+0xf7/0x1d0 [ 1136.355137] ? shmem_write_begin+0x100/0x1d0 [ 1136.356144] generic_perform_write+0x279/0x4f0 [ 1136.357189] ? page_cache_prev_miss+0x310/0x310 [ 1136.358249] ? evict_inodes+0x470/0x470 [ 1136.359156] ? generic_write_checks+0x2ad/0x390 [ 1136.360219] __generic_file_write_iter+0x39d/0x5d0 [ 1136.361339] generic_file_write_iter+0xdb/0x230 [ 1136.362397] ? iov_iter_init+0x3c/0x130 [ 1136.363298] new_sync_write+0x42c/0x660 [ 1136.364568] ? new_sync_read+0x6f0/0x6f0 [ 1136.365486] ? __x64_sys_pwrite64+0x201/0x260 [ 1136.366511] ? lock_release+0x680/0x680 [ 1136.367408] ? selinux_file_permission+0x92/0x520 [ 1136.368500] ? security_file_permission+0xb1/0xe0 [ 1136.369600] vfs_write+0x7c0/0xb10 [ 1136.370423] __x64_sys_pwrite64+0x201/0x260 [ 1136.371405] ? ksys_pwrite64+0x1b0/0x1b0 [ 1136.372339] do_syscall_64+0x33/0x40 [ 1136.373197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1136.374364] RIP: 0033:0x7eff8aa95ab7 16:30:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x37c}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) accept(r0, 0x0, &(0x7f0000000080)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80800) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000200)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r7, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) [ 1136.375203] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 1136.379598] RSP: 002b:00007eff88057f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1136.381313] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95ab7 [ 1136.382931] RDX: 000000000000003a RSI: 0000000020010000 RDI: 0000000000000004 sendmmsg$sock(r7, &(0x7f0000002e00)=[{{&(0x7f0000000340)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000500)="b12341f4bfca791517fb8257ba9bc4de3368185c0defb112ad45ee5d20f977ba77f679f937bd3e387a748465fb0239c01434c51b088bda0675ca0089579db1a4a019a04efe3633dfeda9af7844962055d948fc50805a530571d455335ccfb461c100b56a68174bd119603c6b843085aa259c6912e4805411ee755c9e6533b6f5cda2e82d039ccbad72366a2da5eb9869036e20804c4592b3455e93bf98c6fe725c8b4ec1f0293ba9e99f0c2bd55e6d884dfa53ea004b4b646a4e599366c4302e1bcfdd787678869dc898dd56f0dcf4f3d0cb56f9600557f082a97d926fba6edacad7cdc419daf2c1ee5c", 0xea}, {&(0x7f0000000600)="0eaa0eeb3070a29ec05c3ad66f4b2e42e8ee956c8e972919289d17dd41d92c2df03c930af8f1eb75dbfee744532944643e46452d1a4184ec1fe73255722d66a06da79609182015d914c47607578e3eb8c83e908504b89ebe9809ecf4d7cd35df296d74b2d98bff870309526202a6a2de40da64c902749a50f72e946b0a6bc4a58f0c8f34a4d3526983ad451e300420dbb34eb99592351f153da975c6e8cfa0af3c4c4ec63d38b26a45db4f151a950356c175499ce592ee5bba43a5dbc8e166b49dc6a719e82a416bf1b67bf2340962", 0xcf}, {&(0x7f0000000700)="c30c5ba598aea91dac1c5679347dd98d063536a89e7d857414a3c85b78159feecf68d3b74d3d348b47d24c4a11120dde1f3965f444a3abe44bf4665c1747f29bced2ca0f2511e204e0050d744a2957c4d1c866ff335f9bf41738b299b6534ecfb27950e5f567a656923b3865cce82259a4ffb74618699017b6cc082699897b7420668337701c816aa73b204da80178eccdb0a3f7c5fd403c95c50b21759e9b131e98f3ce4aca0019214de55a613ea21e0ecce15f828a0109dcd959688cbe1d4a8386ad9e0a10a8bc27b9a296002215", 0xcf}], 0x3, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x78}}, {{&(0x7f0000000880)=@phonet={0x23, 0x6, 0xff, 0xff}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000900)="b7c2cfdb2ea08e92f378f45f756e8a1903bb0c2179f5de6733ce5ba81e63ab3a4833e74a0ef50163ae08f23e89530492cfe8d0a6660be2d7117f3bab8827e56ddf54ceeb00913275b57be9c825b410715c476f2e5fa1da0e", 0x58}, {&(0x7f0000000980)="a1a5de75abe638bdb015098a924742a07ed04a46fabf97d93cb9cad58656fd237bcd7b60f35c5206139e4cf6a734895f50d725d63178bb4017864f8f91f00d595c47cc11ee9b581ad69e384e65db2f1e1689df4325c9e85d757729bf9f84e74b280e664ba171345e4f07c009f965b3539ca7c2771ed51fc37f48e14ec860a6f867a5f96cd6b4db39f60cfc5151abd493c6f266143af3ef87cc9f67711a74dbe0510634860a77432bbfe5f5a2ce41f8322d7a21bc1605fce000e04e7b42e1ac0e87949584c7c37881f4f11aa41ab3829498e0d0cdf016974801df114cc2d8f8", 0xdf}, {&(0x7f0000000a80)="77afbed574c39987ccbf7f9eb89924d5c993d7235a4602f563ff00457887456ebd62b98f0864c6a7931eb39b60bc1649435bfb1ffadc850c8d1f298017aa73351d877a85076a2586cbdde26576378970111f0cd7a8466c70b694e843025b2960fd36b83558c14e8bd078e755c1d6bf5b7a2cace2b290cc70548c9c348ea86efc7e47ea7c5b2496db4311e1f828e7026f26d0dbb928016775a04a846d851ad7d318def9887c5ae4ccf1e2c7b42e569c5e6bf6ad1349a14517819bec65c96d87943d301553143d6c2601a5143982a7c2b0", 0xd0}, {&(0x7f0000000b80)="14541d852872b4bf18c57fe0cc853265d32db68396e07191b5439a6936d240740ce2b74866195804fba0eafb2517b96a15df900d95baabc3d9278a3e0ee4c05e7e8beef496c502287e2760697769224a99f33675a283f6f37939d8fcb4f8d766749b2adebb86fb5281f608da79f47da42e0744ea7b0df1cd32725533c739b0576356add03069a2ee", 0x88}, {&(0x7f0000000c40)="bfb0567eff61a59347fea22b49632dcb80dd706e9300a48620ef65ded26e35637b", 0x21}, {&(0x7f0000000c80)="12e49f63a6d5fae6d3dfd50c79b9427907815598de61b0ca68df1ca4b57ed0192c2ec03ba0b4", 0x26}, {&(0x7f0000000cc0)="0ecdd5f1fdaa4956b4c993e1335c82d2d50e8a9e686f5992052d203f7d66e7761c83e0f666d863fafdb189b496e6a12afc84abb629fc2b30bd72a32445316c19736c6227a244a4078496adfe64e5a8d237aeab4062a2a8f45045d9c445b86b03d98e67dd623952ac5a9dac307407d51f9eb978907295ee37a2aa4ad4ea39", 0x7e}], 0x7, &(0x7f0000000dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}, {{&(0x7f0000000e00)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)="9adff6901cf85fa0afd4158fe9ab47e5933b770924fbc7cfc9c5d74a26ab76f886cc26f0359df0e841a6fcc5f789432da259a8a888abfea370c2ea72393e4029fd9c646b2eb40d187a322a4badbef9cd460dc0256f34f42467eb8948429741bdfe0eec7a1ea93e9330de17a515c69ddcf1d5752dab5648548b816af636ef34637fae75171fb2ac44d894abcde619941b3c4596f9909309031c04c5f2dc75aec2df55224764f8a7c89a52e3871adcf9d8e558beda18c490b6da9e8d43363f813d", 0xc0}], 0x1, &(0x7f0000000f80)=[@mark={{0x14, 0x1, 0x24, 0x32e}}, @txtime={{0x18, 0x1, 0x3d, 0x100400}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)="09d2311a1c0ea2467b281a311e028bbf2f72479ef8ab0aa1912160bc995356fdfd8bf635b07b1b3bf0f740d2adcc7d973ff73650649c4fbe11b50165b2fa73cb849edfa68ba8f04f16580a6bd57611bb1b86faa018676807653d60ab8ec696901d4a0ca1f21caa9be7263116a69e99c74326b4b05f99713a05c4a13c9dfb4d52aaa07c25c256d941bd0f7c47992055bcbcab874c2df5d100", 0x98}], 0x1, &(0x7f0000001180)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{&(0x7f0000001200)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)="cf8b7adde2f1113eac1feeb54435ee00a915c30fa7b6f79905eaf62606a6935e8e840c0fc4a8747f40e089d7f1f617c0aed67119826b8b2cb37906eb56", 0x3d}], 0x1}}, {{&(0x7f0000001300)=@phonet={0x23, 0x40, 0x8, 0x3}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)="934dfca5244661db752ee475a4b4b76c176cc8336504c41e", 0x18}, {&(0x7f00000013c0)="62719f07e729c67c539ae8c7fd11565b84afa1533e2bb79b73ee53120d971ffcf9a6b4c62a6269e088eef9a277205c8f06bf8de43a18bde2ef72e1d4d6418aa6e169d27993a46c08795ef1b1859429e33b86555f33af0123b00c87cfd9725676a6674cef882e2367688674ce654745f15a9b708dd4f297f7609a98e8f6e63ff1682bf1f354a22b862a14cf5b63c88f644a139d0cb1dc58a5e5658585b5c0011771c4b0e1c96c3954d5edddedc430b00caae7a8f3eebe5c0c5fa3c7e8fc7bd33fb5d6d898902f9eaa6e74430886670d36725a1a49ad2e39714648954231ece3efc4125a4a5c864589b32b965ee36fa0af4547816c97fc1a68d99ffc", 0xfb}, {&(0x7f0000001e00)="4f47a8055a8f56fa5ba307b4a23147fc647deba91efc077574d028aceaa405ee9c47a2655471208541b2b6063dfad3a5a1f22d13c2c26870de92fbba0cfb2e3650cfd7a4b839efdba9de42ac0c342ad43e159c17194d94ce9563484b0cbd2e1cd3201a8bebf1aff2c0b72515be8143a5f7f5554df3f5e0d8447c72d45bebdf2063ccecfab4d8f5db57d5580c285f7e86038afd091d0e9eef8951b740bb6ef52b0bb519fa73367eebe21d46210381d3076ba193968707bb0a2949d01d87fd4280ed5b94f6149ec5ee95b377a53f057f6438008d37699051dd1a7351cc3ca62cbcfd13bb03d9cc57a555a42a85ef951fd929b27a3ff03d3b6ec5f1a9a2e0db93d16f49c5095728238e952052cfc603d14ef8deccb5141e37cb799b83908c94285fbc12545cc2a16893a227492e98418e631fa49fd0bc15c5cdc3be8634938a521ef241abff58da55b66d83b6411be7715d1ac5738b5c25515ca3dd4347712a1e2dd0a0863b1e01775a4ae8fe311209cf857858d0bbdf2a1d668e33a67827cb1963a1f09b0a131d5749b9cd6a6b76d20c3cb0698c79deeef0b3bd474739e0fea0082de5f3cf82b0b30af803b0a9f141021f0e463c6e5aa6e6800f9229cdf1dcf4297e1109e0850f35de7292cf44ebec45887247f70583e9915de5f64d108d36ebbe55a02b7f2bbe327c63448721289f6fbc204827580f8aa9af4a3a0aaf0ba55620f09b772a20b9a975c29adf868fa40c43dd1a306efc46e77f9bf5c31ab7c27ea58dadb5a54da54dd576e810c69913fb35962f6d6fa670cfa104e96fdf71c92d7152e4b6f91a199c0b5776e91c9276f9f2cd38892c6cf0d7701e4622b36dd681c1a4c3cbcd1ab31facffab92e679b92682abbb49a5382677eb2b7395e8d618f76bcc1bbd242dffaf5e19443ae372fb71bb55cf045dcc7c8d35dbb4877667a5095c0b880e45b3ceca9a9100f4536e0bd2df1ec9fc0d1c177f486d404fbc67205ed64029d227600999a73734a8e74f3482eb1ed35efcd565e87a5be4662a30cb0da9555e42acdd79c4e8323e02756f0bbcef4953a9498ec9aebccd1b85428f1eca7b723a429a8f8d758bcc915b0d31dfacc2c28431fe31dbc3d2be92b86684d225f99f7210450dc2347c32129b031f3726b6a61be51e359f826848c7b54c6dc6d0f8495132463cfd1525462f6f5f7491a35723cd23a637568761fd0018c9f82648683b9341e1558f7e6c917116e9b73f24799f7178dfec527e9948823c1f7aa118e395ff180c46a0b9191375a22d29647c17106beb7a3af3cd721c9f79cd6dc51963fd01ce5c382232fbb992f6a35ed90224227e146a6b052a6e77d548657d8c38a380a5051b0e9372c9306b7261c537a5d62e10e5b2517d6f27dbddadd0b3699823dcbadd72192caea148c650ddfc3c07be12e2d8209bce2d812f7a78e3741014e9d43c222cf941d3a6bf7ec47684913dd9c1aea89d41750d851ef65f4dea25082ad4cc64b70e67ba35658dd7a353ca5b97419778942f9e1f1a727f2228390bf67c57d19b10dc681be6add0e8deecdd82f14071aa42d0e5ad605f50df7a05cbb294f29bf84360e0cb49fcdc87a86e046a26836c013e273c0e1962548bceab35e4b2275416c6853a27f4825849d63375d7af12026ebe7c1642be02835413f757d5cefbc7650593d7fe24e906bc0c4466b7e79c862e3b4c0f935142dc456379df9aa7e7ed4c2f1e8bb1291a0abcc11ea40fe35eca4a3e42857f9d3dc554487abda271f2eb3513b101dc886c15c120cb2424edf2e017aaefa7628a56cf3db8820699134620278bef6568bf8224cde6ee47f033b3d1493f43788a40e70e3a2c97e2677d0394d609a6db1c45bac6deaf816c1127fe33c9391cf6e1161acbb7076f6173b0f58343560ef386525875f59234f6fa3fcf011b29d98a24e901321377fcb758f42b830c39cf467179f2bb5d105ab18e741824992a1f23b389dbb5430b7a93fe099893b20e005bb9412cfd58ab06d2ec8bcd0c724c6607a270bc37a4b69c036d20004549aabc923c88ed72e3c9a59aaff99c1e6e9c5c1a39fb2502cfb4328ccff27add6783cacb7b24c259c5fda29d593a1860cd38819d24faac572936633788a5e376d791dffc9f9212dff37eacf6d5b3dddd6570067f74f828e5e22fe5e58821efc13c50cd22a31b1c4d739b91852abb925b8b939019d3e094ca894b7227ea71d8b9ed58d2b542bbac597000633cb9968de84627861602f72268969118198feee2dca5e366cb982adc6ba8b443771f8693cea4de243b75b6ccd1596aa349dfcf7bf12d146bac30e367c5a9970939901aa3d4204dafddcb8f705108473662dc62417ddba791d9591817b25997d6d62a3fa01128e1ac20762cc14f2691b6fc4e445d681d4fb482ed5041a41690941ff4ae91aa87199069f39bd8ccece894572ea2949461ce7d276436d8adaa3eb89cb2525f7b1c8fc0d9e5de794d2870338750808f2f275272a991a752f52d5cac3ae69aa8513553a821bba21566f3ebd682c5d07a43e3f94704a35dfee5f127959ccc24a81efc895f6073e5f862b0ec7a2c2d12a9de8aaa1e4243eeeb518ca7ef820a483b23f730dd52537f8101a1eabe05aeab81c2fbf828639f6e0de38862b63c0782cefa87958bc856eef919232bbadd8a66a6bb5a94448dfaf7da99b747b1937c93a0c530718df5ed17f2a2f1407971b694ae79ddc629cc2286564e008ab3488ada950ab7f89e73ef74e4cfbac8f8498720c3e46736d43372cfa1b7e15a87b03b1d457892f7d9d96bee82541c1247ec1420319ee4575f01e3e55736dd469923cb47c62ebe81f231b140eb1bb925d1b7a64be611891dea791b11dbd1f82e431f121d8d027b8e5a15194edff7acc9601a5ae6e0f1fcf2e6e4a9a814f92f9886867b61eee8e03f148100c960ce9924b4658f470210a1c754db85363fbd5f538ad467457277170b47423cef451488efdf7727eebf12b5d72c7ce4655f74804ee093b98b88e73301779d5bc754f0126d473e5ef7440b4a54b72ee4723b6db5b5b1e5981dc2324eebad186e8fc264e42a6e9c04554c8e1e0327d0b19a7162a2557d3207447cf5a164dd2bc445eeede018a443366db73bee1ec4369dccdf8d84fd4018cf1aef68c28c724ae93ea0fa2184a4677fb70f728dfea30abcd3b42cec254bd806b7f451ec93342b9154365f7e13a976850dc5a2d54f5a4b49c9f244b28ffcfcf7475c0ef2363d61a5dc600163af2a91637086ab51301048655bf2f58840e855c8ec91670a8c5bd980827501e1c4efb4280ff650b75d6678b7d8760a0d52c166b8eec31f9f62a03ab9fe83672e92dbda54f6759aca89b5d9ea8fe472713429c512cf3ff4665df8e71ffacc526057d0a56333cf6be17a061bfa5aac4517a809146306154194a9b52b14dcd4ec5a2fe1def742fc4cdc6c2df00659e04e0cd4ac79e5407944befb567a50329c134d605b2bdd890778edcac77c9ad128764f9655abc604673ed079e61a2597e603b93fdaca7f76d549fc06196c41c4d85842d31820fa207c40e41af39121af76a66d6696026db531d118155f57b2e8a237ea315c34501a177c9b74c34ac02e98ad0dabd8831dba2bc345c769b0304794425cea5f65afa9e818a22a097b37e8b00e07d02cfd75fa8a75be6a8e3fbfd7b953487be7bbfcef3db4d1a98e18b8a3f42f30df0a67b29fff4d3c8adbbb4c95d07c9671b2edf8e2f8f028249ece27c986903cd14f84acf3c03be74d42a29033f3fceae6dd4b07521cafabf5fb07e45b29466acc0e995c6616b708e9853a61549a343fe403492469b9135823af6adf4b6d683deb4cd367a5532e1ceb783ae0afa71c612ef414b766703a7a64672343eec13be497d5b4a30a0fb19288a8cb8c61049bb86a2473e841a92334aa1e87fc0428bd82b1701d7647ae9a440ceba42c931118fbea999d46e9aad236f541239ca0d5824f8e7592a10856059b5fab6017a0bb1caa4dc3a89d0c23ee4fb71152eed042b6c70052de1dbf1b75164634c64feb149c3453a933b4694c7709f3962093f5373767f2f16dc8c19113042cf5d8e1abe7a6bf2cdb01af0eaef28379eb8198ad96332bc003165e7e8d4a21386c042a19be0ed0242717713d5bcbc84226c2250634d5c1d99a065bfda3d40d126eb3df5b6537992b33c7871f85b619a8233f39e5bbc9c61abf583f9904849c0dfc99f9c4bddf9d67b05fa3a79ab98c14d39735ad01077432d3574886d252b58180627ef034d9e4eeab39bab84ba45b47b3bca8614e5ecb9a491bb6e48e868f629b25e0dc5235922f2a555eef8c6d969a873bd7c8a65f79561677264d61979dfd72dbf4c5172419a53a3b970846267f827ad0f8fda3745b8518421f725520f569245317c7288489e0214cff99ff00900ad75675c5928202ca5516e8e63b658c684a4808362d2268c3264288e03e2c88c777b5077a58f55298aff9bcdbd2f3baec2a1bc92ceff21e8b26b2bf469730752ab4a3ecda28c5defd219c12fcb319365682e69ade597d50a99497f599b1757d9c2a2756d48b9616a393e566876cc140f56470d40a61513a7808b83b388a2da93bdc24628054fab1eceb5c5263e38106ceb763cb29aaebed517edbaa65367d47b08865bda8379fa5f38707a0d16f538ee082141142958d43cee46d8570f7e6aa3fcc7b704e459020de0392fab11da8580fd567ea7ee5088d6e6bcedd9787dbfc0421b5cab600fcbbef59dd46a7bad8ae274d0732fd985cdf7ff90084c8958aca14f020574084ab35f9fe9794ae34440c7baf03ea87de8e6d9b689bff92b8715bcd8ce7e9ddb97db0de55c84adee6d98c33288e56c297034315404d05dfc922abcb3f18ec0be3b7f3706a4371dbbbae76a9f0048f01765c198730d6065e73bc0dcc7716dbd215c06f42165d5887adb6a172740cd33e7b4ac3f1a542f4157aef3b2b76fd1d6b3d8d123e8f6736c882ab65163f063e218e251ed8045d9aae2fabc32d91dd6a00ff6bc58857dad84d394390b66468c023dfd1cad8ba0f27258789fcb21fbcf9cc0b5ca80327230689f494f3a7d8c63f2e2de3f7d13ea639946baabd2ba70b15eb85593a61c5b354b0e93c5c7d669fa6ff8fe5ea67291496914b152061e4f568805b63f7289bb0e5124e25ec6639d1fdaa7516da604f5c86201bcbde93b686cc90e658e583128fe8612a556fcda980ac0102d222eb1aedd19104655b0603218cf937f2895b585fbf5b00bf8ccf1f56e014906c9714bc69dd71db4cb94d0066c9228379276e9e18bc42c3ff2558157f4c09f47e8496859e3d97b4357e19287b862c33cde273eb611dc70934dc65463f2a0d5e5b1939f04eadcef8f7d51aba2ce066e76d224075165a4ec7650246132cbbc47d4f155a1f4d738ac2b6dfbadeba3c4cb9f5755dbd219693e7c77e6122f4c65b1e46d5b1bb625c91b69dcfd0cb3b469428dfcfe32e910a1d157278758f7235bfd772abb83c6f188b2d31ede5e22347de9e34d8716fc9e606e5daf6a376f538fd0e9f32db952020dcf8f864b9e1a91f423a96f5ddf24a0ea4c973dab4fba104b19973c65051f026703d275a90827337adfdbec27cc860948c6ab38da90d361e25561672835cdd2855e5cad37df0769764c0c66696ab511712b5e8c76851eaeda8b0f0158f0a9dab75b31ecdb13fff5d0586a55dd95fcf7d23714069a7a87e3e1d3076e323c0f140e7eab4ff1b7e324b0dc451cb837d622a697c6fa1c61e492d57c300f553177b75cd0ad532795cefffd185ec922cb778d421", 0x1000}, {&(0x7f00000014c0)="54c7b1f9b7977de71a9fb236108323f3f45e3f5f03e931846418f22bde3c1cb30fd6095dd5ba47b7d4", 0x29}, {&(0x7f0000001500)="3ac8d9a00a52fa72342b9dfb039315bc51cebee8514da34726b0690c928096ef6d8fe18c165f6fc2435ab7a35aff9ca91470ec9f3d7f21d84d26316834842c", 0x3f}, {&(0x7f0000001540)="869f81bf118d8a0bd3d48c03a6a010ad9aa4c02f2973c692e725eb905ff1e0a28a15719e76b67a894e3f0d3341ef777bd2310c4eed200c7b9a26b6f2317232dd947c7eef1d7bd3019574281ef3ff", 0x4e}, {&(0x7f00000015c0)="eb7632ec005fd8a89077c630618288cc476dc834787510b9d23c837f4c40a676841e72", 0x23}], 0x7, &(0x7f0000001680)}}, {{&(0x7f00000016c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)="cbf4108857bf7d52d04dde2c847af0d27bbd7940445f89", 0x17}], 0x1, &(0x7f00000017c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}}, {{&(0x7f0000001840)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x9, 0x20, "cbe08a2f685ebd5b2d60b240bc6a79c6b5002cf51496c58e49f5ecc6fb2ff4f4d065fcb68c11fb1b31ce429b7f86e4770812fa6b5994b47666d7ba982e8b66", 0x1d}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)="70df8b12b66e305ba37178190001d53ca6b848771ff4cf1447c7e6c51845633dfc25b46eea6999fe1d9b2459d75bbdcb35157555a3e659cf8c833d2f19acd5320b7af3749509c307a1e0f311da046d8aee7d9e0e8d19901ca1e67a7931164a71589ae26d4756af7f99ade3e1e7481781c9c06626d00e6a0ea3689db0c3bca463f4447a086c7f95120e2b85e7d8dd2f3d9377d855b7680f3344382f9fa7606821ddd2457da336df43dc166daf932427e0e3310240780541877d0240667ceb28acfa2903a1ee6a29b4110f938151e83a6a7c664f9374d69b6f48e3c9555e05c812ce8cd14e296628fc", 0xe8}, {&(0x7f00000019c0)="1f26b86d008c2aeccd2a2b9db87b07feda2ba3e4f6b846af8dfb291ace7bbd162971d7688ed50f1d0a338fbb568c0ba5fc45e07a23c2463a0888ad7edae81c53e96cb95611d7a1e6e4985d302ce64386b5b9c93b5f564a8714cc5960e21dcb907070082350043c874161b6163fa2c797e5434c374b1f6afc8d2c08ed91b2150f996c30ec15944311155948b588272924aa1248caa04d112d2f5a49847ac776a4213010fd4bd97963ec66b45b0f6e74b47242ade3e572501a05", 0xb9}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="cb9b74659935520a1a3e269c2a2f4d5f2e38a4a3ad7ea06184d28d5632c6016ed5bc24f52b6c0c836337293b2788b67c844648110d107db3d48a4be41ade4cd010b4f0750d68ddef40095be756ac3dfa130926c53875ae05f1f9571a2cb9df42d2b2f1557a1a04fbf5bab3c609a5fde41bd3849f371bce927a97d0e990e74ba1a26b8b8ed566eabe752efd59127b91742d4f059e8798ac5728cb5ba16f2b973fd73b2b1fa0f5f784d6eeeb401d7a9e47a0bec4", 0xb3}], 0x4, &(0x7f0000001bc0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x13a}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5d}}], 0xa8}}], 0x8, 0x4008000) r8 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) dup2(r6, r8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef691342362187a7f35557f447e7899c87d62581ef02da6162a85fc4bfcef3eff3532e1f1bcac900"/151], 0xb8) 16:30:09 executing program 0: clone(0x10000, &(0x7f0000000100)="df68ea9c015ffedb15663ea02aab765d9c9fa6488c7596e0f040263ffb33b40a4831d6c813", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="0cd8130f687c5468b27db0687b92b58780412cf452209a19143b9441adaa85a7511fbcab9954980659f3b81aecc99d24") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$9p_unix(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1240a0, &(0x7f00000002c0)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x9}}, {@privport}, {@access_user}, {@access_any}], [{@context={'context', 0x3d, 'sysadm_u'}}]}}) [ 1136.384541] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 1136.386274] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 1136.387876] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 16:30:09 executing program 0: lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='user.incfs.size\x00', &(0x7f0000000280)='\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80800) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xf4, 0x0, 0x7, 0x2, 0x0, 0x3, 0xba871, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_config_ext={0x80000400, 0x4}, 0x4000, 0xb440, 0x2379, 0x8, 0x8000, 0xfff, 0x8, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1136.402653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 16:30:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x13, 0x1, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1a}]}]}, 0x24}}, 0x0) setsockopt(r0, 0x5, 0x3, &(0x7f0000000180)="eb7e3a2daee2a01738ffdeb02ee535d713d64248424325d529292fbb11d0c5c45001cbb28a06377337de68f68547689ed4a3b252a408d06c8ddce2aa606d6c09d9de9a70b5691b093420a095f91f0426bd739cf4a590a9c7cff3fd76f920eafb072ce60cc5e6b2b3610b66d68eb5f7d17674115006a2c457e1e8297de500345796ca844b58476cf48bc8c1d5db160cc4e213774a428fd0084a2e8630", 0x9c) [ 1136.440598] Restarting kernel threads ... done. 16:30:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:09 executing program 5: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="6d5c98a2d680edb24a6a7c70c5f5794c3a2c6781cc6071c7b0f537a7419837962927cd5bc5a19865a8f458af1b9c863102d02c8e2f3ef08b528ec32715238a6d47f689a26b11688852f75e73d811e9bcc1ca32e40de8bb8abd2a7a88194d142362954955381d664398f60cdfead0382fa15e4387c0865d1ac28bc94403a02890a858215ce7f45200010000ff8827380ead736f7ed201e22bcad00500e78f268dd43e142be88d5eef4acfef62a82222f3a9f9b718874d8a9e179048cd1c64e83abcd663d86b19134613d8fc90676b57bd4388adb6aba28a6e74760d3500f3f0ca81dc", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf256b0000000a001a0008021100000100000a000600ffffffffffff00"], 0x50}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x8001, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x19520}, {0xffffffffffffffff, 0x82}, {r2, 0x2109}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=""/187) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x99, 0x3f, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x40003, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000006c0), 0x4}, 0xd, 0x0, 0x400, 0x3, 0x0, 0xfffffff9, 0x8, 0x0, 0xff, 0x0, 0x6}, r3, 0x9, 0xffffffffffffffff, 0x2) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x61c, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000500)=""/83) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r4, 0x0, 0x100000001) 16:30:09 executing program 0: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x53333edf5c23fb8c, &(0x7f0000000100)="e3c29cfee54a4438b8292eb6af78dbd4ebfa1e7d1fac3836c26a036e7a76fa2fc00dca41511b84f6ea3886280a0410df6c524dc2338eb260756ba19efc6d294d3369f3e896ce5e471d9b6731ea2093fa93b716209d499550d534c9d33c048476d7b08c4aef78d5042e4b24bc262f74b6611c981bd2659faa8b37e8246a48f185749b", 0x82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1136.489442] Restarting kernel threads ... done. 16:30:09 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000240), 0x7fff, 0x408080) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0xd, 0x2010, r1, 0x8000000) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r1, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_pwait(r4, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0xfffffe00, &(0x7f0000000200)={[0x6]}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x40010, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4109, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r8, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[r6, 0xffffffffffffffff, r9, 0xffffffffffffffff, r4, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x0) 16:30:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 38) 16:30:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) socketpair(0xa, 0x805, 0x9, &(0x7f0000000140)={0xffffffffffffffff}) tee(r0, r1, 0xdf, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:30:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1136.582404] loop6: detected capacity change from 0 to 2048 [ 1136.603449] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1136.615711] FAULT_INJECTION: forcing a failure. [ 1136.615711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.617215] CPU: 0 PID: 8398 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1136.618032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.619027] Call Trace: [ 1136.619346] dump_stack+0x107/0x167 [ 1136.619779] should_fail.cold+0x5/0xa [ 1136.620233] ? copyout.part.0+0x112/0x140 [ 1136.620727] copy_page_to_iter+0x878/0xf80 [ 1136.621247] blk_rq_unmap_user+0x552/0x750 [ 1136.621755] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1136.622278] sg_finish_rem_req+0x73/0x320 [ 1136.622768] sg_new_read+0x3d1/0x4b0 [ 1136.623211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1136.623824] ? _raw_write_unlock_irq+0x1f/0x30 [ 1136.624365] sg_ioctl_common+0x1f45/0x2570 [ 1136.624866] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1136.625474] ? do_vfs_ioctl+0x283/0x10d0 [ 1136.625953] ? sg_write+0x120/0x120 [ 1136.626392] ? generic_block_fiemap+0x60/0x60 [ 1136.626923] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1136.627494] ? wait_woken+0x250/0x250 [ 1136.627942] ? wait_for_completion_io+0x270/0x270 [ 1136.628528] ? selinux_file_ioctl+0xb6/0x270 [ 1136.629045] ? sg_compat_ioctl+0x120/0x120 [ 1136.629548] sg_ioctl+0x8f/0x120 [ 1136.629951] __x64_sys_ioctl+0x19a/0x210 [ 1136.630442] do_syscall_64+0x33/0x40 [ 1136.630881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1136.631483] RIP: 0033:0x7f16a9b0ab19 [ 1136.631922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.634093] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1136.634992] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1136.635836] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1136.636671] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.637509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.638348] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:30:25 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:30:25 executing program 5: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x420000}, 0x18) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x0, 0x4f, 0x6, 0xfffffffffffff9d1, 0x4, 0x1}, {0xfffff000, 0x405, 0x6, 0x80, 0x800000000000005, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) fallocate(r0, 0x0, 0x0, 0x1000002) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', &(0x7f0000000540)=@GFS2_SMALL_FH_SIZE, &(0x7f0000000500), 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',ufdno=', @ANYRESHEX, @ANYBLOB=',', @ANYRESDEC=0xee01, @ANYBLOB=',uid>', @ANYRESDEC, @ANYBLOB=',smackksdef=,}}7permit_directio,dont_measure,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,subj_type=\x00,smackfstransmu']) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 16:30:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:30:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x37c}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) accept(r0, 0x0, &(0x7f0000000080)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = accept4$bt_l2cap(r0, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80800) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000200)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r7, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg$sock(r7, &(0x7f0000002e00)=[{{&(0x7f0000000340)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000500)="b12341f4bfca791517fb8257ba9bc4de3368185c0defb112ad45ee5d20f977ba77f679f937bd3e387a748465fb0239c01434c51b088bda0675ca0089579db1a4a019a04efe3633dfeda9af7844962055d948fc50805a530571d455335ccfb461c100b56a68174bd119603c6b843085aa259c6912e4805411ee755c9e6533b6f5cda2e82d039ccbad72366a2da5eb9869036e20804c4592b3455e93bf98c6fe725c8b4ec1f0293ba9e99f0c2bd55e6d884dfa53ea004b4b646a4e599366c4302e1bcfdd787678869dc898dd56f0dcf4f3d0cb56f9600557f082a97d926fba6edacad7cdc419daf2c1ee5c", 0xea}, {&(0x7f0000000600)="0eaa0eeb3070a29ec05c3ad66f4b2e42e8ee956c8e972919289d17dd41d92c2df03c930af8f1eb75dbfee744532944643e46452d1a4184ec1fe73255722d66a06da79609182015d914c47607578e3eb8c83e908504b89ebe9809ecf4d7cd35df296d74b2d98bff870309526202a6a2de40da64c902749a50f72e946b0a6bc4a58f0c8f34a4d3526983ad451e300420dbb34eb99592351f153da975c6e8cfa0af3c4c4ec63d38b26a45db4f151a950356c175499ce592ee5bba43a5dbc8e166b49dc6a719e82a416bf1b67bf2340962", 0xcf}, {&(0x7f0000000700)="c30c5ba598aea91dac1c5679347dd98d063536a89e7d857414a3c85b78159feecf68d3b74d3d348b47d24c4a11120dde1f3965f444a3abe44bf4665c1747f29bced2ca0f2511e204e0050d744a2957c4d1c866ff335f9bf41738b299b6534ecfb27950e5f567a656923b3865cce82259a4ffb74618699017b6cc082699897b7420668337701c816aa73b204da80178eccdb0a3f7c5fd403c95c50b21759e9b131e98f3ce4aca0019214de55a613ea21e0ecce15f828a0109dcd959688cbe1d4a8386ad9e0a10a8bc27b9a296002215", 0xcf}], 0x3, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x78}}, {{&(0x7f0000000880)=@phonet={0x23, 0x6, 0xff, 0xff}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000900)="b7c2cfdb2ea08e92f378f45f756e8a1903bb0c2179f5de6733ce5ba81e63ab3a4833e74a0ef50163ae08f23e89530492cfe8d0a6660be2d7117f3bab8827e56ddf54ceeb00913275b57be9c825b410715c476f2e5fa1da0e", 0x58}, {&(0x7f0000000980)="a1a5de75abe638bdb015098a924742a07ed04a46fabf97d93cb9cad58656fd237bcd7b60f35c5206139e4cf6a734895f50d725d63178bb4017864f8f91f00d595c47cc11ee9b581ad69e384e65db2f1e1689df4325c9e85d757729bf9f84e74b280e664ba171345e4f07c009f965b3539ca7c2771ed51fc37f48e14ec860a6f867a5f96cd6b4db39f60cfc5151abd493c6f266143af3ef87cc9f67711a74dbe0510634860a77432bbfe5f5a2ce41f8322d7a21bc1605fce000e04e7b42e1ac0e87949584c7c37881f4f11aa41ab3829498e0d0cdf016974801df114cc2d8f8", 0xdf}, {&(0x7f0000000a80)="77afbed574c39987ccbf7f9eb89924d5c993d7235a4602f563ff00457887456ebd62b98f0864c6a7931eb39b60bc1649435bfb1ffadc850c8d1f298017aa73351d877a85076a2586cbdde26576378970111f0cd7a8466c70b694e843025b2960fd36b83558c14e8bd078e755c1d6bf5b7a2cace2b290cc70548c9c348ea86efc7e47ea7c5b2496db4311e1f828e7026f26d0dbb928016775a04a846d851ad7d318def9887c5ae4ccf1e2c7b42e569c5e6bf6ad1349a14517819bec65c96d87943d301553143d6c2601a5143982a7c2b0", 0xd0}, {&(0x7f0000000b80)="14541d852872b4bf18c57fe0cc853265d32db68396e07191b5439a6936d240740ce2b74866195804fba0eafb2517b96a15df900d95baabc3d9278a3e0ee4c05e7e8beef496c502287e2760697769224a99f33675a283f6f37939d8fcb4f8d766749b2adebb86fb5281f608da79f47da42e0744ea7b0df1cd32725533c739b0576356add03069a2ee", 0x88}, {&(0x7f0000000c40)="bfb0567eff61a59347fea22b49632dcb80dd706e9300a48620ef65ded26e35637b", 0x21}, {&(0x7f0000000c80)="12e49f63a6d5fae6d3dfd50c79b9427907815598de61b0ca68df1ca4b57ed0192c2ec03ba0b4", 0x26}, {&(0x7f0000000cc0)="0ecdd5f1fdaa4956b4c993e1335c82d2d50e8a9e686f5992052d203f7d66e7761c83e0f666d863fafdb189b496e6a12afc84abb629fc2b30bd72a32445316c19736c6227a244a4078496adfe64e5a8d237aeab4062a2a8f45045d9c445b86b03d98e67dd623952ac5a9dac307407d51f9eb978907295ee37a2aa4ad4ea39", 0x7e}], 0x7, &(0x7f0000000dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}, {{&(0x7f0000000e00)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e80)="9adff6901cf85fa0afd4158fe9ab47e5933b770924fbc7cfc9c5d74a26ab76f886cc26f0359df0e841a6fcc5f789432da259a8a888abfea370c2ea72393e4029fd9c646b2eb40d187a322a4badbef9cd460dc0256f34f42467eb8948429741bdfe0eec7a1ea93e9330de17a515c69ddcf1d5752dab5648548b816af636ef34637fae75171fb2ac44d894abcde619941b3c4596f9909309031c04c5f2dc75aec2df55224764f8a7c89a52e3871adcf9d8e558beda18c490b6da9e8d43363f813d", 0xc0}], 0x1, &(0x7f0000000f80)=[@mark={{0x14, 0x1, 0x24, 0x32e}}, @txtime={{0x18, 0x1, 0x3d, 0x100400}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)="09d2311a1c0ea2467b281a311e028bbf2f72479ef8ab0aa1912160bc995356fdfd8bf635b07b1b3bf0f740d2adcc7d973ff73650649c4fbe11b50165b2fa73cb849edfa68ba8f04f16580a6bd57611bb1b86faa018676807653d60ab8ec696901d4a0ca1f21caa9be7263116a69e99c74326b4b05f99713a05c4a13c9dfb4d52aaa07c25c256d941bd0f7c47992055bcbcab874c2df5d100", 0x98}], 0x1, &(0x7f0000001180)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{&(0x7f0000001200)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)="cf8b7adde2f1113eac1feeb54435ee00a915c30fa7b6f79905eaf62606a6935e8e840c0fc4a8747f40e089d7f1f617c0aed67119826b8b2cb37906eb56", 0x3d}], 0x1}}, {{&(0x7f0000001300)=@phonet={0x23, 0x40, 0x8, 0x3}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001380)="934dfca5244661db752ee475a4b4b76c176cc8336504c41e", 0x18}, {&(0x7f00000013c0)="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", 0xfb}, {&(0x7f0000001e00)="4f47a8055a8f56fa5ba307b4a23147fc647deba91efc077574d028aceaa405ee9c47a2655471208541b2b6063dfad3a5a1f22d13c2c26870de92fbba0cfb2e3650cfd7a4b839efdba9de42ac0c342ad43e159c17194d94ce9563484b0cbd2e1cd3201a8bebf1aff2c0b72515be8143a5f7f5554df3f5e0d8447c72d45bebdf2063ccecfab4d8f5db57d5580c285f7e86038afd091d0e9eef8951b740bb6ef52b0bb519fa73367eebe21d46210381d3076ba193968707bb0a2949d01d87fd4280ed5b94f6149ec5ee95b377a53f057f6438008d37699051dd1a7351cc3ca62cbcfd13bb03d9cc57a555a42a85ef951fd929b27a3ff03d3b6ec5f1a9a2e0db93d16f49c5095728238e952052cfc603d14ef8deccb5141e37cb799b83908c94285fbc12545cc2a16893a227492e98418e631fa49fd0bc15c5cdc3be8634938a521ef241abff58da55b66d83b6411be7715d1ac5738b5c25515ca3dd4347712a1e2dd0a0863b1e01775a4ae8fe311209cf857858d0bbdf2a1d668e33a67827cb1963a1f09b0a131d5749b9cd6a6b76d20c3cb0698c79deeef0b3bd474739e0fea0082de5f3cf82b0b30af803b0a9f141021f0e463c6e5aa6e6800f9229cdf1dcf4297e1109e0850f35de7292cf44ebec45887247f70583e9915de5f64d108d36ebbe55a02b7f2bbe327c63448721289f6fbc204827580f8aa9af4a3a0aaf0ba55620f09b772a20b9a975c29adf868fa40c43dd1a306efc46e77f9bf5c31ab7c27ea58dadb5a54da54dd576e810c69913fb35962f6d6fa670cfa104e96fdf71c92d7152e4b6f91a199c0b5776e91c9276f9f2cd38892c6cf0d7701e4622b36dd681c1a4c3cbcd1ab31facffab92e679b92682abbb49a5382677eb2b7395e8d618f76bcc1bbd242dffaf5e19443ae372fb71bb55cf045dcc7c8d35dbb4877667a5095c0b880e45b3ceca9a9100f4536e0bd2df1ec9fc0d1c177f486d404fbc67205ed64029d227600999a73734a8e74f3482eb1ed35efcd565e87a5be4662a30cb0da9555e42acdd79c4e8323e02756f0bbcef4953a9498ec9aebccd1b85428f1eca7b723a429a8f8d758bcc915b0d31dfacc2c28431fe31dbc3d2be92b86684d225f99f7210450dc2347c32129b031f3726b6a61be51e359f826848c7b54c6dc6d0f8495132463cfd1525462f6f5f7491a35723cd23a637568761fd0018c9f82648683b9341e1558f7e6c917116e9b73f24799f7178dfec527e9948823c1f7aa118e395ff180c46a0b9191375a22d29647c17106beb7a3af3cd721c9f79cd6dc51963fd01ce5c382232fbb992f6a35ed90224227e146a6b052a6e77d548657d8c38a380a5051b0e9372c9306b7261c537a5d62e10e5b2517d6f27dbddadd0b3699823dcbadd72192caea148c650ddfc3c07be12e2d8209bce2d812f7a78e3741014e9d43c222cf941d3a6bf7ec47684913dd9c1aea89d41750d851ef65f4dea25082ad4cc64b70e67ba35658dd7a353ca5b97419778942f9e1f1a727f2228390bf67c57d19b10dc681be6add0e8deecdd82f14071aa42d0e5ad605f50df7a05cbb294f29bf84360e0cb49fcdc87a86e046a26836c013e273c0e1962548bceab35e4b2275416c6853a27f4825849d63375d7af12026ebe7c1642be02835413f757d5cefbc7650593d7fe24e906bc0c4466b7e79c862e3b4c0f935142dc456379df9aa7e7ed4c2f1e8bb1291a0abcc11ea40fe35eca4a3e42857f9d3dc554487abda271f2eb3513b101dc886c15c120cb2424edf2e017aaefa7628a56cf3db8820699134620278bef6568bf8224cde6ee47f033b3d1493f43788a40e70e3a2c97e2677d0394d609a6db1c45bac6deaf816c1127fe33c9391cf6e1161acbb7076f6173b0f58343560ef386525875f59234f6fa3fcf011b29d98a24e901321377fcb758f42b830c39cf467179f2bb5d105ab18e741824992a1f23b389dbb5430b7a93fe099893b20e005bb9412cfd58ab06d2ec8bcd0c724c6607a270bc37a4b69c036d20004549aabc923c88ed72e3c9a59aaff99c1e6e9c5c1a39fb2502cfb4328ccff27add6783cacb7b24c259c5fda29d593a1860cd38819d24faac572936633788a5e376d791dffc9f9212dff37eacf6d5b3dddd6570067f74f828e5e22fe5e58821efc13c50cd22a31b1c4d739b91852abb925b8b939019d3e094ca894b7227ea71d8b9ed58d2b542bbac597000633cb9968de84627861602f72268969118198feee2dca5e366cb982adc6ba8b443771f8693cea4de243b75b6ccd1596aa349dfcf7bf12d146bac30e367c5a9970939901aa3d4204dafddcb8f705108473662dc62417ddba791d9591817b25997d6d62a3fa01128e1ac20762cc14f2691b6fc4e445d681d4fb482ed5041a41690941ff4ae91aa87199069f39bd8ccece894572ea2949461ce7d276436d8adaa3eb89cb2525f7b1c8fc0d9e5de794d2870338750808f2f275272a991a752f52d5cac3ae69aa8513553a821bba21566f3ebd682c5d07a43e3f94704a35dfee5f127959ccc24a81efc895f6073e5f862b0ec7a2c2d12a9de8aaa1e4243eeeb518ca7ef820a483b23f730dd52537f8101a1eabe05aeab81c2fbf828639f6e0de38862b63c0782cefa87958bc856eef919232bbadd8a66a6bb5a94448dfaf7da99b747b1937c93a0c530718df5ed17f2a2f1407971b694ae79ddc629cc2286564e008ab3488ada950ab7f89e73ef74e4cfbac8f8498720c3e46736d43372cfa1b7e15a87b03b1d457892f7d9d96bee82541c1247ec1420319ee4575f01e3e55736dd469923cb47c62ebe81f231b140eb1bb925d1b7a64be611891dea791b11dbd1f82e431f121d8d027b8e5a15194edff7acc9601a5ae6e0f1fcf2e6e4a9a814f92f9886867b61eee8e03f148100c960ce9924b4658f470210a1c754db85363fbd5f538ad467457277170b47423cef451488efdf7727eebf12b5d72c7ce4655f74804ee093b98b88e73301779d5bc754f0126d473e5ef7440b4a54b72ee4723b6db5b5b1e5981dc2324eebad186e8fc264e42a6e9c04554c8e1e0327d0b19a7162a2557d3207447cf5a164dd2bc445eeede018a443366db73bee1ec4369dccdf8d84fd4018cf1aef68c28c724ae93ea0fa2184a4677fb70f728dfea30abcd3b42cec254bd806b7f451ec93342b9154365f7e13a976850dc5a2d54f5a4b49c9f244b28ffcfcf7475c0ef2363d61a5dc600163af2a91637086ab51301048655bf2f58840e855c8ec91670a8c5bd980827501e1c4efb4280ff650b75d6678b7d8760a0d52c166b8eec31f9f62a03ab9fe83672e92dbda54f6759aca89b5d9ea8fe472713429c512cf3ff4665df8e71ffacc526057d0a56333cf6be17a061bfa5aac4517a809146306154194a9b52b14dcd4ec5a2fe1def742fc4cdc6c2df00659e04e0cd4ac79e5407944befb567a50329c134d605b2bdd890778edcac77c9ad128764f9655abc604673ed079e61a2597e603b93fdaca7f76d549fc06196c41c4d85842d31820fa207c40e41af39121af76a66d6696026db531d118155f57b2e8a237ea315c34501a177c9b74c34ac02e98ad0dabd8831dba2bc345c769b0304794425cea5f65afa9e818a22a097b37e8b00e07d02cfd75fa8a75be6a8e3fbfd7b953487be7bbfcef3db4d1a98e18b8a3f42f30df0a67b29fff4d3c8adbbb4c95d07c9671b2edf8e2f8f028249ece27c986903cd14f84acf3c03be74d42a29033f3fceae6dd4b07521cafabf5fb07e45b29466acc0e995c6616b708e9853a61549a343fe403492469b9135823af6adf4b6d683deb4cd367a5532e1ceb783ae0afa71c612ef414b766703a7a64672343eec13be497d5b4a30a0fb19288a8cb8c61049bb86a2473e841a92334aa1e87fc0428bd82b1701d7647ae9a440ceba42c931118fbea999d46e9aad236f541239ca0d5824f8e7592a10856059b5fab6017a0bb1caa4dc3a89d0c23ee4fb71152eed042b6c70052de1dbf1b75164634c64feb149c3453a933b4694c7709f3962093f5373767f2f16dc8c19113042cf5d8e1abe7a6bf2cdb01af0eaef28379eb8198ad96332bc003165e7e8d4a21386c042a19be0ed0242717713d5bcbc84226c2250634d5c1d99a065bfda3d40d126eb3df5b6537992b33c7871f85b619a8233f39e5bbc9c61abf583f9904849c0dfc99f9c4bddf9d67b05fa3a79ab98c14d39735ad01077432d3574886d252b58180627ef034d9e4eeab39bab84ba45b47b3bca8614e5ecb9a491bb6e48e868f629b25e0dc5235922f2a555eef8c6d969a873bd7c8a65f79561677264d61979dfd72dbf4c5172419a53a3b970846267f827ad0f8fda3745b8518421f725520f569245317c7288489e0214cff99ff00900ad75675c5928202ca5516e8e63b658c684a4808362d2268c3264288e03e2c88c777b5077a58f55298aff9bcdbd2f3baec2a1bc92ceff21e8b26b2bf469730752ab4a3ecda28c5defd219c12fcb319365682e69ade597d50a99497f599b1757d9c2a2756d48b9616a393e566876cc140f56470d40a61513a7808b83b388a2da93bdc24628054fab1eceb5c5263e38106ceb763cb29aaebed517edbaa65367d47b08865bda8379fa5f38707a0d16f538ee082141142958d43cee46d8570f7e6aa3fcc7b704e459020de0392fab11da8580fd567ea7ee5088d6e6bcedd9787dbfc0421b5cab600fcbbef59dd46a7bad8ae274d0732fd985cdf7ff90084c8958aca14f020574084ab35f9fe9794ae34440c7baf03ea87de8e6d9b689bff92b8715bcd8ce7e9ddb97db0de55c84adee6d98c33288e56c297034315404d05dfc922abcb3f18ec0be3b7f3706a4371dbbbae76a9f0048f01765c198730d6065e73bc0dcc7716dbd215c06f42165d5887adb6a172740cd33e7b4ac3f1a542f4157aef3b2b76fd1d6b3d8d123e8f6736c882ab65163f063e218e251ed8045d9aae2fabc32d91dd6a00ff6bc58857dad84d394390b66468c023dfd1cad8ba0f27258789fcb21fbcf9cc0b5ca80327230689f494f3a7d8c63f2e2de3f7d13ea639946baabd2ba70b15eb85593a61c5b354b0e93c5c7d669fa6ff8fe5ea67291496914b152061e4f568805b63f7289bb0e5124e25ec6639d1fdaa7516da604f5c86201bcbde93b686cc90e658e583128fe8612a556fcda980ac0102d222eb1aedd19104655b0603218cf937f2895b585fbf5b00bf8ccf1f56e014906c9714bc69dd71db4cb94d0066c9228379276e9e18bc42c3ff2558157f4c09f47e8496859e3d97b4357e19287b862c33cde273eb611dc70934dc65463f2a0d5e5b1939f04eadcef8f7d51aba2ce066e76d224075165a4ec7650246132cbbc47d4f155a1f4d738ac2b6dfbadeba3c4cb9f5755dbd219693e7c77e6122f4c65b1e46d5b1bb625c91b69dcfd0cb3b469428dfcfe32e910a1d157278758f7235bfd772abb83c6f188b2d31ede5e22347de9e34d8716fc9e606e5daf6a376f538fd0e9f32db952020dcf8f864b9e1a91f423a96f5ddf24a0ea4c973dab4fba104b19973c65051f026703d275a90827337adfdbec27cc860948c6ab38da90d361e25561672835cdd2855e5cad37df0769764c0c66696ab511712b5e8c76851eaeda8b0f0158f0a9dab75b31ecdb13fff5d0586a55dd95fcf7d23714069a7a87e3e1d3076e323c0f140e7eab4ff1b7e324b0dc451cb837d622a697c6fa1c61e492d57c300f553177b75cd0ad532795cefffd185ec922cb778d421", 0x1000}, {&(0x7f00000014c0)="54c7b1f9b7977de71a9fb236108323f3f45e3f5f03e931846418f22bde3c1cb30fd6095dd5ba47b7d4", 0x29}, {&(0x7f0000001500)="3ac8d9a00a52fa72342b9dfb039315bc51cebee8514da34726b0690c928096ef6d8fe18c165f6fc2435ab7a35aff9ca91470ec9f3d7f21d84d26316834842c", 0x3f}, {&(0x7f0000001540)="869f81bf118d8a0bd3d48c03a6a010ad9aa4c02f2973c692e725eb905ff1e0a28a15719e76b67a894e3f0d3341ef777bd2310c4eed200c7b9a26b6f2317232dd947c7eef1d7bd3019574281ef3ff", 0x4e}, {&(0x7f00000015c0)="eb7632ec005fd8a89077c630618288cc476dc834787510b9d23c837f4c40a676841e72", 0x23}], 0x7, &(0x7f0000001680)}}, {{&(0x7f00000016c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)="cbf4108857bf7d52d04dde2c847af0d27bbd7940445f89", 0x17}], 0x1, &(0x7f00000017c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}}, {{&(0x7f0000001840)=@nfc_llcp={0x27, 0x0, 0x1, 0x2, 0x9, 0x20, "cbe08a2f685ebd5b2d60b240bc6a79c6b5002cf51496c58e49f5ecc6fb2ff4f4d065fcb68c11fb1b31ce429b7f86e4770812fa6b5994b47666d7ba982e8b66", 0x1d}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000018c0)="70df8b12b66e305ba37178190001d53ca6b848771ff4cf1447c7e6c51845633dfc25b46eea6999fe1d9b2459d75bbdcb35157555a3e659cf8c833d2f19acd5320b7af3749509c307a1e0f311da046d8aee7d9e0e8d19901ca1e67a7931164a71589ae26d4756af7f99ade3e1e7481781c9c06626d00e6a0ea3689db0c3bca463f4447a086c7f95120e2b85e7d8dd2f3d9377d855b7680f3344382f9fa7606821ddd2457da336df43dc166daf932427e0e3310240780541877d0240667ceb28acfa2903a1ee6a29b4110f938151e83a6a7c664f9374d69b6f48e3c9555e05c812ce8cd14e296628fc", 0xe8}, {&(0x7f00000019c0)="1f26b86d008c2aeccd2a2b9db87b07feda2ba3e4f6b846af8dfb291ace7bbd162971d7688ed50f1d0a338fbb568c0ba5fc45e07a23c2463a0888ad7edae81c53e96cb95611d7a1e6e4985d302ce64386b5b9c93b5f564a8714cc5960e21dcb907070082350043c874161b6163fa2c797e5434c374b1f6afc8d2c08ed91b2150f996c30ec15944311155948b588272924aa1248caa04d112d2f5a49847ac776a4213010fd4bd97963ec66b45b0f6e74b47242ade3e572501a05", 0xb9}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="cb9b74659935520a1a3e269c2a2f4d5f2e38a4a3ad7ea06184d28d5632c6016ed5bc24f52b6c0c836337293b2788b67c844648110d107db3d48a4be41ade4cd010b4f0750d68ddef40095be756ac3dfa130926c53875ae05f1f9571a2cb9df42d2b2f1557a1a04fbf5bab3c609a5fde41bd3849f371bce927a97d0e990e74ba1a26b8b8ed566eabe752efd59127b91742d4f059e8798ac5728cb5ba16f2b973fd73b2b1fa0f5f784d6eeeb401d7a9e47a0bec4", 0xb3}], 0x4, &(0x7f0000001bc0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x13a}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5d}}], 0xa8}}], 0x8, 0x4008000) r8 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) dup2(r6, r8) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef691342362187a7f35557f447e7899c87d62581ef02da6162a85fc4bfcef3eff3532e1f1bcac900"/151], 0xb8) 16:30:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 16) 16:30:25 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x6, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:30:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 39) [ 1152.369686] FAULT_INJECTION: forcing a failure. [ 1152.369686] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.372200] CPU: 0 PID: 8427 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1152.373644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.375418] Call Trace: [ 1152.375980] dump_stack+0x107/0x167 [ 1152.376757] should_fail.cold+0x5/0xa [ 1152.377568] ? getname_flags.part.0+0x50/0x4f0 [ 1152.378561] should_failslab+0x5/0x20 [ 1152.379368] kmem_cache_alloc+0x5b/0x310 [ 1152.380234] ? new_sync_write+0x499/0x660 [ 1152.381128] getname_flags.part.0+0x50/0x4f0 [ 1152.382065] getname+0x8e/0xd0 [ 1152.382760] do_sys_openat2+0xf9/0x4d0 [ 1152.383590] ? build_open_flags+0x6f0/0x6f0 [ 1152.384519] ? rcu_read_lock_any_held+0x75/0xa0 [ 1152.385541] __x64_sys_openat+0x13f/0x1f0 [ 1152.386434] ? __ia32_sys_open+0x1c0/0x1c0 [ 1152.387356] do_syscall_64+0x33/0x40 [ 1152.388152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1152.389245] RIP: 0033:0x7eff8aa95a04 [ 1152.390035] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1152.393926] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1152.395553] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 [ 1152.397068] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1152.398606] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1152.400116] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1152.401631] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1152.443021] Restarting kernel threads ... done. [ 1152.445441] FAULT_INJECTION: forcing a failure. [ 1152.445441] name fail_usercopy, interval 1, probability 0, space 0, times 0 16:30:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1152.445463] CPU: 0 PID: 8418 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1152.445473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.445479] Call Trace: [ 1152.445503] dump_stack+0x107/0x167 [ 1152.445525] should_fail.cold+0x5/0xa [ 1152.445542] ? copyout.part.0+0x112/0x140 [ 1152.445564] copy_page_to_iter+0x878/0xf80 [ 1152.445598] blk_rq_unmap_user+0x552/0x750 [ 1152.445632] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1152.445675] sg_finish_rem_req+0x73/0x320 [ 1152.445700] sg_new_read+0x3d1/0x4b0 [ 1152.458829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1152.459935] ? _raw_write_unlock_irq+0x1f/0x30 [ 1152.460895] sg_ioctl_common+0x1f45/0x2570 [ 1152.461786] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1152.462887] ? do_vfs_ioctl+0x283/0x10d0 [ 1152.463739] ? sg_write+0x120/0x120 [ 1152.464499] ? generic_block_fiemap+0x60/0x60 [ 1152.465444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1152.466464] ? wait_for_completion_io+0x270/0x270 [ 1152.467486] ? selinux_file_ioctl+0xb6/0x270 [ 1152.468404] ? sg_compat_ioctl+0x120/0x120 [ 1152.469301] sg_ioctl+0x8f/0x120 [ 1152.470022] __x64_sys_ioctl+0x19a/0x210 [ 1152.470897] do_syscall_64+0x33/0x40 [ 1152.471681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1152.472765] RIP: 0033:0x7f16a9b0ab19 [ 1152.473559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1152.477401] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.479005] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1152.480508] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1152.482000] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.483505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1152.485001] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:30:25 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 17) [ 1152.562192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6203 comm=kworker/0:0 [ 1152.604574] FAULT_INJECTION: forcing a failure. [ 1152.604574] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.607070] CPU: 0 PID: 8437 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1152.608514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.610283] Call Trace: [ 1152.610845] dump_stack+0x107/0x167 [ 1152.611630] should_fail.cold+0x5/0xa [ 1152.612445] ? create_object.isra.0+0x3a/0xa20 [ 1152.613430] should_failslab+0x5/0x20 [ 1152.614251] kmem_cache_alloc+0x5b/0x310 [ 1152.615110] ? __generic_file_write_iter+0x1a4/0x5d0 [ 1152.616190] create_object.isra.0+0x3a/0xa20 [ 1152.617115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1152.618204] kmem_cache_alloc+0x159/0x310 [ 1152.619086] ? new_sync_write+0x499/0x660 [ 1152.619981] getname_flags.part.0+0x50/0x4f0 [ 1152.620919] getname+0x8e/0xd0 [ 1152.621605] do_sys_openat2+0xf9/0x4d0 [ 1152.622449] ? build_open_flags+0x6f0/0x6f0 [ 1152.623375] ? rcu_read_lock_any_held+0x75/0xa0 [ 1152.624370] __x64_sys_openat+0x13f/0x1f0 [ 1152.625250] ? __ia32_sys_open+0x1c0/0x1c0 [ 1152.626186] do_syscall_64+0x33/0x40 [ 1152.626976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1152.628061] RIP: 0033:0x7eff8aa95a04 [ 1152.628848] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1152.632791] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1152.634420] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 16:30:25 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80f08}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', 0x0}) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1152.635927] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1152.637660] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1152.639187] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1152.640698] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:30:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7d", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x8) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:30:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 40) [ 1152.731669] FAULT_INJECTION: forcing a failure. [ 1152.731669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.734238] CPU: 0 PID: 8444 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1152.735695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.737466] Call Trace: [ 1152.738038] dump_stack+0x107/0x167 [ 1152.738828] should_fail.cold+0x5/0xa [ 1152.739637] ? copyout.part.0+0x112/0x140 [ 1152.740519] copy_page_to_iter+0x878/0xf80 [ 1152.741436] blk_rq_unmap_user+0x552/0x750 [ 1152.742367] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1152.743296] sg_finish_rem_req+0x73/0x320 [ 1152.744179] sg_new_read+0x3d1/0x4b0 [ 1152.744982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1152.746100] ? _raw_write_unlock_irq+0x1f/0x30 [ 1152.747086] sg_ioctl_common+0x1f45/0x2570 [ 1152.747978] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1152.749071] ? do_vfs_ioctl+0x283/0x10d0 [ 1152.749932] ? sg_write+0x120/0x120 [ 1152.750712] ? generic_block_fiemap+0x60/0x60 [ 1152.751667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1152.752692] ? wait_for_completion_io+0x270/0x270 [ 1152.753726] ? selinux_file_ioctl+0xb6/0x270 [ 1152.754672] ? sg_compat_ioctl+0x120/0x120 [ 1152.755571] sg_ioctl+0x8f/0x120 [ 1152.756298] __x64_sys_ioctl+0x19a/0x210 [ 1152.757164] do_syscall_64+0x33/0x40 [ 1152.757957] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1152.759068] RIP: 0033:0x7f16a9b0ab19 [ 1152.759855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1152.763763] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.765374] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1152.766900] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1152.768422] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.769932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1152.771454] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:30:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7d", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1152.851134] loop6: detected capacity change from 0 to 2048 [ 1152.861392] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:30:40 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r0, 0x8000000) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r10, 0x8000000) io_uring_enter(r10, 0x4c07, 0x0, 0x0, 0x0, 0x0) readv(r10, &(0x7f0000000240)=[{&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/189, 0xbd}, {&(0x7f0000001500)=""/103, 0x67}], 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) syz_io_uring_submit(r11, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x9, 0x2, 0x0, 0x80}, 0x9f) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xfffffffa}}, './file0\x00'}) 16:30:40 executing program 7: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) r0 = syz_io_uring_setup(0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) 16:30:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:30:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 41) 16:30:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 18) 16:30:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x3, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7d", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:40 executing program 0: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0xa8, 0x7f, 0xd24, 0x8, @loopback, @remote, 0x20, 0x10, 0x2, 0x7c8d}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000b80), 0x1, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x9a, 0x40, 0x0, 0x32, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8000, 0x8000, 0xffffff01, 0x1ff}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r6], 0x38}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x2b, 0x0, 0x40, 0x1ff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x2, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x41, 0x55, 0x7f, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0xf16, 0x48}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x74, 0x0, 0xffffffff, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x14}, 0x1, 0x20, 0x804, 0x10001}}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r9, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r11], 0x38}}], 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000540)={0x594, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x84, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7cf}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xb028, 0x3, 0x2}]}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x9c, 0x40, 0xfb, 0x200}, {0x3, 0x4, 0x1, 0x3}, {0x8, 0x3f, 0x80, 0x1}, {0x400, 0xff, 0x9, 0x6}, {0x4, 0x20, 0x7, 0x80}, {0x40, 0xfb, 0x2, 0x7}, {0xffb3, 0x7, 0x6, 0x9}, {0x4, 0x9, 0x81, 0x2f}, {0x800, 0x1f, 0x4, 0x1000}, {0x34, 0x3, 0x20, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x2, 0x3, 0x81, 0x800}, {0x1, 0x2, 0x6, 0x7}, {0x6, 0x0, 0x1, 0x2}, {0x6, 0x1f, 0x81, 0x380000}, {0x101, 0x8, 0x6, 0x80000000}, {0xfffa, 0x0, 0x3f}, {0x2, 0xaa, 0x0, 0x8000}, {0x3, 0x4f, 0x80, 0x4}, {0xc271, 0x20, 0x8, 0x3}, {0x8000, 0xff, 0x0, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r3}}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r11}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000bc0)=""/77, 0x4d, 0x10000, &(0x7f0000000c40)=@isdn={0x22, 0x3e, 0x1, 0x0, 0xac}, 0x80) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1167.046909] FAULT_INJECTION: forcing a failure. [ 1167.046909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.048612] CPU: 1 PID: 8467 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1167.049579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1167.050754] Call Trace: [ 1167.051131] dump_stack+0x107/0x167 [ 1167.051645] should_fail.cold+0x5/0xa [ 1167.052189] strncpy_from_user+0x34/0x470 [ 1167.052779] getname_flags.part.0+0x95/0x4f0 [ 1167.053399] getname+0x8e/0xd0 [ 1167.053855] do_sys_openat2+0xf9/0x4d0 [ 1167.054410] ? build_open_flags+0x6f0/0x6f0 [ 1167.055026] ? rcu_read_lock_any_held+0x75/0xa0 [ 1167.055684] __x64_sys_openat+0x13f/0x1f0 [ 1167.056267] ? __ia32_sys_open+0x1c0/0x1c0 [ 1167.056876] do_syscall_64+0x33/0x40 [ 1167.057400] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1167.058119] RIP: 0033:0x7eff8aa95a04 [ 1167.058651] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1167.061231] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1167.062311] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 [ 1167.063314] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1167.064315] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1167.065317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1167.066322] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:30:40 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) [ 1167.070960] FAULT_INJECTION: forcing a failure. [ 1167.070960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.072423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 [ 1167.073781] CPU: 0 PID: 8463 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1167.077036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1167.079040] Call Trace: [ 1167.079676] dump_stack+0x107/0x167 [ 1167.080555] should_fail.cold+0x5/0xa [ 1167.081469] ? copyout.part.0+0x112/0x140 [ 1167.082477] copy_page_to_iter+0x878/0xf80 [ 1167.083511] blk_rq_unmap_user+0x552/0x750 [ 1167.084543] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1167.085586] sg_finish_rem_req+0x73/0x320 [ 1167.086595] sg_new_read+0x3d1/0x4b0 16:30:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 19) [ 1167.087492] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1167.088858] ? _raw_write_unlock_irq+0x1f/0x30 [ 1167.089930] sg_ioctl_common+0x1f45/0x2570 [ 1167.090950] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1167.092177] ? do_vfs_ioctl+0x283/0x10d0 [ 1167.093147] ? sg_write+0x120/0x120 [ 1167.094007] ? generic_block_fiemap+0x60/0x60 [ 1167.095072] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1167.096219] ? wait_for_completion_io+0x270/0x270 [ 1167.097374] ? selinux_file_ioctl+0xb6/0x270 [ 1167.098421] ? sg_compat_ioctl+0x120/0x120 [ 1167.099432] sg_ioctl+0x8f/0x120 [ 1167.100238] __x64_sys_ioctl+0x19a/0x210 [ 1167.101201] do_syscall_64+0x33/0x40 [ 1167.102089] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1167.103317] RIP: 0033:0x7f16a9b0ab19 [ 1167.104195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1167.108551] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.110096] FAULT_INJECTION: forcing a failure. [ 1167.110096] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.110365] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1167.113506] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1167.115191] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.116873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.118555] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1167.120261] CPU: 1 PID: 8479 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1167.121239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1167.122337] Call Trace: [ 1167.122685] dump_stack+0x107/0x167 [ 1167.123169] should_fail.cold+0x5/0xa [ 1167.123665] ? __alloc_file+0x21/0x320 [ 1167.124185] should_failslab+0x5/0x20 [ 1167.124681] kmem_cache_alloc+0x5b/0x310 [ 1167.125213] __alloc_file+0x21/0x320 [ 1167.125698] alloc_empty_file+0x6d/0x170 [ 1167.126234] path_openat+0xe6/0x2770 [ 1167.126717] ? __lock_acquire+0x1657/0x5b00 [ 1167.127288] ? path_lookupat+0x860/0x860 [ 1167.127822] ? perf_trace_lock+0xac/0x490 [ 1167.128361] ? SOFTIRQ_verbose+0x10/0x10 [ 1167.128901] ? find_held_lock+0x2c/0x110 [ 1167.129456] ? __lockdep_reset_lock+0x180/0x180 [ 1167.130067] do_filp_open+0x190/0x3e0 [ 1167.130567] ? may_open_dev+0xf0/0xf0 [ 1167.131079] ? alloc_fd+0x2e7/0x670 [ 1167.131569] ? lock_downgrade+0x6d0/0x6d0 [ 1167.132115] ? do_raw_spin_lock+0x121/0x260 [ 1167.132673] ? rwlock_bug.part.0+0x90/0x90 [ 1167.133227] ? _raw_spin_unlock+0x1a/0x30 [ 1167.133768] ? alloc_fd+0x2e7/0x670 [ 1167.134299] do_sys_openat2+0x171/0x4d0 [ 1167.134828] ? build_open_flags+0x6f0/0x6f0 [ 1167.135392] ? rcu_read_lock_any_held+0x75/0xa0 [ 1167.135999] __x64_sys_openat+0x13f/0x1f0 [ 1167.136532] ? __ia32_sys_open+0x1c0/0x1c0 [ 1167.137091] do_syscall_64+0x33/0x40 [ 1167.137570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1167.138237] RIP: 0033:0x7eff8aa95a04 [ 1167.138720] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1167.141095] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1167.142079] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 [ 1167.143002] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1167.143939] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1167.144872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1167.145794] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:30:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc906", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:40 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x400880d) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004c00003800000000003390780a010102ac1414bb4c1c0603000000000000000000000000fffffffde0000001000000000000000000089078"], 0x0) 16:30:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:30:40 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 20) 16:30:40 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 42) [ 1167.295300] FAULT_INJECTION: forcing a failure. [ 1167.295300] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.297787] CPU: 0 PID: 8497 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1167.299248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1167.301008] Call Trace: [ 1167.301572] dump_stack+0x107/0x167 [ 1167.302356] should_fail.cold+0x5/0xa [ 1167.303167] ? create_object.isra.0+0x3a/0xa20 [ 1167.304152] should_failslab+0x5/0x20 [ 1167.304967] kmem_cache_alloc+0x5b/0x310 [ 1167.305844] create_object.isra.0+0x3a/0xa20 [ 1167.306786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1167.307874] kmem_cache_alloc+0x159/0x310 [ 1167.308759] __alloc_file+0x21/0x320 [ 1167.309549] alloc_empty_file+0x6d/0x170 [ 1167.310425] path_openat+0xe6/0x2770 [ 1167.311205] ? __lock_acquire+0x1657/0x5b00 [ 1167.312125] ? path_lookupat+0x860/0x860 [ 1167.312962] ? perf_trace_lock+0xac/0x490 [ 1167.313825] ? SOFTIRQ_verbose+0x10/0x10 [ 1167.314666] ? find_held_lock+0x2c/0x110 [ 1167.315516] ? __lockdep_reset_lock+0x180/0x180 [ 1167.316481] do_filp_open+0x190/0x3e0 [ 1167.317275] ? may_open_dev+0xf0/0xf0 [ 1167.318078] ? alloc_fd+0x2e7/0x670 [ 1167.318849] ? lock_downgrade+0x6d0/0x6d0 [ 1167.319719] ? do_raw_spin_lock+0x121/0x260 [ 1167.320605] ? rwlock_bug.part.0+0x90/0x90 [ 1167.321550] ? _raw_spin_unlock+0x1a/0x30 [ 1167.322539] ? alloc_fd+0x2e7/0x670 [ 1167.323414] do_sys_openat2+0x171/0x4d0 [ 1167.324349] ? build_open_flags+0x6f0/0x6f0 [ 1167.325382] ? rcu_read_lock_any_held+0x75/0xa0 [ 1167.326494] __x64_sys_openat+0x13f/0x1f0 [ 1167.327475] ? __ia32_sys_open+0x1c0/0x1c0 [ 1167.328488] do_syscall_64+0x33/0x40 [ 1167.329369] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1167.330580] RIP: 0033:0x7eff8aa95a04 [ 1167.331450] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1167.335781] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1167.337559] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 [ 1167.339230] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1167.340887] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1167.342550] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1167.344202] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:30:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc906", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:30:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x20000000000000, 0x1, 0x7, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1167.382368] loop6: detected capacity change from 0 to 2048 [ 1167.387485] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1167.408827] FAULT_INJECTION: forcing a failure. [ 1167.408827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.410272] CPU: 1 PID: 8503 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1167.411059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1167.412007] Call Trace: [ 1167.412315] dump_stack+0x107/0x167 [ 1167.412732] should_fail.cold+0x5/0xa [ 1167.413165] ? copyout.part.0+0x112/0x140 [ 1167.413644] copy_page_to_iter+0x878/0xf80 [ 1167.414134] blk_rq_unmap_user+0x552/0x750 [ 1167.414683] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1167.415179] sg_finish_rem_req+0x73/0x320 [ 1167.415650] sg_new_read+0x3d1/0x4b0 [ 1167.416075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1167.416670] ? _raw_write_unlock_irq+0x1f/0x30 [ 1167.417194] sg_ioctl_common+0x1f45/0x2570 [ 1167.417678] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1167.418280] ? do_vfs_ioctl+0x283/0x10d0 [ 1167.418738] ? sg_write+0x120/0x120 [ 1167.419154] ? generic_block_fiemap+0x60/0x60 [ 1167.419664] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1167.420213] ? wait_for_completion_io+0x270/0x270 [ 1167.420771] ? selinux_file_ioctl+0xb6/0x270 [ 1167.421268] ? sg_compat_ioctl+0x120/0x120 [ 1167.421748] sg_ioctl+0x8f/0x120 [ 1167.422136] __x64_sys_ioctl+0x19a/0x210 [ 1167.422606] do_syscall_64+0x33/0x40 [ 1167.423027] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1167.423610] RIP: 0033:0x7f16a9b0ab19 [ 1167.424030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1167.426107] RSP: 002b:00007f16a705f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.426976] RAX: ffffffffffffffda RBX: 00007f16a9c1e020 RCX: 00007f16a9b0ab19 [ 1167.427785] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1167.428594] RBP: 00007f16a705f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1167.429409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1167.430220] R13: 00007fff3b04270f R14: 00007f16a705f300 R15: 0000000000022000 16:30:40 executing program 3: r0 = syz_io_uring_setup(0x75ca, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r6, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:31:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 21) 16:31:00 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x0) [ 1186.977012] 9pnet: Insufficient options for proto=fd 16:31:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) 16:31:00 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r8, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000040)=""/29, 0x1d}], 0x2, &(0x7f0000000440)=""/4096, 0x1000}, 0x0, 0x40000000}, 0x54) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r12, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r12, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd=r12, 0xa7, &(0x7f0000001440)="9476450b53e2018b743617d577c0c7e39db7f6a559e4cac118afbd0cb6da39930491f11d58affd679032548c42408f30d46f7411446e708105a037e3e7519bc3dc442c1fe1ae38e07fbd9a80e8460ed4fe662a568b5538d6b60419512060245630b4c2fffd4c083f9cca439927a6403c1780b0995073f72d653d8e8218", 0x7d, 0x10, 0x0, {0x0, r13}}, 0x2) 16:31:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3, 0x1, 0xf9, 0x80, 0x0, 0x2, 0x40, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x4da, 0x9}, 0x58410, 0x7, 0xffffff81, 0x0, 0x9, 0x101, 0x8, 0x0, 0x8, 0x0, 0xa}, 0x0, 0x5, r0, 0x2) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:31:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 43) 16:31:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x5, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc906", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:31:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) [ 1187.004892] FAULT_INJECTION: forcing a failure. [ 1187.004892] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.007530] CPU: 1 PID: 8534 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1187.009126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.011070] Call Trace: [ 1187.011098] FAULT_INJECTION: forcing a failure. [ 1187.011098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.011695] dump_stack+0x107/0x167 [ 1187.011722] should_fail.cold+0x5/0xa [ 1187.015270] ? security_file_alloc+0x34/0x170 [ 1187.016317] should_failslab+0x5/0x20 [ 1187.017202] kmem_cache_alloc+0x5b/0x310 [ 1187.018154] security_file_alloc+0x34/0x170 [ 1187.019160] __alloc_file+0xb7/0x320 [ 1187.020035] alloc_empty_file+0x6d/0x170 [ 1187.020973] path_openat+0xe6/0x2770 [ 1187.021825] ? __lock_acquire+0x1657/0x5b00 [ 1187.022831] ? path_lookupat+0x860/0x860 [ 1187.023756] ? perf_trace_lock+0xac/0x490 [ 1187.024698] ? SOFTIRQ_verbose+0x10/0x10 [ 1187.025622] ? find_held_lock+0x2c/0x110 [ 1187.026562] ? __lockdep_reset_lock+0x180/0x180 [ 1187.027637] do_filp_open+0x190/0x3e0 [ 1187.028504] ? may_open_dev+0xf0/0xf0 [ 1187.029381] ? alloc_fd+0x2e7/0x670 [ 1187.030216] ? lock_downgrade+0x6d0/0x6d0 [ 1187.031194] ? do_raw_spin_lock+0x121/0x260 [ 1187.032188] ? rwlock_bug.part.0+0x90/0x90 [ 1187.033164] ? _raw_spin_unlock+0x1a/0x30 [ 1187.034108] ? alloc_fd+0x2e7/0x670 [ 1187.034963] do_sys_openat2+0x171/0x4d0 [ 1187.035871] ? build_open_flags+0x6f0/0x6f0 [ 1187.036878] ? rcu_read_lock_any_held+0x75/0xa0 [ 1187.037941] __x64_sys_openat+0x13f/0x1f0 [ 1187.038912] ? __ia32_sys_open+0x1c0/0x1c0 [ 1187.039891] do_syscall_64+0x33/0x40 [ 1187.040743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.041915] RIP: 0033:0x7eff8aa95a04 [ 1187.042776] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1187.046979] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1187.048721] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 [ 1187.050355] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1187.051979] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1187.053602] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1187.055229] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1187.056880] CPU: 0 PID: 8531 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1187.058026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.059389] Call Trace: [ 1187.059824] dump_stack+0x107/0x167 [ 1187.060418] should_fail.cold+0x5/0xa [ 1187.061042] ? copyout.part.0+0x112/0x140 [ 1187.061706] copy_page_to_iter+0x878/0xf80 [ 1187.062405] blk_rq_unmap_user+0x552/0x750 [ 1187.063101] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1187.063803] sg_finish_rem_req+0x73/0x320 [ 1187.064481] sg_new_read+0x3d1/0x4b0 [ 1187.065082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1187.065923] ? _raw_write_unlock_irq+0x1f/0x30 [ 1187.066670] sg_ioctl_common+0x1f45/0x2570 [ 1187.067350] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1187.068187] ? do_vfs_ioctl+0x283/0x10d0 [ 1187.068832] ? sg_write+0x120/0x120 [ 1187.069421] ? generic_block_fiemap+0x60/0x60 [ 1187.070138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1187.070933] ? wait_for_completion_io+0x270/0x270 [ 1187.071724] ? selinux_file_ioctl+0xb6/0x270 [ 1187.072425] ? sg_compat_ioctl+0x120/0x120 [ 1187.073111] sg_ioctl+0x8f/0x120 [ 1187.073655] __x64_sys_ioctl+0x19a/0x210 [ 1187.074308] do_syscall_64+0x33/0x40 [ 1187.074922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.075746] RIP: 0033:0x7f16a9b0ab19 [ 1187.076342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.079297] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.080539] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1187.081679] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1187.082831] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.083978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.085120] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:31:00 executing program 7: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000002d7642874c6dfbce3f00", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf256b0000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a001a00ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6e, 0x1, 0x40, 0x7f, 0x0, 0xfffffffffffffffd, 0x8000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x80000000}, 0x100, 0x7, 0xfffffffe, 0x9, 0x3, 0x8, 0x3, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=""/187) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) lseek(r1, 0x0, 0x0) statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000500)=""/83) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r5, 0x0, 0x100000001) 16:31:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x4010, r1, 0x8000000) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x90, 0x4d, 0x80, 0x7, 0x0, 0x9, 0x4a800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, @perf_config_ext={0x96e, 0x7}, 0x220, 0x7, 0x6, 0x6, 0x401, 0x7, 0x5, 0x0, 0x8, 0x0, 0x101}, 0x0, 0x8, 0xffffffffffffffff, 0x8) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') [ 1187.173358] 9pnet: Insufficient options for proto=fd 16:31:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) 16:31:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc1, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x7f, 0x81, 0x5, 0x0, 0x825, 0xd20, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000100), 0x5}, 0x81, 0x6d7c, 0xff, 0x2, 0xb9, 0x4, 0x5, 0x0, 0x7f, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r1, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') readahead(r0, 0x7, 0x3) [ 1187.238347] FAULT_INJECTION: forcing a failure. 16:31:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) [ 1187.238347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.240218] CPU: 0 PID: 8551 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1187.241149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.242259] Call Trace: [ 1187.242628] dump_stack+0x107/0x167 [ 1187.243119] should_fail.cold+0x5/0xa [ 1187.243639] _copy_from_user+0x2e/0x1b0 [ 1187.244175] get_sg_io_hdr+0x5c7/0x830 [ 1187.244700] ? sg_add_request+0x259/0x320 [ 1187.245266] ? lock_downgrade+0x6d0/0x6d0 [ 1187.245831] ? get_order+0x20/0x20 [ 1187.246322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1187.247034] ? _raw_write_unlock_irqrestore+0x38/0x3a [ 1187.247727] ? trace_hardirqs_on+0x5b/0x180 [ 1187.248310] ? sg_add_request+0x25e/0x320 [ 1187.248874] sg_new_write.isra.0+0x141/0x770 [ 1187.249469] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 1187.250223] ? _cond_resched+0x10/0x30 [ 1187.250757] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 1187.251696] ? scsi_check_sense+0x10f0/0x10f0 [ 1187.252302] ? perf_trace_lock+0xac/0x490 [ 1187.252863] ? SOFTIRQ_verbose+0x10/0x10 [ 1187.253425] sg_ioctl_common+0x828/0x2570 [ 1187.253988] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1187.254695] ? do_vfs_ioctl+0x283/0x10d0 [ 1187.255237] ? sg_write+0x120/0x120 [ 1187.255724] ? generic_block_fiemap+0x60/0x60 [ 1187.256323] ? lock_downgrade+0x6d0/0x6d0 [ 1187.256881] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1187.257532] ? wait_for_completion_io+0x270/0x270 [ 1187.258190] ? selinux_file_ioctl+0xb6/0x270 [ 1187.258789] ? sg_compat_ioctl+0x120/0x120 [ 1187.259355] sg_ioctl+0x8f/0x120 [ 1187.259813] __x64_sys_ioctl+0x19a/0x210 [ 1187.260365] do_syscall_64+0x33/0x40 [ 1187.260865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.261552] RIP: 0033:0x7f4a211cbb19 [ 1187.262050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.264497] RSP: 002b:00007f4a1e741188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.265513] RAX: ffffffffffffffda RBX: 00007f4a212def60 RCX: 00007f4a211cbb19 [ 1187.266472] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1187.267434] RBP: 00007f4a1e7411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.268388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.269334] R13: 00007ffe3737a34f R14: 00007f4a1e741300 R15: 0000000000022000 16:31:00 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syncfs(r4) [ 1187.371519] 9pnet: Insufficient options for proto=fd 16:31:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 22) 16:31:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x7, 0x77, 0x3f, 0x0, 0x0, 0x8000, 0x10141, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x7}, 0x10, 0x8, 0x40, 0x9, 0xfffffffffffffff7, 0xd7a4, 0x800, 0x0, 0x298, 0x0, 0x2}, 0x0, 0xa, r2, 0x1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="300300001d0000042abd7000fddbdf2516000000ca008080a069952383d6b312658f9d16d821e918333f0769b8aeb1e63a089238422e572651fbafce86939797b2a73afd759f7cd7864faeb0a0530d2ac442b2694ca0f6fce984ce25a5b1bda7a5389908923b1d91c8bd270c452262997c700183c59a1f873fed747a2c511da5dc362be9de09733bc56527433ce2621f7766277bcdf2a3d4d7b1662234bfc2bd6cffd9fa061e0c66229f05724aecf8a80579105264d20b38365c62ee4c5d0bdb5bf79e831abb91f7b71cfd3ce8934171c3a10c009400f7ffffffffffffff00002502028008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x8000}, 0xc004) lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@known='user.incfs.metadata\x00', &(0x7f0000000580)='}\'#!\x00', 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fallocate(r3, 0x80, 0xaa2, 0x8) 16:31:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) [ 1187.440518] FAULT_INJECTION: forcing a failure. [ 1187.440518] name failslab, interval 1, probability 0, space 0, times 0 [ 1187.441984] CPU: 0 PID: 8568 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1187.442860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.443906] Call Trace: [ 1187.444245] dump_stack+0x107/0x167 [ 1187.444703] should_fail.cold+0x5/0xa [ 1187.445193] ? security_file_alloc+0x34/0x170 [ 1187.445756] should_failslab+0x5/0x20 [ 1187.446241] kmem_cache_alloc+0x5b/0x310 [ 1187.446761] security_file_alloc+0x34/0x170 [ 1187.447302] __alloc_file+0xb7/0x320 [ 1187.447769] alloc_empty_file+0x6d/0x170 [ 1187.448285] path_openat+0xe6/0x2770 [ 1187.448749] ? __lock_acquire+0x1657/0x5b00 [ 1187.449292] ? path_lookupat+0x860/0x860 [ 1187.449798] ? perf_trace_lock+0xac/0x490 [ 1187.450315] ? SOFTIRQ_verbose+0x10/0x10 [ 1187.450831] ? find_held_lock+0x2c/0x110 [ 1187.451345] ? __lockdep_reset_lock+0x180/0x180 [ 1187.451927] do_filp_open+0x190/0x3e0 [ 1187.452405] ? may_open_dev+0xf0/0xf0 [ 1187.452891] ? alloc_fd+0x2e7/0x670 [ 1187.453347] ? lock_downgrade+0x6d0/0x6d0 [ 1187.453860] ? do_raw_spin_lock+0x121/0x260 [ 1187.454414] ? rwlock_bug.part.0+0x90/0x90 [ 1187.454961] ? _raw_spin_unlock+0x1a/0x30 [ 1187.455480] ? alloc_fd+0x2e7/0x670 [ 1187.455946] do_sys_openat2+0x171/0x4d0 [ 1187.456444] ? build_open_flags+0x6f0/0x6f0 [ 1187.456989] ? rcu_read_lock_any_held+0x75/0xa0 [ 1187.457577] __x64_sys_openat+0x13f/0x1f0 [ 1187.458095] ? __ia32_sys_open+0x1c0/0x1c0 [ 1187.458655] do_syscall_64+0x33/0x40 [ 1187.459133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.459770] RIP: 0033:0x7eff8aa95a04 [ 1187.460245] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1187.462563] RSP: 002b:00007eff88057ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1187.463517] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aa95a04 [ 1187.464410] RDX: 0000000000000002 RSI: 00007eff88058000 RDI: 00000000ffffff9c [ 1187.464460] FAULT_INJECTION: forcing a failure. [ 1187.464460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.465321] RBP: 00007eff88058000 R08: 0000000000000000 R09: ffffffffffffffff [ 1187.465330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1187.465337] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1187.473648] CPU: 1 PID: 8569 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1187.475214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.477111] Call Trace: [ 1187.477712] dump_stack+0x107/0x167 [ 1187.478555] should_fail.cold+0x5/0xa [ 1187.479432] _copy_from_user+0x2e/0x1b0 [ 1187.480342] sg_new_write.isra.0+0x3ca/0x770 [ 1187.481340] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 1187.482588] ? lock_downgrade+0x6d0/0x6d0 [ 1187.483550] ? _cond_resched+0x10/0x30 [ 1187.484431] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 1187.485740] ? scsi_check_sense+0x10f0/0x10f0 [ 1187.486774] ? perf_trace_lock+0xac/0x490 [ 1187.487719] ? SOFTIRQ_verbose+0x10/0x10 [ 1187.488671] sg_ioctl_common+0x828/0x2570 [ 1187.489616] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1187.490788] ? do_vfs_ioctl+0x283/0x10d0 [ 1187.491702] ? sg_write+0x120/0x120 [ 1187.492557] ? generic_block_fiemap+0x60/0x60 [ 1187.493609] ? lock_downgrade+0x6d0/0x6d0 [ 1187.494592] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1187.495729] ? wait_for_completion_io+0x270/0x270 [ 1187.496873] ? selinux_file_ioctl+0xb6/0x270 [ 1187.497905] ? sg_compat_ioctl+0x120/0x120 [ 1187.498907] sg_ioctl+0x8f/0x120 [ 1187.499710] __x64_sys_ioctl+0x19a/0x210 [ 1187.500667] do_syscall_64+0x33/0x40 [ 1187.501543] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.502754] RIP: 0033:0x7f4a211cbb19 [ 1187.503628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.507937] RSP: 002b:00007f4a1e741188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.509714] RAX: ffffffffffffffda RBX: 00007f4a212def60 RCX: 00007f4a211cbb19 [ 1187.511381] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1187.513041] RBP: 00007f4a1e7411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.514705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.516369] R13: 00007ffe3737a34f R14: 00007f4a1e741300 R15: 0000000000022000 16:31:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 44) 16:31:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x2, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:31:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000140)='./file0\x00', 0x24) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) setfsuid(r4) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x4, 0x1f, 0x1, 0x4, 0x0, 0x1, 0x80, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x80, 0x50, 0x368, 0x2, 0x4, 0xfffffffc, 0x7, 0x0, 0xb15d, 0x0, 0x3}, r5, 0xffffffffffffffff, r3, 0x2) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setfsuid(r6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000800)="2e140a9b3ecf1bf29a267b87574fb00e15b8c8922cfd508ac697e4c165fd20e4ad2711a24e9dc7949ae675fce2a13e05a752de2c2c1d4b242797a0d15977799ba703ed327a5eba6907d2ed7edbc41c05c6b456d17469f138dead5fd508145d78f74483578a15a159f549ee532a56be96cbdc27bf1017b95bd41fc43688e03c6ccaa93855a8d222ada263ff646137847fb51bd194d6f0f00811", 0x99}, {&(0x7f0000000340)="f3fd008359c2c8d36032abaef63546b081aadc0b7618af23276484f45f1a7f95f57eb1850ecfeae7620e43d713094751ba6a282e457e7945847a5cf6335201d62650490286f52713", 0x48}, {&(0x7f00000008c0)="8b4e658a5109865e4b94bf974234a3923df3eaf88a4d60e5e7d0cd9e5ea08ba919930c35b90bbe2b2747db22d139da4c997195e15f1d9d717c1ea0310843866f4168c0c5cc1418beb3822573f63fc7b00efcbcd3cae90574ce0e17d75f03e102cd973beee391eddef614c0454d5275ca346cea7b736da58bcfee725b20fd01a0c6b0291c0fbd257775814f49f82ac4728a55cb0a03a35b08ab31841067946e77096acab4c44cfd74b10a3e7d2a0bdfafc4d147e0c04a8fc9d30f8f37eccaf39ce536c427e97ac265", 0xc8}, {&(0x7f00000009c0)="db65803ab49e4afea19309528f50f89c9d264e2efd93ce42faa5eafd9b7fc666e07a919447e58899bdad3952c06ce3e232c7ab11bc60ed0c2e98be2566f39e39695024947d31dae287bc7a3920a041abaa13ffbe8c8c57fd82fba103ab4946eabfc47261bcf47659e6cab9db3326b8d44ad0ad6321944176cbe5722bf9110cd761b7d5ad593f", 0x86}], 0x4, 0x0, 0x0, 0x28004040}, 0x1) r7 = openat$incfs(r1, &(0x7f0000000440)='.log\x00', 0x593280, 0x4) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000680)={0x0, 0xfffffffffffffffb, 0x4, 0x29, @buffer={0x0, 0x66, &(0x7f0000000480)=""/102}, &(0x7f0000000500)="f7d8db96", &(0x7f0000000540), 0x7, 0x10, 0xffffffffffffffff, &(0x7f0000000640)}) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3f, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="a3074972e2cd7ebd32909a9ee1e8d4ffc2b191c3c5c03b2c32d022482f297b5d1ab8211e9dcb311bdd753b0f5dfcf8a61a74f5dac58c2c9697c1201592f96307e520edd3678144a2", 0x48, 0xfffffffffffffff8}], 0x29cc23adb15ca233, &(0x7f0000000700)={[{@overriderock}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@check_strict}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@map_normal}], [{@euid_lt={'euid<', r4}}, {@dont_hash}, {@uid_lt={'uid<', r6}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/sg#\x00'}}, {@subj_type}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r4, 0xffffffffffffffff}}, './file0\x00'}) 16:31:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:31:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1187.613811] FAULT_INJECTION: forcing a failure. [ 1187.613811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.616620] CPU: 1 PID: 8581 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1187.618204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.620131] Call Trace: [ 1187.620748] dump_stack+0x107/0x167 [ 1187.621596] should_fail.cold+0x5/0xa [ 1187.622484] ? copyout.part.0+0x112/0x140 [ 1187.623448] copy_page_to_iter+0x878/0xf80 [ 1187.624444] blk_rq_unmap_user+0x552/0x750 [ 1187.625440] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1187.626456] sg_finish_rem_req+0x73/0x320 [ 1187.627424] sg_new_read+0x3d1/0x4b0 [ 1187.628290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1187.629503] ? _raw_write_unlock_irq+0x1f/0x30 [ 1187.630575] sg_ioctl_common+0x1f45/0x2570 [ 1187.631559] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1187.632755] ? do_vfs_ioctl+0x283/0x10d0 [ 1187.633695] ? sg_write+0x120/0x120 [ 1187.634544] ? generic_block_fiemap+0x60/0x60 [ 1187.635583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1187.636701] ? wait_for_completion_io+0x270/0x270 [ 1187.637832] ? selinux_file_ioctl+0xb6/0x270 [ 1187.638859] ? sg_compat_ioctl+0x120/0x120 [ 1187.639839] sg_ioctl+0x8f/0x120 [ 1187.640632] __x64_sys_ioctl+0x19a/0x210 [ 1187.641579] do_syscall_64+0x33/0x40 [ 1187.642450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1187.643636] RIP: 0033:0x7f16a9b0ab19 [ 1187.644499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.648771] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.650546] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1187.652204] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1187.653855] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.655517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.657169] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:31:17 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:31:17 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 23) 16:31:17 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x4c07, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40, 0x84) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000340)=""/130, 0x82}], 0x3, &(0x7f0000000400)=""/222, 0xde}, 0x0) [ 1204.674213] FAULT_INJECTION: forcing a failure. [ 1204.674213] name failslab, interval 1, probability 0, space 0, times 0 16:31:17 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1204.677203] CPU: 0 PID: 8593 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1204.678657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.680388] Call Trace: [ 1204.680953] dump_stack+0x107/0x167 [ 1204.681721] should_fail.cold+0x5/0xa [ 1204.682526] ? __kthread_create_on_node+0xd1/0x400 [ 1204.683571] should_failslab+0x5/0x20 [ 1204.684371] kmem_cache_alloc_trace+0x55/0x320 [ 1204.685340] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1204.686340] __kthread_create_on_node+0xd1/0x400 [ 1204.687346] ? __kthread_parkme+0x1d0/0x1d0 [ 1204.688261] ? __mutex_lock+0x4fe/0x10b0 [ 1204.689113] ? loop_configure+0xc8a/0x1410 [ 1204.689998] ? do_raw_spin_unlock+0x4f/0x220 [ 1204.690931] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1204.691927] kthread_create_on_node+0xbb/0x100 [ 1204.692961] ? __kthread_create_on_node+0x400/0x400 [ 1204.694025] ? lockdep_init_map_type+0x2c7/0x780 [ 1204.695033] ? lockdep_init_map_type+0x2c7/0x780 [ 1204.696043] loop_configure+0x3e7/0x1410 [ 1204.696923] lo_ioctl+0xa57/0x16b0 [ 1204.697670] ? avc_has_extended_perms+0x7f1/0xf40 [ 1204.698691] ? loop_set_status_old+0x250/0x250 [ 1204.699655] ? avc_ss_reset+0x180/0x180 [ 1204.700493] ? find_held_lock+0x2c/0x110 [ 1204.701361] ? __lock_acquire+0xbb1/0x5b00 [ 1204.702310] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1204.703419] ? generic_block_fiemap+0x60/0x60 [ 1204.704353] ? lock_downgrade+0x6d0/0x6d0 [ 1204.705220] ? build_open_flags+0x6f0/0x6f0 [ 1204.706128] ? loop_set_status_old+0x250/0x250 [ 1204.707099] blkdev_ioctl+0x291/0x710 [ 1204.707896] ? blkdev_common_ioctl+0x1930/0x1930 [ 1204.708892] ? selinux_file_ioctl+0xb6/0x270 [ 1204.709818] block_ioctl+0xf9/0x140 [ 1204.710589] ? blkdev_read_iter+0x1c0/0x1c0 [ 1204.711502] __x64_sys_ioctl+0x19a/0x210 [ 1204.712364] do_syscall_64+0x33/0x40 [ 1204.713150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.714224] RIP: 0033:0x7eff8aae28d7 [ 1204.715013] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.718884] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.720482] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1204.721976] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1204.723481] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1204.724978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1204.726482] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:31:17 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 16:31:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') faccessat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x41, 0x1100) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) fspick(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/215, 0xd7) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x9, 0x200, 0x0, 0x9, 0x4, 0x1}, 0x9) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000340)={0x0, 0xfacc, 0x1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x80) io_uring_enter(r2, 0x4c07, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x300000c, 0x8010, r2, 0x0) 16:31:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 45) 16:31:17 executing program 7: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000002d7642874c6dfbce3f00", @ANYRES16=0x0, @ANYBLOB="000826bd7000fddbdf256b0000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a001a00ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6e, 0x1, 0x40, 0x7f, 0x0, 0xfffffffffffffffd, 0x8000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x80000000}, 0x100, 0x7, 0xfffffffe, 0x9, 0x3, 0x8, 0x3, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x82}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) statfs(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)=""/187) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x3) lseek(r1, 0x0, 0x0) statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000500)=""/83) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) sendfile(r1, r5, 0x0, 0x100000001) 16:31:17 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1204.769255] FAULT_INJECTION: forcing a failure. [ 1204.769255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.769318] FAULT_INJECTION: forcing a failure. [ 1204.769318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1204.771899] CPU: 0 PID: 8605 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1204.771909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.771916] Call Trace: [ 1204.771940] dump_stack+0x107/0x167 [ 1204.771963] should_fail.cold+0x5/0xa [ 1204.771988] ? copyout.part.0+0x112/0x140 [ 1204.780639] copy_page_to_iter+0x878/0xf80 [ 1204.781544] blk_rq_unmap_user+0x552/0x750 [ 1204.782450] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1204.783369] sg_finish_rem_req+0x73/0x320 [ 1204.784243] sg_new_read+0x3d1/0x4b0 [ 1204.785032] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.786134] ? _raw_write_unlock_irq+0x1f/0x30 [ 1204.787109] sg_ioctl_common+0x1f45/0x2570 [ 1204.788003] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1204.789086] ? do_vfs_ioctl+0x283/0x10d0 [ 1204.789935] ? sg_write+0x120/0x120 [ 1204.790705] ? generic_block_fiemap+0x60/0x60 [ 1204.791650] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1204.792663] ? wait_for_completion_io+0x270/0x270 [ 1204.793684] ? selinux_file_ioctl+0xb6/0x270 [ 1204.794617] ? sg_compat_ioctl+0x120/0x120 [ 1204.795505] sg_ioctl+0x8f/0x120 [ 1204.796220] __x64_sys_ioctl+0x19a/0x210 [ 1204.797075] do_syscall_64+0x33/0x40 [ 1204.797866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.798950] RIP: 0033:0x7f16a9b0ab19 [ 1204.799731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.803591] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.805187] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1204.806694] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1204.808189] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.809684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1204.811186] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1204.812714] CPU: 1 PID: 8603 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1204.814257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.816112] Call Trace: [ 1204.816702] dump_stack+0x107/0x167 [ 1204.817522] should_fail.cold+0x5/0xa [ 1204.818379] __alloc_pages_nodemask+0x182/0x600 [ 1204.819438] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1204.820770] ? perf_trace_lock+0xac/0x490 [ 1204.821702] ? __lockdep_reset_lock+0x180/0x180 [ 1204.822751] ? recalibrate_cpu_khz+0x10/0x10 [ 1204.823733] ? ktime_get+0x158/0x1f0 [ 1204.824576] alloc_pages_current+0x187/0x280 [ 1204.825571] kmalloc_order+0x35/0x160 [ 1204.826426] kmalloc_order_trace+0x14/0xa0 [ 1204.827392] iovec_from_user+0x36c/0x400 [ 1204.828308] __import_iovec+0x67/0x590 [ 1204.829174] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1204.830249] ? wait_for_completion_io+0x270/0x270 [ 1204.831336] import_iovec+0x83/0xb0 [ 1204.832162] sg_common_write.constprop.0+0xaf4/0x1a30 [ 1204.833329] ? sg_build_indirect.isra.0+0x710/0x710 [ 1204.834438] ? fault_around_bytes_set+0x83/0xa0 [ 1204.835494] ? lock_downgrade+0x6d0/0x6d0 [ 1204.836422] ? cap_capable+0x1cd/0x230 [ 1204.837301] ? security_capable+0x95/0xc0 [ 1204.838580] ? capable+0xe1/0x100 [ 1204.839373] sg_new_write.isra.0+0x529/0x770 [ 1204.840371] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 1204.841581] ? lock_downgrade+0x6d0/0x6d0 [ 1204.842530] ? _cond_resched+0x10/0x30 [ 1204.843412] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 1204.844697] ? scsi_check_sense+0x10f0/0x10f0 [ 1204.845707] ? perf_trace_lock+0xac/0x490 [ 1204.846640] ? SOFTIRQ_verbose+0x10/0x10 [ 1204.847628] sg_ioctl_common+0x828/0x2570 [ 1204.848725] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1204.850012] ? do_vfs_ioctl+0x283/0x10d0 [ 1204.851123] ? sg_write+0x120/0x120 [ 1204.851941] ? generic_block_fiemap+0x60/0x60 [ 1204.853077] ? lock_downgrade+0x6d0/0x6d0 [ 1204.854128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1204.855482] ? wait_for_completion_io+0x270/0x270 [ 1204.856630] ? selinux_file_ioctl+0xb6/0x270 [ 1204.857697] ? sg_compat_ioctl+0x120/0x120 [ 1204.858668] sg_ioctl+0x8f/0x120 [ 1204.859590] __x64_sys_ioctl+0x19a/0x210 [ 1204.860668] do_syscall_64+0x33/0x40 [ 1204.861503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.862812] RIP: 0033:0x7f4a211cbb19 [ 1204.863655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1204.868278] RSP: 002b:00007f4a1e741188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1204.870115] RAX: ffffffffffffffda RBX: 00007f4a212def60 RCX: 00007f4a211cbb19 [ 1204.871732] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1204.873687] RBP: 00007f4a1e7411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1204.875530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.877381] R13: 00007ffe3737a34f R14: 00007f4a1e741300 R15: 0000000000022000 16:31:18 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x10000) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {0x120}, 0x1}, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1221.193320] FAULT_INJECTION: forcing a failure. [ 1221.193320] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.195791] CPU: 1 PID: 8626 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1221.197239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1221.199008] Call Trace: [ 1221.199576] dump_stack+0x107/0x167 [ 1221.200340] should_fail.cold+0x5/0xa [ 1221.201540] ? create_object.isra.0+0x3a/0xa20 [ 1221.202705] should_failslab+0x5/0x20 [ 1221.203506] kmem_cache_alloc+0x5b/0x310 [ 1221.204367] create_object.isra.0+0x3a/0xa20 [ 1221.205293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1221.206368] kmem_cache_alloc_trace+0x151/0x320 [ 1221.207371] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1221.208375] __kthread_create_on_node+0xd1/0x400 [ 1221.209379] ? __kthread_parkme+0x1d0/0x1d0 [ 1221.210305] ? __mutex_lock+0x4fe/0x10b0 [ 1221.211182] ? loop_configure+0xc8a/0x1410 [ 1221.212081] ? do_raw_spin_unlock+0x4f/0x220 [ 1221.213015] ? loop_info64_to_compat+0x5f0/0x5f0 [ 1221.214019] kthread_create_on_node+0xbb/0x100 [ 1221.215101] ? __kthread_create_on_node+0x400/0x400 [ 1221.216326] ? lockdep_init_map_type+0x2c7/0x780 [ 1221.217595] ? lockdep_init_map_type+0x2c7/0x780 [ 1221.218609] loop_configure+0x3e7/0x1410 [ 1221.219499] lo_ioctl+0xa57/0x16b0 [ 1221.220257] ? avc_has_extended_perms+0x7f1/0xf40 [ 1221.221284] ? loop_set_status_old+0x250/0x250 [ 1221.222257] ? avc_ss_reset+0x180/0x180 [ 1221.223109] ? find_held_lock+0x2c/0x110 [ 1221.223979] ? __lock_acquire+0xbb1/0x5b00 [ 1221.224927] ? selinux_bprm_creds_for_exec+0xb60/0xb60 16:31:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000300)=@routing={0x2b, 0xe, 0x1, 0xfd, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2]}, 0x78) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x6, 0x4, 0x80, 0x0, 0x0, 0x8d, 0x640a3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x8032, 0x8d84, 0xffffffff, 0x9, 0x6, 0x401, 0x2, 0x0, 0x7, 0x0, 0xffff}, r3, 0x0, r2, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3, 0x0, 0x4, 0x21, 0x0, 0x8000, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000380), 0x1}, 0x4a2, 0x4, 0xfb, 0x3, 0xf, 0xf0d2, 0x1, 0x0, 0x800, 0x0, 0x3}, 0x0, 0x0, r4, 0xb) 16:31:34 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:31:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 16:31:34 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 46) 16:31:34 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 24) 16:31:34 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:34 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) io_uring_enter(r4, 0x6e99, 0xf8fd, 0x2, &(0x7f0000000140)={[0x1]}, 0x8) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) io_uring_enter(r6, 0x49dd, 0x7f9a, 0x3, &(0x7f0000000200)={[0x4]}, 0x8) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r8 = syz_io_uring_complete(r3) ioctl$SG_IO(r8, 0x2285, &(0x7f0000002a00)={0x53, 0xffffffffffffffff, 0x6d, 0x5, @scatter={0x7, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000001640)=""/118, 0x76}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/216, 0xd8}]}, &(0x7f0000002940)="08d3970fc10d7ce59c05f1b3a4411a51a08b5a1d4e849926ed401a1e8b19818d9c8727a8946574350eb87a1720fdf657fa610c1e9bddeb73882301dc6338db88f5cbd7e855033718a29b6a138c53cfbdd6c3042bd7d4bf54d2b764790c284cd8b92327d3f0d01f405cda5250a8", &(0x7f0000000540)=""/15, 0x2dfd6a58, 0x10032, 0x0, &(0x7f00000029c0)}) syz_io_uring_submit(r1, r2, &(0x7f0000002ac0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x2, 0x0, &(0x7f0000002a80)="770b90d34d86837dfbace65aa46848b1d4e7edf1e1641c9db186cc1919751f17", 0x9}, 0x101) r9 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r9, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r9, &(0x7f0000000240)='./file0\x00', 0x107100, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:31:34 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x8301036f33c7775a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0xc0010, r0, 0x10000000) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/22, 0x16}, {&(0x7f0000000440)=""/30, 0x1e}], 0x3, &(0x7f0000004640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200f6ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000e726846aa1000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000600)=""/190, 0xbe}, {&(0x7f0000000d00)=""/126, 0x7e}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/96, 0x60}], 0x4}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000a40)=""/150, 0x96}, {&(0x7f0000000b00)=""/3, 0x3}], 0x3, &(0x7f0000004800)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000000c80)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000004740)=""/161, 0xa1}, {&(0x7f0000000dc0)=""/214, 0xd6}, {&(0x7f0000000ec0)=""/114, 0x72}], 0x3, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000003340)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/202, 0xca}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/199, 0xc7}, {&(0x7f0000003240)=""/229, 0xe5}], 0x5, &(0x7f00000033c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}], 0x5, 0x1, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r12}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3, r12}}, 0x1) [ 1221.226035] ? generic_block_fiemap+0x60/0x60 [ 1221.227147] ? lock_downgrade+0x6d0/0x6d0 syz_io_uring_submit(r9, r10, &(0x7f0000004600)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd=r11, 0x6, &(0x7f0000003600)="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", 0x1000, 0x9, 0x1, {0x0, r12}}, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x1, 0x5, 0x800000000000000, 0x6}) link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1221.228253] ? build_open_flags+0x6f0/0x6f0 [ 1221.229198] ? loop_set_status_old+0x250/0x250 [ 1221.230159] blkdev_ioctl+0x291/0x710 [ 1221.230975] ? blkdev_common_ioctl+0x1930/0x1930 [ 1221.231986] ? selinux_file_ioctl+0xb6/0x270 [ 1221.232925] block_ioctl+0xf9/0x140 [ 1221.233693] ? blkdev_read_iter+0x1c0/0x1c0 [ 1221.234610] __x64_sys_ioctl+0x19a/0x210 [ 1221.235488] do_syscall_64+0x33/0x40 [ 1221.236282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1221.237366] RIP: 0033:0x7eff8aae28d7 [ 1221.238152] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.242060] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.243688] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1221.245202] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1221.246724] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1221.248239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1221.249750] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1221.257841] FAULT_INJECTION: forcing a failure. [ 1221.257841] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.260285] CPU: 1 PID: 8631 Comm: syz-executor.1 Not tainted 5.10.237 #1 [ 1221.261748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1221.263522] Call Trace: [ 1221.264088] dump_stack+0x107/0x167 [ 1221.264865] should_fail.cold+0x5/0xa [ 1221.265676] ? create_object.isra.0+0x3a/0xa20 [ 1221.266645] should_failslab+0x5/0x20 [ 1221.267466] kmem_cache_alloc+0x5b/0x310 [ 1221.268323] ? recalibrate_cpu_khz+0x10/0x10 [ 1221.269265] create_object.isra.0+0x3a/0xa20 [ 1221.270189] ? kasan_unpoison_shadow+0x33/0x50 [ 1221.271172] kmalloc_order+0xfe/0x160 [ 1221.271986] kmalloc_order_trace+0x14/0xa0 [ 1221.272891] iovec_from_user+0x36c/0x400 [ 1221.273753] __import_iovec+0x67/0x590 [ 1221.274571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1221.275608] ? wait_for_completion_io+0x270/0x270 [ 1221.276630] import_iovec+0x83/0xb0 [ 1221.277409] sg_common_write.constprop.0+0xaf4/0x1a30 [ 1221.278496] ? sg_build_indirect.isra.0+0x710/0x710 [ 1221.279560] ? fault_around_bytes_set+0x83/0xa0 [ 1221.280564] ? lock_downgrade+0x6d0/0x6d0 [ 1221.281458] ? cap_capable+0x1cd/0x230 [ 1221.282290] ? security_capable+0x95/0xc0 [ 1221.283189] ? capable+0xe1/0x100 [ 1221.283929] sg_new_write.isra.0+0x529/0x770 [ 1221.284870] ? sg_common_write.constprop.0+0x1a30/0x1a30 [ 1221.286021] ? lock_downgrade+0x6d0/0x6d0 [ 1221.286930] ? _cond_resched+0x10/0x30 [ 1221.287755] ? scsi_block_when_processing_errors+0x2a6/0x370 [ 1221.288977] ? scsi_check_sense+0x10f0/0x10f0 [ 1221.289931] ? perf_trace_lock+0xac/0x490 [ 1221.290817] ? SOFTIRQ_verbose+0x10/0x10 [ 1221.291689] sg_ioctl_common+0x828/0x2570 [ 1221.292573] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1221.293671] ? do_vfs_ioctl+0x283/0x10d0 [ 1221.294531] ? sg_write+0x120/0x120 [ 1221.295317] ? generic_block_fiemap+0x60/0x60 [ 1221.296258] ? lock_downgrade+0x6d0/0x6d0 [ 1221.297134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1221.298162] ? wait_for_completion_io+0x270/0x270 [ 1221.299189] ? selinux_file_ioctl+0xb6/0x270 [ 1221.300120] ? sg_compat_ioctl+0x120/0x120 [ 1221.301021] sg_ioctl+0x8f/0x120 [ 1221.301742] __x64_sys_ioctl+0x19a/0x210 [ 1221.302604] do_syscall_64+0x33/0x40 [ 1221.303394] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1221.304480] RIP: 0033:0x7f4a211cbb19 [ 1221.305271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.309184] RSP: 002b:00007f4a1e741188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.310816] RAX: ffffffffffffffda RBX: 00007f4a212def60 RCX: 00007f4a211cbb19 [ 1221.312331] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1221.313847] RBP: 00007f4a1e7411d0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.315382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.316889] R13: 00007ffe3737a34f R14: 00007f4a1e741300 R15: 0000000000022000 16:31:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1221.335274] FAULT_INJECTION: forcing a failure. [ 1221.335274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.337800] CPU: 1 PID: 8632 Comm: syz-executor.2 Not tainted 5.10.237 #1 16:31:34 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) [ 1221.339266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1221.341159] Call Trace: [ 1221.341722] dump_stack+0x107/0x167 [ 1221.342499] should_fail.cold+0x5/0xa [ 1221.343316] ? copyout.part.0+0x112/0x140 [ 1221.344203] copy_page_to_iter+0x878/0xf80 [ 1221.345116] blk_rq_unmap_user+0x552/0x750 [ 1221.346037] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1221.346963] sg_finish_rem_req+0x73/0x320 [ 1221.347839] sg_new_read+0x3d1/0x4b0 [ 1221.348628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1221.349737] ? _raw_write_unlock_irq+0x1f/0x30 [ 1221.350724] sg_ioctl_common+0x1f45/0x2570 [ 1221.351633] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1221.352741] ? do_vfs_ioctl+0x283/0x10d0 [ 1221.353601] ? sg_write+0x120/0x120 [ 1221.354383] ? generic_block_fiemap+0x60/0x60 [ 1221.355344] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1221.356376] ? wait_for_completion_io+0x270/0x270 [ 1221.357410] ? selinux_file_ioctl+0xb6/0x270 [ 1221.358351] ? sg_compat_ioctl+0x120/0x120 [ 1221.359253] sg_ioctl+0x8f/0x120 [ 1221.359982] __x64_sys_ioctl+0x19a/0x210 [ 1221.360848] do_syscall_64+0x33/0x40 [ 1221.361652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1221.362742] RIP: 0033:0x7f16a9b0ab19 [ 1221.363541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.367453] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.369079] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1221.370604] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1221.372143] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.373658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.375189] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1221.413967] loop6: detected capacity change from 0 to 2048 [ 1221.473470] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1221.476995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 16:31:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:31:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 25) 16:31:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:31:52 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x200001, &(0x7f0000000600)=ANY=[]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setfsuid(r1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setfsuid(r2) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x1000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file0'}}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_gt={'fowner>', r1}}, {@dont_hash}, {@euid_gt={'euid>', r2}}, {@smackfshat={'smackfshat', 0x3d, ','}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@uid_gt={'uid>', 0xee00}}]}) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) pread64(r0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 16:31:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 47) 16:31:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5) [ 1239.630500] FAULT_INJECTION: forcing a failure. [ 1239.630500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.632182] CPU: 1 PID: 8655 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1239.633098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1239.634209] Call Trace: [ 1239.634566] dump_stack+0x107/0x167 [ 1239.635059] should_fail.cold+0x5/0xa [ 1239.635564] ? copyout.part.0+0x112/0x140 [ 1239.636117] copy_page_to_iter+0x878/0xf80 [ 1239.636691] blk_rq_unmap_user+0x552/0x750 [ 1239.637260] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1239.637841] sg_finish_rem_req+0x73/0x320 [ 1239.638390] sg_new_read+0x3d1/0x4b0 [ 1239.638896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1239.639600] ? _raw_write_unlock_irq+0x1f/0x30 [ 1239.640206] sg_ioctl_common+0x1f45/0x2570 [ 1239.640764] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1239.641445] ? do_vfs_ioctl+0x283/0x10d0 [ 1239.641975] ? sg_write+0x120/0x120 [ 1239.642455] ? generic_block_fiemap+0x60/0x60 [ 1239.643051] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1239.643690] ? wait_for_completion_io+0x270/0x270 [ 1239.644336] ? selinux_file_ioctl+0xb6/0x270 [ 1239.644912] ? sg_compat_ioctl+0x120/0x120 [ 1239.645474] sg_ioctl+0x8f/0x120 [ 1239.645922] __x64_sys_ioctl+0x19a/0x210 [ 1239.646464] do_syscall_64+0x33/0x40 [ 1239.646959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1239.647126] FAULT_INJECTION: forcing a failure. [ 1239.647126] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.647634] RIP: 0033:0x7f16a9b0ab19 [ 1239.647646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1239.647660] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.653802] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1239.654757] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1239.655741] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1239.656697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1239.657867] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1239.659097] CPU: 0 PID: 8660 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1239.660438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1239.662066] Call Trace: [ 1239.662593] dump_stack+0x107/0x167 [ 1239.663320] should_fail.cold+0x5/0xa [ 1239.664067] ? __kernfs_new_node+0xd4/0x860 [ 1239.664918] should_failslab+0x5/0x20 [ 1239.665674] kmem_cache_alloc+0x5b/0x310 [ 1239.666485] __kernfs_new_node+0xd4/0x860 16:31:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) [ 1239.667317] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1239.668803] ? perf_trace_lock+0xac/0x490 [ 1239.669876] ? perf_trace_lock+0xac/0x490 [ 1239.670875] ? lock_chain_count+0x20/0x20 [ 1239.671847] ? __lockdep_reset_lock+0x180/0x180 [ 1239.672935] ? __lockdep_reset_lock+0x180/0x180 16:31:52 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r4) r5 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r8, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) lseek(0xffffffffffffffff, 0x8000, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, 0x33d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r9, 0x8000000) io_uring_enter(r9, 0x4c07, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x240, 0x20201) sendfile(r8, r10, &(0x7f0000000240)=0x1, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1239.674011] ? update_load_avg+0x162/0x1870 [ 1239.675055] ? find_held_lock+0x2c/0x110 [ 1239.675994] kernfs_new_node+0x18d/0x250 [ 1239.676948] kernfs_create_dir_ns+0x49/0x160 [ 1239.677974] internal_create_group+0x793/0xb30 [ 1239.679050] ? set_user_nice.part.0+0x2fd/0x760 [ 1239.680117] ? sysfs_remove_group+0x170/0x170 [ 1239.681125] ? lockdep_init_map_type+0x2c7/0x780 [ 1239.682213] ? blk_queue_flag_set+0x22/0x30 [ 1239.683225] ? __loop_update_dio+0x2d2/0x690 [ 1239.684225] loop_configure+0x953/0x1410 [ 1239.685158] lo_ioctl+0xa57/0x16b0 [ 1239.685956] ? avc_has_extended_perms+0x7f1/0xf40 [ 1239.687067] ? loop_set_status_old+0x250/0x250 [ 1239.688114] ? avc_ss_reset+0x180/0x180 [ 1239.689032] ? find_held_lock+0x2c/0x110 [ 1239.689975] ? __lock_acquire+0xbb1/0x5b00 [ 1239.691015] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1239.692213] ? generic_block_fiemap+0x60/0x60 [ 1239.693230] ? lock_downgrade+0x6d0/0x6d0 [ 1239.694182] ? build_open_flags+0x6f0/0x6f0 [ 1239.695182] ? loop_set_status_old+0x250/0x250 [ 1239.696212] blkdev_ioctl+0x291/0x710 [ 1239.697076] ? blkdev_common_ioctl+0x1930/0x1930 [ 1239.698151] ? selinux_file_ioctl+0xb6/0x270 [ 1239.699164] block_ioctl+0xf9/0x140 [ 1239.699977] ? blkdev_read_iter+0x1c0/0x1c0 [ 1239.700950] __x64_sys_ioctl+0x19a/0x210 [ 1239.701861] do_syscall_64+0x33/0x40 [ 1239.702698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1239.703873] RIP: 0033:0x7eff8aae28d7 [ 1239.704725] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1239.708892] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.710615] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1239.712244] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1239.713861] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1239.715495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1239.717118] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1239.729414] loop6: detected capacity change from 0 to 2048 [ 1239.738768] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:31:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:31:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8c00000002000000ff0000007f0a7a23906a1c2d0b33722932d933013be92477de9215fb997ad8d4b699732dc9f9f2827a7ca634ee5334ff805b5bc97ca7ab8f0accfc54af598227f33289c90a23990b5948c5f9ce4ac3a09e52344df655af84bb3753d97df993b2f374b76fc65d35ce5d1b482ded0d87eb26d21b201b5a85f2c9fcece865cf3b57b4a77be1fdd3e65c7df7daed6d136bcb3f4b4a32"]) r3 = fcntl$dupfd(r0, 0x0, r1) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89ad48ec20207b81bf74ebdd05b7677", 0xfe5c}, {&(0x7f0000000700)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e00", 0x2a}, {&(0x7f0000000740)="6e55e07c6d51a452b336cd2836b5698b50fd1e216cbde9e6a6c1471c29991d99a3f51e67a11ab14fbd789ad1627e07f94408d0a569b945c91dd67040bd27c2ae8a4b0dc3c5c5e23b6fb2ecec052914b3fc39b3fd32340f1df7e0f44321f640b2a04507e91eba1f8438f4ea9d7e1dc517dcd91bb8d9de949e2ec7523ec2f5f6308d7cac72eeb72e889dcc4d7743c16dee4ef23b0752b69c5a0fbfe6f205f1b2f344f603802e7c95147bf934672de9584c504674ad35cc65a7c4f72ae35deaeb4d01e2bdef368dfe51d88d6cf7f91c90d98030a4fd558c4322f646ca45dd92265601ab798de444841e5f33aae3207cb86530d4631374f9618ae5311eb9e99b1a7b99f671d98ac519a526dea06120b97e9377e8e7b601d7e4881cc43acaa942920f68baa8480990a7fde36c06daf32a7416151627ba096ee62fa0cc440d27b14af071d47954926698a70dbd1ba88afc63eaeac033706e8c417200b4275c8216d38ed2605e76405869ed178d7b4068e5800b9c33a7afc7f7de5abb25eb91872d8734933d3e7a7fdb1bfceaf5022631d7b962418c5c8b3230e6d8a10559cc82bde4fe596b20473ac4e0ce3342c022db2968918559f29dfa06514caeee27fd61206cd3c9f77a62016acce5031fc0a68a087af51afd376c49b8b5f1836157761b9228e921452a7247192de2752a93c09b8d16e18e5484f78777f7779217a27141564a158179025121fce488d96891bfdb2051554ad54d258106a616780d3b1d59faa6eca6e3b326024b09f1cf51c74866ec3ef021db57c3a38f82f64a6ac252a86463ccc4b4bf2e17deceee9c185835ced69265e9017824d8b65000ed5dd02e015ab8d140ca3ca0c112def4a9cddd5e12eca2248bf081ca34293e0faf5eaaa4d9867f2300bb9a49c978469bd255f74d0f8f27cb3d64e3a733c5a439d35a35bf4ef38544ae4e4f2251156b568b8df25ef69670e0370c69527b49e2d7af2885e2181cdc08d68d4310571a8b8940998ca61b273848ace4af54419608faac555e839c81390771c66f2523774053bed1d99a38898177dc5d4c7c29e3733ca15c1d98b14d805bd892d4b2741c8c7271c77ed05a99a29a5cf526371d86a3a87f034ceeaac66e523708c583b37f577ea3e405343ae9d3261c4be108b2456dff389a96a5db8c43409b9b693b0827ade229f54ee3ce60ca94a028c834277969b31fbbd141d0e8512c5c5adb02e9f15b76df8ebff0e77fed30b927813d78a69bfab9e49887a0a5fc0ade33388b5bdb27227cb5399dcf4e9d943a2876a4b8afa7e76717621eff5980989fb6b8750ecb6db2f6ef02c0bbb1dd7004e1bfbeae92886b0bb2ea7574ca2543409683a9abe537f9652a69edc89927783b7e3c0a07357446ae2b2a14d4a25ccb85eb5e2f2f5d92f3efaf7c8f5a56e47a93ce51a2560a50e259189e5b581c87dbe2fca4864109b2a77e627ef9c21ade06b5ca2fcfb9c5683a6199c4dff1c76d6c91d65728a1e96ba6c840aad7f724bb88506f740e3b6971dbe0fa5b20c763d2f56c47be2822df28e32acc5b3133f26ed1942092f0b2ff9e40f9cc678f3918764b0da379e9300c01421cb07bad62223d9c02aa805d099007d3841aac18eb8e6c94146d4d838981976b4b802dfe73df951ee635f7dc1bded1718c3e07e101331a6149f9578d82869e44ffbf4c31f591bf699a18db902b5ecc5b0fc71e041a74831d3b408181d08c873139e811fd6117eeb033c260b8d2e9f4e6580fcf437447bd2833d6c805834ed1479ba5783aa3fb6e9930699392f4d496664d256eca82e09a92c9e3f0a3b7c160db6f4b7694f2c9fcbee84b4e20d024e161cf034497159e22b593f8db87e9444ea9d4ed3fdf06290f1951412b99beaae318fc26c34758302b2d4ebf9498867cbc30acb99593a949daaf52b8c4e80c951bc93f48650d7fb34e466469d3060d3e720f07789dc129dcb3d24034db976fd3b58146689f2573d07575a5c72e33dc600fabb8894ee701bfb589e0f576ffc9f781d005e226088bb61f31b95071ff03c8c0fb66da22d641cbc7bb8a112d7f07ec3abd00d1011d1a47be1bc4761bc58186d5abe9cfb8058408a53c45bc7ef9276c874016d170b2a25e21cde46c4dbc93f90b719c91ac9e9111dcf751a97b80b52a36385efec4789424930d4fe8dea15e61868d5550e52a7c60509f7388a19f36402d6c8e5ac0eb5f170d3d556bf4f906081d468c38f10c313c175e34d003e3bd5d8afcd5fe01138262f59505b0715af6519dd3c779b51e9d3dabbffba061eaa3d65e15484b14eeaf3124bdabf73f05f2bf3c992bbe4127275eba031193388ccb7679d3a8cc588e88964844a9985c7d80db7a7ec1f13f97492f59c5e419d66a9d4e3cefa513a9164ad4b421d09f1e98dff2daac9c611459fbf988b4514b4023ffa209bac7ce6a5beeb816d55e04fb5e8c082f566e7b7f644057e4c0c644d32455895a5ac696e7a394f09cbaaa9240077bbfd7d3c143d0e391387c0803dc49689a656b98b0a473aed2ab7225f1a837fd07536f36f8aa30b90a538d2e262a790a002bbc96547354ff9fff7e8be0f509722cbd7266559f5822024dc84100b523c7e3fbef75565b7b6554ee644b35fcd686328ea426a24e39a50ff0fc25fe9842652f8cb7ebf8364338fe38cf74a2ec4319ac04b1ce61bedf06b7acf00c08fa180f2ad3210c9d6f5556c649144efced1b21d0191f4dc1e8ab5eb898b09986d4311b2764f477a4853898c8755ca88579b25ce6597ee9a83ba6535f248407da94872b2dfabb19f4016e940c4940ec1d24514e6271b1103264909437a28a57093a9b6b31428a75bf0ea0f335b5cd8988f478b085643412e3147de9624a797daf20920afffd8fddb5e74c5c9ab16a355874db4c315b60d273d27ab4799966fd371f283eea41116f07fac84a00c86f51a441effb91d5d7a6660c79d807443cc3485fef30deb3fe8838c551fb80241aacad4e72b7c1ef6c8b0702f90d7630e6b5f5b07d8bb168c7022566c6cdc9a3fe4c0edc39a1c7b6190d3bdd61bf984fd743fc438c7a5ada703f2921aa3f1ec4ea4578fdf41e17471aad458e7c8793dda7481effd0d97f5b16f54cc3fc2ec1ad2db549f72f276cc537bbf05aa3d5d573345848e7645532456fc634bd29568584e130ff199a79ea6a94e6d7362995f2c74c528055b11dc4db455add8af3192a80e634ef66b71c47acc04b67fea5ea228e7bb2a35e5e15fec154da258d2bc8be176c491cceb872fcd9a92c3eca4047562365bc809997dbee3b1627a0de2d696d906fc501327db44719987feb875e08a2e489359678654584eb2f9d3d4eb00ec8a4ffe65688676af0b687c0cc09a8e334fc2d1e89f7b70d1c2d881c2f7ab0ccb8e955d75e2cad84de219ebfad551fd02157d1247687e739cd844c6d818fdd00be17dbb83806b5b837cc41c5df8243ad8ce605eafb9bc5d81906bd7008c0f4d175f829dc45f48602672381b94385680b1ebed32b4d8c5d5eb424b030f23493a20da5e8d7448c001159e414d08514c4e1027590ea2a1728c44d0c7732562d8cefde0615483f9c778137e428074388e9abb1db196d082081df813b2365d19f976e5f7f36002b55ba446f7cabfc15cce18aec421f46dea3f9e66db7f29e2dac5e4d90971082e0d2e8fa4da04b498c3072650bf7e878ff9d9eaff6d18f578e8c7a93be6f6d112a0e28eaaab9fe13b2bb3713594221ae06e99366677f933da7186543949e3186926443e8687cfffbeea92f2a661fe78df6866b98c6ef91a6b9769f209991a975656682780fa42bb37afa68e445fbdb24172737946c36557a8a317dc3d2a793b3386d5387c78592c57202ce6a015bad1e8cc37f376a2e26a61f095232ae1c0ae108862e2514cd31ec0d53f42cf2e5e8e41bd0065bebc9243df22f53e2a5ecba09e81f36400b67b9bcc0d3b420cd864f33481075f6dc4dd975ca3fb7ab58de9163653748eda4b9f714c075756ce194d77fe790abec8adf43e0ba3e22660ece721e60781de451029ec9d457425114dde990d891efacd592fb28d37f499de5f22bd7deb6bae55bb71df65634769c2239211070882426acfe9324a0dd83f62ac58c3e7dbf5b8f3f11abd207e85fbc66fa5ab2202a3f32237ea49fd91c139cbbd5e5e9c0733bb3b15f6f7c2d187e420522c73feecbac07643f4268012a09318844e131ac7e92274af3f621833314b2c0ffc51caaef7a6fb44fa2c13f23ce875457330c4b3a485e5809eed4fc3fda748a80418168efc0fcaa613bb27beb54b243ce9d21ebd1893e272c8e03c035dde0c9abd6b5a5adf74f47c9d7c27db5a42a18f6629528ce13dd195e061cfa334bd5692b09deefc295fc1155e9e94853178312ca6b1c0ce8a104d19eafc8f47e1f24db9fb99d35893c6af0c834f4f7614620582926292d4f132791fe9a3eb1bd2afa78ff5f34f85f963b217f1cee95eda2d61b58394d662acd93a358faa8f081686f39490c6ae277a5c94731afd97f6636f053767d3b8508248dd26fc731d04b811e94a34de4865e22328540b7fe08a7ab3db17334f14d16b556c06252f424393d6273aaf3e71b40e4faa6de309e39e976a951f2865881eed8e3ecb34b906b6f4e34a63be42993b7d20f4ee9afa74a9b60730533f5a7e7eb67cfa0d514b6ade4cf99ad1ef2b5492265f5747da619343ef9af875d5f0f23f834bfd5d98e4ac54b1fa685c615ef59a8067d0b400426264d65faf2740d11651ee8a9ca4341f73d3c7f0a68faaf86ed12438ccef5dca2f84861c51196a8a1bc6bc948d2aa84f4c8ab8114a6a75d6e3aa245f0756b73647e696983d80962c46b404d3bf41893dc640b5a846af3d820dd11175773e638b5e713e8763eac686ce2ff5bf6cbe5fb8430c1b74bce3d0755cd75b5f920cd989bb019e86710bf7a2b9b41447ee9a2370d327e44cd76d384a479723d62545387f3d1a72f6828ffe970a777cf230b52b0388699a5dca4aba5a682c120fc62915324ad7e0b09098b24a59dce6a846ebd66ddbfc9de6595cc72e37293f2cc0fe23e15e0b71558de8f509f33db49afe96b9e2a4c49f0baaf4d790aff9e67e80e789bcd6e93d274fdb9d2602aa1065e87fa14006600c1f07a34f57501251a920a05f6bde291efc3d8061c9a5776516bb95df89cd7d5282a71e84c4d4fb4bb1111a96d01a96cd59a0a093d863d4d805f4e7c886d97ca3ed3afe2e85287013c5e90dd01dc2f7c8e6c4ed60fe4097f16e8f623ae2c330738c316f7499df61e6a4cbfffdaf2e676e10f75f46634a5e09c47f8ba0c4a59db14616670f3728b317c65fd0591cdfbd4556026af21eacf4606e0ba4ffc7775391768b23469cbe74c401755bb2b2f9ebd8af95321e72aafa64ef26c2ac323702e9c9fac5770ab04c001efc425bb6e856b0690d9c9bdc0fa27eab22e61d7624e1e198803d2776cdf18d5f08e1a09d813c2f341ac36a5faf8d881549c5909063dbcc879b0e2e36517fcb0544837a15f9cc673c62370dbdc6169f5bb671fbba4a1b12b9de2cabb65bcbd6cc6e85f762ddad185af87d0f86f45837391ea9ff4324dc9125b601ff9962e43cb8ca052a2aebbfdc43147bcf44d706fab07a2d2d53f19af86f666fd5dfdf74c0be5ddd2c5a77595cd495abe990609c0663cf643f4a29e688b88b7d263a1d7ebd111b26b1e8bb3c35eed6ac9355fb3d86c717e91e1f5d85558bf53ffd0fffce69d79c7f204e48b5db055141aa14ccb43430bfc513f5bf0560858365b77b49f64a06ec004c5733d5995ad5f27830c"}, {&(0x7f0000000040)="ea92fb33eeedc9397d645d6e363237893e06b655a8097e874188ec421ee3af3ce1423e529072b99f97ed52dc27bc19d4e3e6ef7eb68548c5d205d487803482"}, {&(0x7f00000000c0)="ae1461297a2c099296544d705335049ea634"}, {&(0x7f00000001c0)="0a092d336aef41066d56318789c377ca8c35fc01dbf70dad6c8209856d62c61f3e10143280233835a25286b55308af7ced3f653c32f6738b01b60c9990b7d009735ffc8397b57348b7c543d66f9d7d9dbf3e32a60ce8bac5d178e663459e0f73029692f458a0ee574a1f8d3ad9b656f2960ecf521bbc61f037fd4f806e117166c1a79663e3d97e13cf939c761f38ecc321c64d5eb8976a368f020ad74326d2d2657d4d9d901d953cab9828cd4f1f4f51bafc1d539a0e3d"}], 0x2) [ 1239.820602] sg_write: data in/out 196608/65074 bytes for SCSI command 0x0-- guessing data in; [ 1239.820602] program syz-executor.7 not setting count and/or reply_len properly 16:31:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 26) 16:31:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 48) 16:31:52 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) [ 1239.891145] FAULT_INJECTION: forcing a failure. [ 1239.891145] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.892564] CPU: 1 PID: 8686 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1239.893380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1239.894375] Call Trace: [ 1239.894695] dump_stack+0x107/0x167 [ 1239.895144] should_fail.cold+0x5/0xa [ 1239.895601] ? create_object.isra.0+0x3a/0xa20 [ 1239.896143] should_failslab+0x5/0x20 [ 1239.896590] kmem_cache_alloc+0x5b/0x310 [ 1239.897068] create_object.isra.0+0x3a/0xa20 [ 1239.897591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1239.898192] kmem_cache_alloc+0x159/0x310 [ 1239.898698] __kernfs_new_node+0xd4/0x860 [ 1239.899197] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1239.899754] ? perf_trace_lock+0xac/0x490 [ 1239.900242] ? perf_trace_lock+0xac/0x490 [ 1239.900728] ? lock_chain_count+0x20/0x20 [ 1239.901214] ? __lockdep_reset_lock+0x180/0x180 [ 1239.901757] ? __lockdep_reset_lock+0x180/0x180 [ 1239.902302] ? task_rq_lock+0xab/0x270 [ 1239.902762] ? lock_release+0x680/0x680 [ 1239.903236] ? find_held_lock+0x2c/0x110 [ 1239.903712] kernfs_new_node+0x18d/0x250 [ 1239.904190] kernfs_create_dir_ns+0x49/0x160 [ 1239.904711] internal_create_group+0x793/0xb30 [ 1239.905255] ? set_user_nice.part.0+0x2fd/0x760 [ 1239.905795] ? sysfs_remove_group+0x170/0x170 [ 1239.906322] ? lockdep_init_map_type+0x2c7/0x780 [ 1239.906942] ? blk_queue_flag_set+0x22/0x30 [ 1239.907451] ? __loop_update_dio+0x2d2/0x690 [ 1239.907983] loop_configure+0x953/0x1410 [ 1239.908474] lo_ioctl+0xa57/0x16b0 [ 1239.908892] ? avc_has_extended_perms+0x7f1/0xf40 [ 1239.909457] ? loop_set_status_old+0x250/0x250 [ 1239.909993] ? avc_ss_reset+0x180/0x180 [ 1239.910483] ? find_held_lock+0x2c/0x110 [ 1239.911019] ? __lock_acquire+0xbb1/0x5b00 [ 1239.911545] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1239.912159] ? generic_block_fiemap+0x60/0x60 [ 1239.912679] ? lock_downgrade+0x6d0/0x6d0 [ 1239.913158] ? build_open_flags+0x6f0/0x6f0 [ 1239.913661] ? loop_set_status_old+0x250/0x250 [ 1239.914190] blkdev_ioctl+0x291/0x710 [ 1239.914637] ? blkdev_common_ioctl+0x1930/0x1930 [ 1239.915197] ? selinux_file_ioctl+0xb6/0x270 [ 1239.915717] block_ioctl+0xf9/0x140 [ 1239.916139] ? blkdev_read_iter+0x1c0/0x1c0 [ 1239.916642] __x64_sys_ioctl+0x19a/0x210 [ 1239.917117] do_syscall_64+0x33/0x40 [ 1239.917563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1239.918159] RIP: 0033:0x7eff8aae28d7 [ 1239.918593] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1239.920734] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.921618] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1239.922446] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1239.923282] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1239.924109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1239.924938] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1239.949945] FAULT_INJECTION: forcing a failure. [ 1239.949945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.951384] CPU: 1 PID: 8689 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1239.952173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1239.953116] Call Trace: [ 1239.953423] dump_stack+0x107/0x167 [ 1239.953840] should_fail.cold+0x5/0xa [ 1239.954278] ? copyout.part.0+0x112/0x140 [ 1239.954758] copy_page_to_iter+0x878/0xf80 [ 1239.955263] blk_rq_unmap_user+0x552/0x750 [ 1239.955757] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1239.956261] sg_finish_rem_req+0x73/0x320 [ 1239.956739] sg_new_read+0x3d1/0x4b0 [ 1239.957173] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1239.957781] ? _raw_write_unlock_irq+0x1f/0x30 [ 1239.958307] sg_ioctl_common+0x1f45/0x2570 [ 1239.958795] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1239.959405] ? do_vfs_ioctl+0x283/0x10d0 [ 1239.959874] ? sg_write+0x120/0x120 [ 1239.960290] ? generic_block_fiemap+0x60/0x60 [ 1239.960803] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1239.961368] ? wait_for_completion_io+0x270/0x270 [ 1239.961925] ? selinux_file_ioctl+0xb6/0x270 [ 1239.962430] ? sg_compat_ioctl+0x120/0x120 [ 1239.962922] sg_ioctl+0x8f/0x120 [ 1239.963309] __x64_sys_ioctl+0x19a/0x210 [ 1239.963779] do_syscall_64+0x33/0x40 [ 1239.964203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1239.964789] RIP: 0033:0x7f16a9b0ab19 [ 1239.965221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1239.967313] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.968175] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1239.968993] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1239.969808] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1239.970628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1239.971449] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:31:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:31:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 16:31:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r1 = syz_io_uring_setup(0x628e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x4c07, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x3f, 0x7, 0xf3, 0x0, 0x9, 0x384, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xa119}, 0x8, 0xfff, 0x1, 0x9, 0x9, 0x400, 0x7fff, 0x0, 0x1, 0x0, 0x7}, 0x0, 0x6, r4, 0x5) fcntl$dupfd(r1, 0x0, r2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) 16:31:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:31:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:31:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1240.035303] 9pnet: Insufficient options for proto=fd 16:31:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 16:31:53 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) 16:31:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x1267, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1240.093659] loop6: detected capacity change from 0 to 2048 16:31:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 49) 16:31:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1240.129136] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1240.147108] 9pnet: Insufficient options for proto=fd [ 1240.154205] FAULT_INJECTION: forcing a failure. [ 1240.154205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.155644] CPU: 1 PID: 8718 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1240.156425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1240.157368] Call Trace: [ 1240.157676] dump_stack+0x107/0x167 [ 1240.158092] should_fail.cold+0x5/0xa [ 1240.158526] ? copyout.part.0+0x112/0x140 [ 1240.159006] copy_page_to_iter+0x878/0xf80 [ 1240.159511] blk_rq_unmap_user+0x552/0x750 [ 1240.159994] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1240.160512] sg_finish_rem_req+0x73/0x320 [ 1240.160981] sg_new_read+0x3d1/0x4b0 [ 1240.161420] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1240.162013] ? _raw_write_unlock_irq+0x1f/0x30 [ 1240.162539] sg_ioctl_common+0x1f45/0x2570 [ 1240.163032] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1240.163618] ? do_vfs_ioctl+0x283/0x10d0 [ 1240.164082] ? sg_write+0x120/0x120 [ 1240.164493] ? generic_block_fiemap+0x60/0x60 [ 1240.164998] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1240.165558] ? wait_for_completion_io+0x270/0x270 [ 1240.166121] ? selinux_file_ioctl+0xb6/0x270 [ 1240.166617] ? sg_compat_ioctl+0x120/0x120 [ 1240.167105] sg_ioctl+0x8f/0x120 [ 1240.167488] __x64_sys_ioctl+0x19a/0x210 [ 1240.167948] do_syscall_64+0x33/0x40 [ 1240.168371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1240.168955] RIP: 0033:0x7f16a9b0ab19 [ 1240.169384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1240.171491] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.172353] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1240.173164] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1240.173988] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1240.174788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1240.175596] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:31:53 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) 16:31:53 executing program 0: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, 0xffffffffffffffff, 0xfbffb000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x1f) [ 1240.223460] 9pnet: Insufficient options for proto=fd 16:32:09 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 27) 16:32:09 executing program 0: munmap(&(0x7f00007ff000/0x800000)=nil, 0x800000) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(r1, 0x4c07, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x406, r1) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 16:32:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 50) 16:32:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:32:09 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:32:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x1274, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1256.822555] FAULT_INJECTION: forcing a failure. [ 1256.822555] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.826929] CPU: 0 PID: 8733 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1256.828714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1256.830824] Call Trace: [ 1256.831512] dump_stack+0x107/0x167 [ 1256.832446] should_fail.cold+0x5/0xa [ 1256.833427] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1256.834913] should_failslab+0x5/0x20 [ 1256.835887] kmem_cache_alloc+0x5b/0x310 [ 1256.836945] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1256.838383] idr_get_free+0x4b5/0x8f0 [ 1256.839389] idr_alloc_u32+0x170/0x2d0 [ 1256.840387] ? __fprop_inc_percpu_max+0x130/0x130 [ 1256.841643] ? lock_acquire+0x197/0x470 [ 1256.842669] ? __kernfs_new_node+0xff/0x860 [ 1256.843796] idr_alloc_cyclic+0x102/0x230 [ 1256.844869] ? idr_alloc+0x130/0x130 [ 1256.845815] ? rwlock_bug.part.0+0x90/0x90 [ 1256.846931] __kernfs_new_node+0x117/0x860 [ 1256.848023] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1256.849238] ? perf_trace_lock+0xac/0x490 [ 1256.850295] ? perf_trace_lock+0xac/0x490 [ 1256.851348] ? lock_chain_count+0x20/0x20 [ 1256.852417] ? __lockdep_reset_lock+0x180/0x180 [ 1256.853604] ? __lockdep_reset_lock+0x180/0x180 [ 1256.854804] ? update_load_avg+0x162/0x1870 [ 1256.855930] ? find_held_lock+0x2c/0x110 [ 1256.856992] kernfs_new_node+0x18d/0x250 [ 1256.858055] kernfs_create_dir_ns+0x49/0x160 [ 1256.859172] internal_create_group+0x793/0xb30 [ 1256.860350] ? set_user_nice.part.0+0x2fd/0x760 [ 1256.861553] ? sysfs_remove_group+0x170/0x170 [ 1256.862700] ? lockdep_init_map_type+0x2c7/0x780 [ 1256.863957] ? blk_queue_flag_set+0x22/0x30 [ 1256.865063] ? __loop_update_dio+0x2d2/0x690 [ 1256.866199] loop_configure+0x953/0x1410 [ 1256.867269] lo_ioctl+0xa57/0x16b0 [ 1256.868141] ? avc_has_extended_perms+0x7f1/0xf40 [ 1256.869174] ? loop_set_status_old+0x250/0x250 [ 1256.870142] ? avc_ss_reset+0x180/0x180 [ 1256.870982] ? find_held_lock+0x2c/0x110 [ 1256.871873] ? __lock_acquire+0xbb1/0x5b00 [ 1256.872825] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1256.873935] ? generic_block_fiemap+0x60/0x60 [ 1256.874883] ? lock_downgrade+0x6d0/0x6d0 [ 1256.875768] ? build_open_flags+0x6f0/0x6f0 [ 1256.876685] ? loop_set_status_old+0x250/0x250 [ 1256.877666] blkdev_ioctl+0x291/0x710 [ 1256.878471] ? blkdev_common_ioctl+0x1930/0x1930 [ 1256.879480] ? selinux_file_ioctl+0xb6/0x270 [ 1256.880416] block_ioctl+0xf9/0x140 [ 1256.881182] ? blkdev_read_iter+0x1c0/0x1c0 [ 1256.882105] __x64_sys_ioctl+0x19a/0x210 [ 1256.882969] do_syscall_64+0x33/0x40 [ 1256.883768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1256.884850] RIP: 0033:0x7eff8aae28d7 [ 1256.885634] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1256.889516] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.891132] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1256.892653] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1256.894179] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1256.895717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1256.897268] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1256.923513] loop6: detected capacity change from 0 to 2048 16:32:10 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd=r0, 0x6, 0x101, 0x3, 0x4, 0x0, {0x1}}, 0x1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r7], 0x38}}], 0x1, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x48, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x15) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:10 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/180, 0xb4}, {&(0x7f0000000980)=""/100, 0x64}, {&(0x7f00000002c0)=""/24, 0x18}]}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xffffffffffffff01) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="03630840e97b9c39f7fa9e89da76144f0272249ca4dccecf39be5212969d9d8aee39381ce9d38638102c8ec36c91b88c3d92284433b38f60bb37c8e9d6a54f2a8d4051da04ed33e9fff0b7a5f5007eb47ef67d623dcc4a24ab5b7c714e9c3417d3d19c9a3fe7c18764cf00e176e38f58a1b3ca1d05d088826bddaf53edf146d7fcca56", @ANYRES64=r2, @ANYBLOB="0663044002000000"], 0x9b, 0x0, &(0x7f0000000640)="bb0208043e9f5f7f564eb4f7ccf8d3869609ac33b755a4683d77f7a97225a7de8f464da5039f3a91356ff5b43d6a79e64371d0518b018de5f1f2f4a44fd7b2596669d06ff079df9611bcca1e77fcc8ffa7be4528bc6f0fee91d59369467f31afbccfa7498ded97370d8b12a15c58885bd012b8865358d52ec68c25ca7e1ad11941abd420e06f8da24106fc41c6a5771fbf7fa95401878482c4764a"}) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r3, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1256.956341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1256.962268] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1256.977929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7590 comm=kworker/1:0 [ 1257.011787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.013393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.015359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1257.031285] FAULT_INJECTION: forcing a failure. [ 1257.031285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.033917] CPU: 0 PID: 8740 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1257.035414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1257.037186] Call Trace: [ 1257.037750] dump_stack+0x107/0x167 [ 1257.038540] should_fail.cold+0x5/0xa [ 1257.039380] ? copyout.part.0+0x112/0x140 [ 1257.040261] copy_page_to_iter+0x878/0xf80 [ 1257.041175] blk_rq_unmap_user+0x552/0x750 [ 1257.042106] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1257.043052] sg_finish_rem_req+0x73/0x320 [ 1257.043951] sg_new_read+0x3d1/0x4b0 [ 1257.044763] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1257.045878] ? _raw_write_unlock_irq+0x1f/0x30 [ 1257.046875] sg_ioctl_common+0x1f45/0x2570 [ 1257.047814] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1257.048921] ? do_vfs_ioctl+0x283/0x10d0 [ 1257.049787] ? sg_write+0x120/0x120 [ 1257.050573] ? generic_block_fiemap+0x60/0x60 [ 1257.051542] ? __mutex_unlock_slowpath+0xe1/0x600 16:32:10 executing program 0: r0 = creat(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./Zile0\x00']) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) getpeername(r3, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000005c0)=0x80) setfsuid(r5) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x2e8, 0x14, 0x421, 0x70bd25, 0x25dfdbfb, {0x18}, [@typed={0x8, 0x2f, 0x0, 0x0, @uid=r4}, @nested={0x18e, 0x7e, 0x0, 0x1, [@typed={0x18, 0x2b, 0x0, 0x0, @str='security.capability\x00'}, @typed={0x5, 0x83, 0x0, 0x0, @str='\x00'}, @typed={0x10, 0x8e, 0x0, 0x0, @binary="a357b7a616a8fc21d2bfe53e"}, @generic="c4c3c04890978d1b8fb6e0d7e19853634b0c4694167a24d759ae87561ef8d4b6bc8db41ea07fa55cca7d938eca04571cb56d0f169b9e40a6e538acabbc781b0bc9de1bae9a205d7408962066c7c5f72ebd48830dc08440eb06201694162bac13acd57c909c512a809268b2e2ed5d817ca0eed55ef9dc5098091a01b66f8b347a50ecb12e4810eafcb2eef34a1ed57dcd439eab2b0fa7befe1ee209dd3300877e0bab053201b5f076520f6251c2017c7aecf09fa3fb9ddb6b409000816c2d35dae597734e78", @typed={0x8, 0x89, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r1}, @generic="0c9b0f4dc2ba4d1c311b5f9b789520153d856b8d20dd644402146f139788e7e934e3d73e3b98260481f01014a6d27e29cec77263afdefff805cb73f5250b745e19b798287655c8eca0f205603fbca506784bb0ce801861e4282374ac5f969efd0b4847876b0cc6d3ca", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r0}]}, @generic="a0320cc8df68adfe5c5892a2193dc413638a51f4", @typed={0x8, 0x28, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0xdfef}, @generic="df0390594f5cab0b36f0975310102bcfe8a5de0e6f87cb1fdf180d7b2fc47ba3504ae8a97f7a95d64518eb9f9b627fe706cf3c58e93274cbe4bd4887831e4b31fb90043a700d11b92f33c0171c3f11f18a7947f4ab8975c240dedb5c5d2b165d6cdeb3d9d2e8018178aaeceda7cf0eaa59c43520e882ff5312c686b55f666fef7e7d8a5d8a23a3e1b4c8ecc62408f3b9f47d21b9b15fd2ae85df013617d1b2078849060182b107da9633ae326fd651c9a250806651e3b0f4307537d7713f4727799f6e089fa9fff9c691526d7c0f35df1806bb0d088fb48bdeac47d1515a2160a2912a217aa6cb95f82933ff6d19430197fa", @nested={0x20, 0x50, 0x0, 0x1, [@generic="504ff9822305b81a4a875cdf926f71102b7e0de619a30ffe1a0863a3"]}]}, 0x2e8}}, 0x40004000) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v3, 0x18, 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) [ 1257.052568] ? wait_for_completion_io+0x270/0x270 [ 1257.053884] ? selinux_file_ioctl+0xb6/0x270 [ 1257.054835] ? sg_compat_ioctl+0x120/0x120 [ 1257.055765] sg_ioctl+0x8f/0x120 [ 1257.056483] __x64_sys_ioctl+0x19a/0x210 [ 1257.057377] do_syscall_64+0x33/0x40 [ 1257.058167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1257.059263] RIP: 0033:0x7f16a9b0ab19 [ 1257.060064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1257.063978] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.065612] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1257.067137] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1257.068689] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1257.070211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1257.071730] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:32:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:32:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x1275, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:32:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 28) 16:32:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:32:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 51) 16:32:29 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8420, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d312c00c17fff10c8929c57346009f75580afe5ccc18cfb9abd263d7984462cb431dfbc212b2b6af0970c83ca3c653c978f0a46aceb46d2b12efe28278653d0ba963de2182f4c7969f02d4502afbbae7ad5641951e59bb0b636c1eda9b7781a9ccc6dc9b6cb0503000000000000"]) mknodat$loop(r0, &(0x7f0000000180)='./file1\x00', 0x2000, 0x1) 16:32:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:32:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x1276, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:32:29 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x20) r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) syz_io_uring_setup(0x73e0, &(0x7f00000001c0)={0x0, 0x8d3c, 0x20, 0x8001, 0xc2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x20, 0x20, 0x59, 0x5, 0x0, 0xfffffffffffffff8, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x542, 0xb, 0x6, 0x3, 0xff, 0x789, 0x2, 0x0, 0xdd, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd=r5, 0xffffffffffffa19a, &(0x7f0000000440)=""/184, 0xb8, 0x0, 0x1}, 0x79b) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sysvipc/sem\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r11, 0x0) syz_io_uring_submit(r6, r3, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8001) 16:32:29 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x400) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x40050) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="010062140040000000000020", @ANYRES32=0xffffffffffffffff, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(r1, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x4) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000004c0)=0x0) prlimit64(r5, 0xb, &(0x7f0000000500)={0x7fffffff, 0xfff}, &(0x7f0000000540)) prlimit64(r4, 0x9, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) [ 1276.481657] FAULT_INJECTION: forcing a failure. [ 1276.481657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.483609] CPU: 1 PID: 8784 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1276.484687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1276.485548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6203 comm=kworker/0:0 [ 1276.485994] Call Trace: [ 1276.486014] dump_stack+0x107/0x167 [ 1276.486030] should_fail.cold+0x5/0xa [ 1276.486043] ? copyout.part.0+0x112/0x140 [ 1276.486059] copy_page_to_iter+0x878/0xf80 [ 1276.486084] blk_rq_unmap_user+0x552/0x750 [ 1276.486108] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1276.492994] sg_finish_rem_req+0x73/0x320 [ 1276.493615] sg_new_read+0x3d1/0x4b0 [ 1276.494299] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1276.495188] ? _raw_write_unlock_irq+0x1f/0x30 [ 1276.495945] sg_ioctl_common+0x1f45/0x2570 [ 1276.496782] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1276.497663] ? do_vfs_ioctl+0x283/0x10d0 [ 1276.498298] ? sg_write+0x120/0x120 [ 1276.498855] ? generic_block_fiemap+0x60/0x60 [ 1276.499567] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1276.500327] ? wait_for_completion_io+0x270/0x270 [ 1276.500444] FAULT_INJECTION: forcing a failure. [ 1276.500444] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.501087] ? selinux_file_ioctl+0xb6/0x270 [ 1276.501100] ? sg_compat_ioctl+0x120/0x120 [ 1276.501120] sg_ioctl+0x8f/0x120 [ 1276.505515] __x64_sys_ioctl+0x19a/0x210 [ 1276.506157] do_syscall_64+0x33/0x40 [ 1276.506739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1276.507553] RIP: 0033:0x7f16a9b0ab19 [ 1276.508120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.510968] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.512153] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1276.513275] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1276.514386] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.515446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1276.516493] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1276.517574] CPU: 0 PID: 8787 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1276.519178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1276.521107] Call Trace: [ 1276.521722] dump_stack+0x107/0x167 [ 1276.522571] should_fail.cold+0x5/0xa [ 1276.523454] ? create_object.isra.0+0x3a/0xa20 [ 1276.524487] should_failslab+0x5/0x20 [ 1276.525368] kmem_cache_alloc+0x5b/0x310 [ 1276.526318] create_object.isra.0+0x3a/0xa20 [ 1276.527341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1276.528521] kmem_cache_alloc+0x159/0x310 [ 1276.529495] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1276.530794] idr_get_free+0x4b5/0x8f0 [ 1276.531704] idr_alloc_u32+0x170/0x2d0 [ 1276.532607] ? __fprop_inc_percpu_max+0x130/0x130 [ 1276.533712] ? lock_acquire+0x197/0x470 [ 1276.534626] ? __kernfs_new_node+0xff/0x860 [ 1276.535611] idr_alloc_cyclic+0x102/0x230 [ 1276.536543] ? idr_alloc+0x130/0x130 [ 1276.537396] ? rwlock_bug.part.0+0x90/0x90 [ 1276.538381] __kernfs_new_node+0x117/0x860 [ 1276.539362] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1276.540448] ? perf_trace_lock+0xac/0x490 [ 1276.541394] ? perf_trace_lock+0xac/0x490 [ 1276.542342] ? lock_chain_count+0x20/0x20 [ 1276.543292] ? __lockdep_reset_lock+0x180/0x180 [ 1276.544330] ? __lockdep_reset_lock+0x180/0x180 [ 1276.545373] ? update_load_avg+0x162/0x1870 [ 1276.546371] ? find_held_lock+0x2c/0x110 [ 1276.547314] kernfs_new_node+0x18d/0x250 [ 1276.548255] kernfs_create_dir_ns+0x49/0x160 [ 1276.549273] internal_create_group+0x793/0xb30 [ 1276.550333] ? set_user_nice.part.0+0x2fd/0x760 [ 1276.551414] ? sysfs_remove_group+0x170/0x170 16:32:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1276.552449] ? lockdep_init_map_type+0x2c7/0x780 [ 1276.553715] ? blk_queue_flag_set+0x22/0x30 [ 1276.554694] ? __loop_update_dio+0x2d2/0x690 [ 1276.555699] loop_configure+0x953/0x1410 [ 1276.556645] lo_ioctl+0xa57/0x16b0 [ 1276.557445] ? avc_has_extended_perms+0x7f1/0xf40 [ 1276.558551] ? loop_set_status_old+0x250/0x250 [ 1276.559582] ? avc_ss_reset+0x180/0x180 [ 1276.560486] ? find_held_lock+0x2c/0x110 [ 1276.561424] ? __lock_acquire+0xbb1/0x5b00 [ 1276.562446] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1276.563648] ? generic_block_fiemap+0x60/0x60 [ 1276.564666] ? lock_downgrade+0x6d0/0x6d0 [ 1276.565607] ? build_open_flags+0x6f0/0x6f0 [ 1276.566595] ? loop_set_status_old+0x250/0x250 [ 1276.567639] blkdev_ioctl+0x291/0x710 [ 1276.568506] ? blkdev_common_ioctl+0x1930/0x1930 [ 1276.569585] ? selinux_file_ioctl+0xb6/0x270 [ 1276.570589] block_ioctl+0xf9/0x140 [ 1276.571423] ? blkdev_read_iter+0x1c0/0x1c0 [ 1276.572387] __x64_sys_ioctl+0x19a/0x210 [ 1276.573297] do_syscall_64+0x33/0x40 [ 1276.574123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1276.575252] RIP: 0033:0x7eff8aae28d7 [ 1276.576068] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1276.580234] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.581953] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1276.583575] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1276.585167] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1276.586776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1276.588388] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:32:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) creat(&(0x7f0000000040)='./file0\x00', 0x2) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1276.595381] loop6: detected capacity change from 0 to 2048 [ 1276.603001] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1276.727254] audit: type=1326 audit(1749141149.829:123): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8790 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863fbb4b19 code=0x7ffc0000 [ 1276.733280] audit: type=1326 audit(1749141149.839:124): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8790 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f863fbb4b19 code=0x7ffc0000 [ 1276.741619] audit: type=1326 audit(1749141149.845:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8790 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863fbb4b19 code=0x7ffc0000 16:32:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 52) 16:32:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2201, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:32:45 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:32:45 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x401, 0x6, 0xfffffffffffffd9c}) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc0", 0xb}], 0x1}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, r2, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x2, &(0x7f0000000340)="6662dbd9c7bfb82c4a8681e2c5d2ed51e80c0a6ed5d110a33e7fec4c16f9e49ac794222f6dbca193a3c794e70bafeb43f0efa1eab30ecc29c2636db330d9baceb86513ec4a967c018e3800616e184f39616c8377daefab5fe003f2807c5ace186d9db3e2e865c21de4812c3e3242eb44b5f4b815938be3dfc09efaa905bf53061e929ff097711f11f3fd1fad58310875b6bece71194be0cc64fa067f241526fc44848881675cac8af07d29d5c4e4d2594c843acafeecf7c304eebb66ee2e7ba02933ecebab8656dc98dfe3021420747c6adb1dc69346ac6ca8b754913eff5f5314dd9dedb07af27824dd", 0xfffffffc, 0x0, 0x0, {0x2}}, 0xac37) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:32:45 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000780)=ANY=[@ANYBLOB="95b5b9000000d33a00000000000000798000c8", @ANYRES32=r0, @ANYBLOB="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"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0xb0000006}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8e1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/176, 0xb0}, {&(0x7f0000000980)=""/202, 0xca}], 0x6, &(0x7f0000000bc0)=""/141, 0x8d}, 0x0, 0x100, 0x0, {0x3}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x7, 0x7, 0x0, 0x6, 0x4}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}, 0x0, 0x0, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x220998a32b054e1b, 0x80, 0x0, 0x1, 0x5, 0x9, 0x0, 0x0, 0x68, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2dd, 0x2, @perf_bp={0x0}, 0x210, 0x80000000, 0x8, 0x0, 0x0, 0x9, 0x1, 0x0, 0x81, 0x0, 0xbe}, 0x0, 0x0, r4, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000240)=0xb81, 0x9) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1292.826916] FAULT_INJECTION: forcing a failure. [ 1292.826916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.829457] CPU: 0 PID: 8805 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1292.830912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.832686] Call Trace: [ 1292.833252] dump_stack+0x107/0x167 [ 1292.834031] should_fail.cold+0x5/0xa [ 1292.834852] ? copyout.part.0+0x112/0x140 [ 1292.835750] copy_page_to_iter+0x878/0xf80 [ 1292.836646] blk_rq_unmap_user+0x552/0x750 [ 1292.837566] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1292.838483] sg_finish_rem_req+0x73/0x320 [ 1292.839381] sg_new_read+0x3d1/0x4b0 [ 1292.840177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.841303] ? _raw_write_unlock_irq+0x1f/0x30 [ 1292.842289] sg_ioctl_common+0x1f45/0x2570 [ 1292.843194] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1292.844304] ? do_vfs_ioctl+0x283/0x10d0 [ 1292.845169] ? sg_write+0x120/0x120 [ 1292.845944] ? generic_block_fiemap+0x60/0x60 [ 1292.846909] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1292.847960] ? wait_for_completion_io+0x270/0x270 [ 1292.849005] ? selinux_file_ioctl+0xb6/0x270 [ 1292.849952] ? sg_compat_ioctl+0x120/0x120 [ 1292.850858] sg_ioctl+0x8f/0x120 [ 1292.851593] __x64_sys_ioctl+0x19a/0x210 [ 1292.852468] do_syscall_64+0x33/0x40 [ 1292.853263] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.854360] RIP: 0033:0x7f16a9b0ab19 [ 1292.855155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.859107] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.860746] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1292.862279] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1292.863822] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.865352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.866879] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1292.883738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8414 comm=kworker/0:2 16:32:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 29) 16:32:45 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x4c07, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1010, r4, 0x8000000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) umount2(&(0x7f0000000040)='./file0\x00', 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:32:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2202, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:32:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1292.929928] FAULT_INJECTION: forcing a failure. [ 1292.929928] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.932438] CPU: 1 PID: 8812 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1292.933886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.935648] Call Trace: [ 1292.936210] dump_stack+0x107/0x167 [ 1292.936984] should_fail.cold+0x5/0xa [ 1292.937797] ? __kernfs_new_node+0xd4/0x860 [ 1292.938717] should_failslab+0x5/0x20 [ 1292.939532] kmem_cache_alloc+0x5b/0x310 [ 1292.940402] __kernfs_new_node+0xd4/0x860 [ 1292.941287] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1292.942284] ? kernfs_add_one+0x36e/0x4d0 [ 1292.943175] ? mutex_lock_io_nested+0xf30/0xf30 [ 1292.944167] ? perf_trace_lock+0xac/0x490 [ 1292.945062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1292.946084] kernfs_new_node+0x18d/0x250 [ 1292.946951] __kernfs_create_file+0x51/0x350 [ 1292.947900] sysfs_add_file_mode_ns+0x221/0x560 [ 1292.948906] internal_create_group+0x324/0xb30 [ 1292.949880] ? sysfs_remove_group+0x170/0x170 [ 1292.950831] ? lockdep_init_map_type+0x2c7/0x780 [ 1292.951852] ? blk_queue_flag_set+0x22/0x30 [ 1292.952763] ? __loop_update_dio+0x2d2/0x690 [ 1292.953700] loop_configure+0x953/0x1410 [ 1292.954582] lo_ioctl+0xa57/0x16b0 [ 1292.955341] ? avc_has_extended_perms+0x7f1/0xf40 [ 1292.956375] ? loop_set_status_old+0x250/0x250 [ 1292.957348] ? avc_ss_reset+0x180/0x180 [ 1292.958190] ? find_held_lock+0x2c/0x110 [ 1292.959069] ? __lock_acquire+0xbb1/0x5b00 [ 1292.959711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1292.960045] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1292.962929] ? generic_block_fiemap+0x60/0x60 [ 1292.963900] ? lock_downgrade+0x6d0/0x6d0 [ 1292.964786] ? build_open_flags+0x6f0/0x6f0 [ 1292.965706] ? loop_set_status_old+0x250/0x250 [ 1292.966672] blkdev_ioctl+0x291/0x710 [ 1292.967496] ? blkdev_common_ioctl+0x1930/0x1930 [ 1292.968502] ? selinux_file_ioctl+0xb6/0x270 [ 1292.969524] block_ioctl+0xf9/0x140 [ 1292.970413] ? blkdev_read_iter+0x1c0/0x1c0 [ 1292.971400] __x64_sys_ioctl+0x19a/0x210 [ 1292.972268] do_syscall_64+0x33/0x40 [ 1292.973061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1292.974144] RIP: 0033:0x7eff8aae28d7 [ 1292.974931] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.978843] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.980471] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1292.981986] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1292.983504] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1292.985010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1292.986523] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1292.991678] loop6: detected capacity change from 0 to 2048 [ 1292.997592] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:32:46 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = io_uring_setup(0x3fcc, &(0x7f00000001c0)={0x0, 0x7f8b, 0x2, 0x2, 0x176}) io_uring_enter(r4, 0x5390, 0xb31e, 0x2, &(0x7f0000000040)={[0x10001]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r8 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r8, 0x8000000) syz_io_uring_submit(r12, r10, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, r10, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0x1, 0x6, &(0x7f0000000240)=[{&(0x7f0000000340)="165ce69f10eea1e738a02404efd72f87618fb48b5abcd27e93de52d80750f97815e426ef0ab2dc7e70d1a6b98dea40b1ebe18a5fe113273b83192226b335bf635b45262cecbacce780ef73d44d379d8c7db17ab1953d7db4d75ca1a65f338c125ac789ea43349130584ca090f090774bc90bbd0a606523349d633e05510bf45105367977b61db28e2166df5fa10d155b288d45a7e61de9c7332e0d10f370518ba634546e578f0d1fceee659f151509925338182c4b406b1097354c3a7d5a475f70a24ecb2cab03250ea6ae", 0xcb}, {&(0x7f0000000600)="a1cce54c7f5a3532f218d51c1f908e0debf675a578eeacecef3ae4f2ad6be8401a44af52001f9f5f08e046a50ff77d", 0x2f}, {&(0x7f0000000440)="e9d4419cfc1e59d62be06a34a8f5bc715f22636c009273f711370f79c27c0fe3875e66de2f705e715b5e7b1b56cbda2ff167b0d1270e5bd1968cd7a42df47eaa74a19615d7cf410a227930af29de03d4907374874dec5160a1b08cfa3e946745c2c9fa71b2cd5318f42e88eff6685e0af51df6016a131c1ae26ee32350620c59b3850061f47daaec58dfa15151cada9bae7cfaedc8f1205c73b3acfd046d29", 0x9f}, {&(0x7f0000000500)="41f1773f4b744a23adeeb72a5ccf5a9494f8114f93ec7c3b05063aaf825ba2d82533adff3fe846fc1998d07a5474e5b827d7ffe89da680629e7fa080c92aa74857fe086c61dec8c0c9883a6971f095ad822f9d73e1bbb522110bf743241b9f1e52fffad857ac08b316ed222ac25e2a920c039059c3daeb68884e0e86c6df19745711", 0x82}], 0x4, 0x1d, 0x0, {0x2}}, 0xfffffff7) [ 1293.073100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.074673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.079487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1293.101781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:32:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 30) 16:32:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:32:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2203, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:32:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 53) 16:32:46 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8000, 0x2dc802) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) [ 1293.197800] FAULT_INJECTION: forcing a failure. [ 1293.197800] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.200300] CPU: 0 PID: 8832 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1293.201764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.203655] Call Trace: [ 1293.204262] dump_stack+0x107/0x167 [ 1293.205086] should_fail.cold+0x5/0xa [ 1293.205959] ? create_object.isra.0+0x3a/0xa20 [ 1293.206999] should_failslab+0x5/0x20 [ 1293.207876] kmem_cache_alloc+0x5b/0x310 [ 1293.208796] create_object.isra.0+0x3a/0xa20 [ 1293.209783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.210959] kmem_cache_alloc+0x159/0x310 [ 1293.211923] __kernfs_new_node+0xd4/0x860 [ 1293.212866] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1293.213946] ? kernfs_add_one+0x36e/0x4d0 [ 1293.214905] ? mutex_lock_io_nested+0xf30/0xf30 [ 1293.215976] ? perf_trace_lock+0xac/0x490 [ 1293.216920] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1293.218018] kernfs_new_node+0x18d/0x250 [ 1293.218942] __kernfs_create_file+0x51/0x350 [ 1293.219955] sysfs_add_file_mode_ns+0x221/0x560 [ 1293.221015] internal_create_group+0x324/0xb30 [ 1293.222060] ? sysfs_remove_group+0x170/0x170 [ 1293.223077] ? lockdep_init_map_type+0x2c7/0x780 [ 1293.224160] ? blk_queue_flag_set+0x22/0x30 [ 1293.225129] ? __loop_update_dio+0x2d2/0x690 [ 1293.226132] loop_configure+0x953/0x1410 [ 1293.227064] lo_ioctl+0xa57/0x16b0 [ 1293.227873] ? avc_has_extended_perms+0x7f1/0xf40 [ 1293.228973] ? loop_set_status_old+0x250/0x250 [ 1293.230017] ? avc_ss_reset+0x180/0x180 [ 1293.230922] ? find_held_lock+0x2c/0x110 [ 1293.231866] ? __lock_acquire+0xbb1/0x5b00 [ 1293.232891] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1293.234098] ? generic_block_fiemap+0x60/0x60 [ 1293.235099] ? lock_downgrade+0x6d0/0x6d0 [ 1293.236027] ? build_open_flags+0x6f0/0x6f0 [ 1293.237004] ? loop_set_status_old+0x250/0x250 [ 1293.238038] blkdev_ioctl+0x291/0x710 [ 1293.238877] ? blkdev_common_ioctl+0x1930/0x1930 [ 1293.239928] ? selinux_file_ioctl+0xb6/0x270 [ 1293.240924] block_ioctl+0xf9/0x140 [ 1293.241731] ? blkdev_read_iter+0x1c0/0x1c0 [ 1293.242707] __x64_sys_ioctl+0x19a/0x210 [ 1293.243636] do_syscall_64+0x33/0x40 [ 1293.244474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.245617] RIP: 0033:0x7eff8aae28d7 [ 1293.246462] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.251414] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.253270] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1293.255010] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1293.256613] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1293.258225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1293.259815] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:32:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x2000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f00000003c0)=0x5, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="371e7366841958312c02ed67ff6f3d7f2b34b9357c80e3904424e5c18c", @ANYRESHEX, @ANYBLOB=',\x00']) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0x135) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={0x20, 0x12, 0x69844ea0a6ddcd11, 0x0, 0x0, {0xa}, [@typed={0x9, 0x0, 0x0, 0x0, @binary="5ef6a6516b"}]}, 0x20}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0x0, @fixed}, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index, 0x100, 0x0, 0x7fff, 0x0, 0x1}, 0x1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x24000088) mmap(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x1d461000) add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, &(0x7f0000000440)="a407c3efc1edfab7037255db44a5dc8223017688d0522ccc6b4a4c358e2f414cae835269010f99ea715085731fa8ad0600f3cc084badc74185399c77100ed64438230f52b9471708331bb3d8337a3b509a1fc88cdf800000000000000000aa3d876107370eb900ef2f5977904dc1529f6f01685599f6f0f96228928051a11745736e86d6105c4ed1ed691302c674e680213e1ed74ab2a42fa612ae03354c60526462d86b8aeb43fef2fc2e25f0587b388811002e439e5ea00fbe8c86d6ddb05a5bb129cdbe1c3cbb4f3fe4a00f992627dbc1644a37b56e251b5dfc99e4971a964e0dbd687c00", 0xe6, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000180)=0x2) keyctl$setperm(0x5, 0x0, 0x10000000) [ 1293.270957] loop6: detected capacity change from 0 to 2048 [ 1293.284237] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1293.367688] FAULT_INJECTION: forcing a failure. [ 1293.367688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.370221] CPU: 0 PID: 8840 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1293.371654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.373479] Call Trace: [ 1293.374075] dump_stack+0x107/0x167 [ 1293.374876] should_fail.cold+0x5/0xa [ 1293.375739] ? copyout.part.0+0x112/0x140 [ 1293.376661] copy_page_to_iter+0x878/0xf80 [ 1293.377634] blk_rq_unmap_user+0x552/0x750 [ 1293.378606] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1293.379575] sg_finish_rem_req+0x73/0x320 [ 1293.380500] sg_new_read+0x3d1/0x4b0 [ 1293.381335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.382485] ? _raw_write_unlock_irq+0x1f/0x30 [ 1293.383503] sg_ioctl_common+0x1f45/0x2570 [ 1293.384425] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1293.385565] ? do_vfs_ioctl+0x283/0x10d0 [ 1293.386454] ? sg_write+0x120/0x120 [ 1293.387253] ? generic_block_fiemap+0x60/0x60 [ 1293.388270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1293.389332] ? wait_for_completion_io+0x270/0x270 [ 1293.390419] ? selinux_file_ioctl+0xb6/0x270 [ 1293.391404] ? sg_compat_ioctl+0x120/0x120 [ 1293.392338] sg_ioctl+0x8f/0x120 [ 1293.393091] __x64_sys_ioctl+0x19a/0x210 [ 1293.393988] do_syscall_64+0x33/0x40 [ 1293.394769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.395930] RIP: 0033:0x7f16a9b0ab19 [ 1293.396743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.400788] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.402458] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1293.404041] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1293.405611] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.407182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.408764] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:33:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 31) 16:33:00 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:33:00 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x50, 0xffffffffffffffff, 0x10000000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r8, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socketpair(0x1d, 0xa, 0x8, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x1, &(0x7f0000000200)=[r5, r8, r9, r0, r10, r0, 0xffffffffffffffff, r0, r0], 0x9, 0x0, 0x1}, 0x46) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:33:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 54) [ 1307.663471] FAULT_INJECTION: forcing a failure. [ 1307.663471] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.665546] CPU: 0 PID: 8862 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1307.666752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.668203] Call Trace: [ 1307.668670] dump_stack+0x107/0x167 [ 1307.669317] should_fail.cold+0x5/0xa [ 1307.669987] ? __kernfs_new_node+0xd4/0x860 [ 1307.670748] should_failslab+0x5/0x20 [ 1307.671409] kmem_cache_alloc+0x5b/0x310 [ 1307.672135] __kernfs_new_node+0xd4/0x860 [ 1307.672885] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1307.673710] ? kernfs_add_one+0x36e/0x4d0 [ 1307.674446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1307.675296] ? wait_for_completion_io+0x270/0x270 [ 1307.676157] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1307.677077] kernfs_new_node+0x18d/0x250 [ 1307.677789] __kernfs_create_file+0x51/0x350 [ 1307.678562] sysfs_add_file_mode_ns+0x221/0x560 [ 1307.679385] internal_create_group+0x324/0xb30 [ 1307.680211] ? sysfs_remove_group+0x170/0x170 [ 1307.680998] ? lockdep_init_map_type+0x2c7/0x780 [ 1307.681834] ? blk_queue_flag_set+0x22/0x30 [ 1307.682586] ? __loop_update_dio+0x2d2/0x690 [ 1307.683345] loop_configure+0x953/0x1410 [ 1307.684075] lo_ioctl+0xa57/0x16b0 [ 1307.684703] ? avc_has_extended_perms+0x7f1/0xf40 [ 1307.685554] ? loop_set_status_old+0x250/0x250 [ 1307.686364] ? avc_ss_reset+0x180/0x180 [ 1307.687072] ? find_held_lock+0x2c/0x110 [ 1307.687810] ? __lock_acquire+0xbb1/0x5b00 [ 1307.688600] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1307.689548] ? generic_block_fiemap+0x60/0x60 [ 1307.690337] ? lock_downgrade+0x6d0/0x6d0 [ 1307.691077] ? build_open_flags+0x6f0/0x6f0 [ 1307.691869] ? loop_set_status_old+0x250/0x250 [ 1307.692670] blkdev_ioctl+0x291/0x710 [ 1307.693343] ? blkdev_common_ioctl+0x1930/0x1930 [ 1307.694182] ? selinux_file_ioctl+0xb6/0x270 [ 1307.694974] block_ioctl+0xf9/0x140 [ 1307.695610] ? blkdev_read_iter+0x1c0/0x1c0 [ 1307.696370] __x64_sys_ioctl+0x19a/0x210 [ 1307.697096] do_syscall_64+0x33/0x40 [ 1307.697757] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.698671] RIP: 0033:0x7eff8aae28d7 [ 1307.698689] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.698698] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.698716] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1307.698725] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1307.698735] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1307.698744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1307.698760] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:33:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) 16:33:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2205, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ftruncate(r1, 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x101000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0x23f5, [], 0x0, "10a7eb2644babf"}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001480)={0x1, 0x800}) r3 = syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32]) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x10000, 0x2, 0x5}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000000101000000000000ffff000000000000ff7f0000000000000900000000000000000000004800000008000000140e0000cdf6ffff"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) 16:33:00 executing program 7: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x10) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000340)) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x10, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3ff, 0x7}, 0x54320, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001500)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000000380)=""/118, 0x8b}, {&(0x7f00000019c0)=""/137, 0x89}, {&(0x7f0000001880)=""/116, 0x74}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x9fa2da6e9f2e9bca) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_tables_matches\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32, @ANYBLOB="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"]) getdents(r1, &(0x7f0000001640)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) write$P9_RXATTRCREATE(r1, &(0x7f0000000280)={0x7, 0x21, 0x2}, 0x7) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) [ 1307.716148] FAULT_INJECTION: forcing a failure. [ 1307.716148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.718243] CPU: 0 PID: 8868 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1307.719485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.720973] Call Trace: [ 1307.721457] dump_stack+0x107/0x167 [ 1307.722117] should_fail.cold+0x5/0xa [ 1307.722799] ? copyout.part.0+0x112/0x140 [ 1307.723558] copy_page_to_iter+0x878/0xf80 [ 1307.724328] blk_rq_unmap_user+0x552/0x750 [ 1307.725096] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1307.725869] sg_finish_rem_req+0x73/0x320 [ 1307.726615] sg_new_read+0x3d1/0x4b0 [ 1307.727279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1307.728221] ? _raw_write_unlock_irq+0x1f/0x30 [ 1307.729048] sg_ioctl_common+0x1f45/0x2570 [ 1307.729817] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1307.730738] ? do_vfs_ioctl+0x283/0x10d0 [ 1307.731472] ? sg_write+0x120/0x120 [ 1307.732132] ? generic_block_fiemap+0x60/0x60 [ 1307.732933] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1307.733796] ? wait_for_completion_io+0x270/0x270 [ 1307.734672] ? selinux_file_ioctl+0xb6/0x270 [ 1307.735463] ? sg_compat_ioctl+0x120/0x120 [ 1307.736228] sg_ioctl+0x8f/0x120 [ 1307.736835] __x64_sys_ioctl+0x19a/0x210 [ 1307.737559] do_syscall_64+0x33/0x40 [ 1307.738067] loop6: detected capacity change from 0 to 2048 [ 1307.738239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.739837] RIP: 0033:0x7f16a9b0ab19 [ 1307.740505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.741093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8851 comm=kworker/1:1 [ 1307.743835] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.743862] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1307.747863] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1307.749165] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.750459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.751757] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:33:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2270, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4096) [ 1307.755212] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:33:00 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 32) 16:33:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 55) [ 1307.835197] FAULT_INJECTION: forcing a failure. [ 1307.835197] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.835219] CPU: 0 PID: 8893 Comm: syz-executor.6 Not tainted 5.10.237 #1 16:33:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2271, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, &(0x7f0000000140)=""/4096) [ 1307.835228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.835234] Call Trace: [ 1307.835257] dump_stack+0x107/0x167 [ 1307.835277] should_fail.cold+0x5/0xa [ 1307.835297] ? create_object.isra.0+0x3a/0xa20 [ 1307.835317] should_failslab+0x5/0x20 16:33:00 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x46e2, 0x100) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1f, 0xff, 0xa, 0xe1, 0x0, 0x52b, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x102, 0x4, @perf_config_ext={0x3, 0x4622}, 0x4b, 0x5, 0x9, 0x7, 0x6, 0x10001, 0xffff, 0x0, 0x1, 0x0, 0xfffffffffffff9be}, 0xffffffffffffffff, 0x0, r1, 0xa) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x4c07, 0x0, 0x0, 0x0, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file0/file0\x00', 0x400, 0x7, &(0x7f0000000540)=[{&(0x7f0000000200)="1b2c3a3f464a747bcb9043c920c3d1a3d86c0863d4447dfbbe0cb7497673d3cf6abf54de4cd8b07f6afbac3181d134dd63c88f799264aee443c35595114bbaf586839f5b0d38a15ffbf9570d448e07860304202671", 0x55, 0x6}, {&(0x7f0000000280)="a60dbddb", 0x4, 0xffffffff}, {&(0x7f0000001180)="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", 0x1000, 0x8000}, {&(0x7f00000002c0)="919a7f9b6ee47499808ef23f9b3c72c2c8cb3db4d0dfd56f7833bcc5a68956ebfa", 0x21, 0x5}, {&(0x7f0000000300)="c6ba44be88d6280782b3465a994373bf7d95d47da6780ed82bcae4eab42d368b8841a7b6d13eeddd3d46726175ab9c391b41edb08f63b603220e1c53e254bc64218e3cc24260bea8e2b067e2edfc42202e061aa7240c8483892688bd81468a33fa3f2e55216f2c5379b348676c521cd3dd7465ac918c3aac67b760a1a0f723aa5874e613db3424e6ded50a564f629100f3f6c33b0f811e0ef761c92926584cea7ba4176696bb3a70bdd9ebdd6534df2098e79328d6dd3ad61ee505e2c3525cd9dc3e52870239f8b9", 0xc8, 0x8000}, {&(0x7f0000000400)="16ef93a3839af645a381fe3583561e2ea8681036bd17c0d667687390fbc3569c22648b392117afc8fc5f4c0036c15eecb0bd9e5fd6cd66f4fe2dca0e368a69f857266f53fa47b1f4e35a6bee8ec68ca6989ac70bb8971767f2e3c9e774e16e6ababcc925643007ad08a7be345a7f37df295df2a5a1c5cd6f50967f08", 0x7c, 0xfffffffffffffffd}, {&(0x7f0000000480)="9461515b88f62d938cb012d4157e7aac9973c6924b4f53f14aa5e48dfab4ba0558efae875fed96c072ac3ca597af2e7c97f88e6affc7b338aa3ecb9a8f9d01a2fe23c731c70b5d629bda44c837b07b312ca4848c402a28bfa3fd5e22b5faeb62388abbe5eb163bdca637ddd56a8d90b6da46bbda8bca79264a93510e66fcf026cdcbb8d2df7ce33f59a117222f02b78b5d5ec1fe45f05a21e28150288469b79dc6616c5fc6058505fbc0580002a916b9f5", 0xb1, 0x6}], 0x1000, &(0x7f0000000740)=ANY=[@ANYBLOB='mode=0x0000000000000080,hide,utf8,cruft,uid=', @ANYRESHEX, @ANYBLOB="2c666f776e65723cfc5cf958069827f8d3eabd789e0acaf76b9bef047bfc8cbf659e48380ed7eaa063a11f1e95d99cbd99a1e39071074b2ea8a89224f2bb719e907636038128d52d2535b086f9f3352df4f9c062425dacc77e92483f91339a1a9c8752aa07f50e605ad652df6160a7057899a9f95aa5bc094ae2dfd487b5b02eab14fdac6e49d7f79d500b1c5a8f8c036e2d53838df97a14523a171e1df087ad733b2d6b7149", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,dont_appraise,context=staff_u,\x00']) sendfile(r2, r3, 0x0, 0x4) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000001140)={{}, {0x77359400}}, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') [ 1307.835333] kmem_cache_alloc+0x5b/0x310 [ 1307.835349] ? __lockdep_reset_lock+0x180/0x180 [ 1307.835372] create_object.isra.0+0x3a/0xa20 [ 1307.835385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1307.835408] kmem_cache_alloc+0x159/0x310 [ 1307.835446] __kernfs_new_node+0xd4/0x860 [ 1307.835471] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1307.835484] ? kernfs_add_one+0x36e/0x4d0 [ 1307.835506] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1307.835526] ? wait_for_completion_io+0x270/0x270 [ 1307.835543] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1307.835566] kernfs_new_node+0x18d/0x250 [ 1307.835589] __kernfs_create_file+0x51/0x350 [ 1307.835611] sysfs_add_file_mode_ns+0x221/0x560 [ 1307.835639] internal_create_group+0x324/0xb30 [ 1307.835665] ? sysfs_remove_group+0x170/0x170 [ 1307.835685] ? lockdep_init_map_type+0x2c7/0x780 [ 1307.835709] ? blk_queue_flag_set+0x22/0x30 [ 1307.835725] ? __loop_update_dio+0x2d2/0x690 [ 1307.835747] loop_configure+0x953/0x1410 [ 1307.835777] lo_ioctl+0xa57/0x16b0 [ 1307.835797] ? avc_has_extended_perms+0x7f1/0xf40 [ 1307.835818] ? loop_set_status_old+0x250/0x250 [ 1307.835845] ? avc_ss_reset+0x180/0x180 [ 1307.835865] ? find_held_lock+0x2c/0x110 [ 1307.835897] ? __lock_acquire+0xbb1/0x5b00 [ 1307.835963] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1307.835981] ? generic_block_fiemap+0x60/0x60 [ 1307.836002] ? lock_downgrade+0x6d0/0x6d0 [ 1307.836018] ? build_open_flags+0x6f0/0x6f0 [ 1307.836042] ? loop_set_status_old+0x250/0x250 [ 1307.836056] blkdev_ioctl+0x291/0x710 [ 1307.836074] ? blkdev_common_ioctl+0x1930/0x1930 [ 1307.836096] ? selinux_file_ioctl+0xb6/0x270 [ 1307.836118] block_ioctl+0xf9/0x140 [ 1307.836133] ? blkdev_read_iter+0x1c0/0x1c0 [ 1307.836152] __x64_sys_ioctl+0x19a/0x210 [ 1307.836172] do_syscall_64+0x33/0x40 [ 1307.836189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.836201] RIP: 0033:0x7eff8aae28d7 [ 1307.836217] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.836227] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.836246] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1307.836255] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1307.836265] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1307.836274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1307.836283] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1307.836857] loop6: detected capacity change from 0 to 2048 [ 1307.865170] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1307.926786] FAULT_INJECTION: forcing a failure. [ 1307.926786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.926802] CPU: 1 PID: 8901 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1307.926810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.926815] Call Trace: [ 1307.926835] dump_stack+0x107/0x167 [ 1307.954851] should_fail.cold+0x5/0xa [ 1307.955260] ? copyout.part.0+0x112/0x140 [ 1307.955712] copy_page_to_iter+0x878/0xf80 [ 1307.956175] blk_rq_unmap_user+0x552/0x750 [ 1307.956633] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1307.957101] sg_finish_rem_req+0x73/0x320 [ 1307.957545] sg_new_read+0x3d1/0x4b0 [ 1307.957947] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1307.958506] ? _raw_write_unlock_irq+0x1f/0x30 [ 1307.958996] sg_ioctl_common+0x1f45/0x2570 [ 1307.959462] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1307.960014] ? do_vfs_ioctl+0x283/0x10d0 [ 1307.960448] ? sg_write+0x120/0x120 [ 1307.960837] ? generic_block_fiemap+0x60/0x60 [ 1307.961315] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1307.961831] ? wait_for_completion_io+0x270/0x270 [ 1307.962358] ? selinux_file_ioctl+0xb6/0x270 [ 1307.962828] ? sg_compat_ioctl+0x120/0x120 [ 1307.963280] sg_ioctl+0x8f/0x120 [ 1307.963651] __x64_sys_ioctl+0x19a/0x210 [ 1307.964087] do_syscall_64+0x33/0x40 [ 1307.964485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.965030] RIP: 0033:0x7f16a9b0ab19 [ 1307.965429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.967388] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.968226] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1307.968985] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1307.969745] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.970505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.971265] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1331.484672] FAULT_INJECTION: forcing a failure. [ 1331.484672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.486412] CPU: 1 PID: 8920 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1331.487389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.488582] Call Trace: [ 1331.488960] dump_stack+0x107/0x167 [ 1331.489481] should_fail.cold+0x5/0xa [ 1331.490025] ? copyout.part.0+0x112/0x140 [ 1331.490614] copy_page_to_iter+0x878/0xf80 [ 1331.491224] blk_rq_unmap_user+0x552/0x750 [ 1331.491843] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1331.492455] sg_finish_rem_req+0x73/0x320 [ 1331.493044] sg_new_read+0x3d1/0x4b0 [ 1331.493573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.494316] ? _raw_write_unlock_irq+0x1f/0x30 [ 1331.494958] sg_ioctl_common+0x1f45/0x2570 [ 1331.495562] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1331.496305] ? do_vfs_ioctl+0x283/0x10d0 [ 1331.496877] ? sg_write+0x120/0x120 [ 1331.497392] ? generic_block_fiemap+0x60/0x60 [ 1331.498032] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.498717] ? wait_for_completion_io+0x270/0x270 [ 1331.499405] ? selinux_file_ioctl+0xb6/0x270 [ 1331.500268] ? sg_compat_ioctl+0x120/0x120 [ 1331.500867] sg_ioctl+0x8f/0x120 [ 1331.501344] __x64_sys_ioctl+0x19a/0x210 [ 1331.501916] do_syscall_64+0x33/0x40 16:33:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 33) 16:33:24 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x3}, 0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x0, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x0, 0x3, 0x1, 0x6}], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d93118", ['\x00']}, 0x25f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index, 0x80, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c00)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6003, @fd=r2, 0x1, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/161, 0xa1}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000940)=""/189, 0xbd}, {&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/230, 0xe6}], 0xa, 0x0, 0x1}, 0xd524) dup2(r6, r6) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdnoV', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) 16:33:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2272, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:24 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:33:24 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r8, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000028c0)=0x40000) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002900)='devices.allow\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002940)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x2, {0x0, r8}, 0x3, 0x8, 0x1, {0x0, 0x0, r9}}, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x36, 0xc1, 0x7, 0x1, 0x0, 0xeca, 0xced50, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x4, 0x9}, 0x0, 0x1, 0x8, 0x5, 0x20d, 0x7ff, 0x7023, 0x0, 0x7, 0x0, 0x736}, 0xffffffffffffffff, 0x1, r4, 0x4) sendfile(0xffffffffffffffff, r4, &(0x7f0000000240)=0x2, 0x200) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r10, 0x3ff, &(0x7f0000002800)=[{&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)=""/212, 0xd4}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/190, 0xbe}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/124, 0x7c}, {&(0x7f0000002700)=""/254, 0xfe}], 0x9, 0x2}, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000029c0)=ANY=[@ANYBLOB="0100000001000000180000006cfb48a84a31d87f3f1a8314d282be29ecd05467be7e39d881f55ab46635f614988c5cc68c7654e758c0dba513674d6f0337cfbe84a7024ac31756474be729e739e7d488de1965e6741ee331ad2018e3e03dd53463fa3d2c3c0feabe7a9c98ae3e771614a001cb1f5e7269f3e9350f96d555f203a5eea67fd29c4dfeff44bca35f91845d8116beebe37e2e752ce066cafe1bf6bfe14159efa65171816ecd43ef81b2ca3ef970c96f8f97d1e7a2db319e5d1ac7ff71a95b159e05bf1a3cfa2acbba97294842f3ff0e67b8000984b5ba54e7f2d3a91bd6f56207295daa6d4d", @ANYRES32=r10, @ANYBLOB="05000000000000002e2f66696c653000"]) 16:33:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, &(0x7f0000000140)=""/4096) 16:33:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 56) [ 1331.502443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1331.503239] RIP: 0033:0x7f16a9b0ab19 [ 1331.503804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.506363] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.507445] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 16:33:24 executing program 0: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setfsuid(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r6, &(0x7f0000000040)='./mnt\x00', r7, r8, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './mnt\x00'}) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f2c54b8eb7050b811e0f3a571189bd3d2e8f1710485e4a0ed28e9d74aec430624f8355b1901b5a1e4d71b2a98460e832791e47eff53337bdae5f69b6a8283a4eda496281be9368576e9840e2f78a107218dd8a90c75f0dd11e3793f1c642709edd8ad3d99174401d77629640e8e1ffd6ea29fbe2369cb8f5bdc1958bf1dc85eee056000a6a33075bcce09e6bc1f0960373c3b2028e6ec63d850bb8901fc95d8c6efb7b427afa68eff7142d64f1520b11744a3d13635cc313f539361fab016893", 0xc0}, {&(0x7f00000002c0)="f2ad3aee6616b0158f7b62f61cd64813e671993a9967201522cdbe609c3edd2ef8964eef2ebab0ccefb2f02b4e38fd941c0a5c868010f1c2f0c3cd24e25a3ab0a719f99de6d3caaebe8a37781e8ebd7e1d6d33e84adbc0265d861441499b8d51155639b96cf154dfc6f9177cce29b1f0b57895a05f190ec9b3ac2d76a128e9", 0x7f}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}], 0x40, 0x54}, 0x810) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1, 0x5}, &(0x7f0000000000)=':\x15\x00U\x1bT;\xfa4\x8dd\xa0\x9d&\xb0Z\xdfv\x8b\x84\x87\xa8K\xff\xb5\xce\xb4\xa7\xab\xc6\xf1\a\xdb\xc2m\xb2w\b\xb7*v\xfdo\x83\'\xd9[\xee|4P\xa7\xe8\xad\x82,\xf5\xd1\xea\xdb\xf4\xf5F\xc0H\v\x8d\xbc\x9e)&nH\x032\x15\x80\x19\xc0\fn\xdc\x8dk\xf2\xe4\x80\x9aJ\xe7\xdb\x8e\xd3\x80*i\x82CT\xb3j%\x94\x15\xc6\xc1\xc2\x82\x83\xdc\xf6sqF\x9cX', 0x0) [ 1331.508450] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1331.509613] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.510607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.511606] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1331.531494] FAULT_INJECTION: forcing a failure. [ 1331.531494] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.534014] CPU: 0 PID: 8919 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1331.535489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.537305] Call Trace: [ 1331.537884] dump_stack+0x107/0x167 [ 1331.538680] should_fail.cold+0x5/0xa [ 1331.539516] ? __kernfs_new_node+0xd4/0x860 [ 1331.540470] should_failslab+0x5/0x20 [ 1331.541299] kmem_cache_alloc+0x5b/0x310 [ 1331.542191] __kernfs_new_node+0xd4/0x860 [ 1331.543103] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1331.544135] ? kernfs_add_one+0x36e/0x4d0 [ 1331.545041] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.546090] ? wait_for_completion_io+0x270/0x270 [ 1331.547134] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1331.548293] kernfs_new_node+0x18d/0x250 [ 1331.549188] __kernfs_create_file+0x51/0x350 [ 1331.549997] 9pnet: Insufficient options for proto=fd [ 1331.551238] sysfs_add_file_mode_ns+0x221/0x560 [ 1331.552270] internal_create_group+0x324/0xb30 [ 1331.553274] ? sysfs_remove_group+0x170/0x170 [ 1331.554258] ? lockdep_init_map_type+0x2c7/0x780 [ 1331.555293] ? blk_queue_flag_set+0x22/0x30 [ 1331.556237] ? __loop_update_dio+0x2d2/0x690 [ 1331.557203] loop_configure+0x953/0x1410 [ 1331.558102] lo_ioctl+0xa57/0x16b0 [ 1331.558875] ? avc_has_extended_perms+0x7f1/0xf40 [ 1331.559932] ? loop_set_status_old+0x250/0x250 [ 1331.560931] ? avc_ss_reset+0x180/0x180 [ 1331.561799] ? find_held_lock+0x2c/0x110 [ 1331.562696] ? __lock_acquire+0xbb1/0x5b00 [ 1331.563686] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1331.564828] ? generic_block_fiemap+0x60/0x60 [ 1331.565796] ? lock_downgrade+0x6d0/0x6d0 [ 1331.566697] ? build_open_flags+0x6f0/0x6f0 [ 1331.567641] ? loop_set_status_old+0x250/0x250 [ 1331.568642] blkdev_ioctl+0x291/0x710 [ 1331.569471] ? blkdev_common_ioctl+0x1930/0x1930 [ 1331.570505] ? selinux_file_ioctl+0xb6/0x270 [ 1331.571466] block_ioctl+0xf9/0x140 [ 1331.572265] ? blkdev_read_iter+0x1c0/0x1c0 [ 1331.573202] __x64_sys_ioctl+0x19a/0x210 [ 1331.574089] do_syscall_64+0x33/0x40 [ 1331.574898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1331.576015] RIP: 0033:0x7eff8aae28d7 [ 1331.576822] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.580812] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.582470] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1331.584026] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1331.585570] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1331.587112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1331.588637] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1331.593944] loop6: detected capacity change from 0 to 2048 [ 1331.599805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=8851 comm=kworker/1:1 [ 1331.600182] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:33:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2275, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) 16:33:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 34) 16:33:24 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x4000004, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006404000826bd7000fb00df25667a8586ff4bcd629a8985053e6c75f1e1870000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(r2, 0x0, r4, 0x0, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) quotactl(0x9, &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000900)="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") r6 = memfd_create(&(0x7f0000000080)='\x00', 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001e00)={{r6}, 0x0, 0x1e, @inherit={0x68, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000004000000000000000010000000f1ffff040000000000000021000000000000000000000008000000000000000500000000000000d1e3000000000000ff0300000000cd000900000000000000010400000100000000e2ff000000000000000000", @ANYRES32=r6]}, @subvolid=0xd29}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0xc, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000001e0000000579a17ded1100000a000000"], 0x1c}}, 0x0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) 16:33:24 executing program 0: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setfsuid(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r6, &(0x7f0000000040)='./mnt\x00', r7, r8, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './mnt\x00'}) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f2c54b8eb7050b811e0f3a571189bd3d2e8f1710485e4a0ed28e9d74aec430624f8355b1901b5a1e4d71b2a98460e832791e47eff53337bdae5f69b6a8283a4eda496281be9368576e9840e2f78a107218dd8a90c75f0dd11e3793f1c642709edd8ad3d99174401d77629640e8e1ffd6ea29fbe2369cb8f5bdc1958bf1dc85eee056000a6a33075bcce09e6bc1f0960373c3b2028e6ec63d850bb8901fc95d8c6efb7b427afa68eff7142d64f1520b11744a3d13635cc313f539361fab016893", 0xc0}, {&(0x7f00000002c0)="f2ad3aee6616b0158f7b62f61cd64813e671993a9967201522cdbe609c3edd2ef8964eef2ebab0ccefb2f02b4e38fd941c0a5c868010f1c2f0c3cd24e25a3ab0a719f99de6d3caaebe8a37781e8ebd7e1d6d33e84adbc0265d861441499b8d51155639b96cf154dfc6f9177cce29b1f0b57895a05f190ec9b3ac2d76a128e9", 0x7f}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}], 0x40, 0x54}, 0x810) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1, 0x5}, &(0x7f0000000000)=':\x15\x00U\x1bT;\xfa4\x8dd\xa0\x9d&\xb0Z\xdfv\x8b\x84\x87\xa8K\xff\xb5\xce\xb4\xa7\xab\xc6\xf1\a\xdb\xc2m\xb2w\b\xb7*v\xfdo\x83\'\xd9[\xee|4P\xa7\xe8\xad\x82,\xf5\xd1\xea\xdb\xf4\xf5F\xc0H\v\x8d\xbc\x9e)&nH\x032\x15\x80\x19\xc0\fn\xdc\x8dk\xf2\xe4\x80\x9aJ\xe7\xdb\x8e\xd3\x80*i\x82CT\xb3j%\x94\x15\xc6\xc1\xc2\x82\x83\xdc\xf6sqF\x9cX', 0x0) 16:33:24 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 57) 16:33:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2276, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1331.732522] FAULT_INJECTION: forcing a failure. [ 1331.732522] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.735191] CPU: 1 PID: 8945 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1331.736740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.738611] Call Trace: [ 1331.739211] dump_stack+0x107/0x167 [ 1331.740046] should_fail.cold+0x5/0xa [ 1331.740916] ? create_object.isra.0+0x3a/0xa20 [ 1331.741955] should_failslab+0x5/0x20 [ 1331.742812] kmem_cache_alloc+0x5b/0x310 [ 1331.743740] ? __lockdep_reset_lock+0x180/0x180 [ 1331.744794] create_object.isra.0+0x3a/0xa20 [ 1331.745785] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1331.746934] kmem_cache_alloc+0x159/0x310 [ 1331.747890] __kernfs_new_node+0xd4/0x860 [ 1331.748830] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1331.749891] ? kernfs_add_one+0x36e/0x4d0 [ 1331.750834] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.751936] ? wait_for_completion_io+0x270/0x270 [ 1331.753028] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1331.754225] kernfs_new_node+0x18d/0x250 [ 1331.755147] __kernfs_create_file+0x51/0x350 [ 1331.756153] sysfs_add_file_mode_ns+0x221/0x560 [ 1331.757219] internal_create_group+0x324/0xb30 [ 1331.758263] ? sysfs_remove_group+0x170/0x170 [ 1331.759279] ? lockdep_init_map_type+0x2c7/0x780 [ 1331.760367] ? blk_queue_flag_set+0x22/0x30 [ 1331.761339] ? __loop_update_dio+0x2d2/0x690 [ 1331.762336] loop_configure+0x953/0x1410 [ 1331.763266] lo_ioctl+0xa57/0x16b0 [ 1331.764078] ? avc_has_extended_perms+0x7f1/0xf40 [ 1331.765167] ? loop_set_status_old+0x250/0x250 16:33:24 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x10010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1331.766205] ? avc_ss_reset+0x180/0x180 [ 1331.767221] ? find_held_lock+0x2c/0x110 [ 1331.768173] ? __lock_acquire+0xbb1/0x5b00 [ 1331.769191] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1331.770376] ? generic_block_fiemap+0x60/0x60 [ 1331.771400] ? lock_downgrade+0x6d0/0x6d0 [ 1331.772346] ? build_open_flags+0x6f0/0x6f0 [ 1331.773335] ? loop_set_status_old+0x250/0x250 [ 1331.774362] blkdev_ioctl+0x291/0x710 [ 1331.775222] ? blkdev_common_ioctl+0x1930/0x1930 [ 1331.776307] ? selinux_file_ioctl+0xb6/0x270 [ 1331.777305] block_ioctl+0xf9/0x140 [ 1331.778129] ? blkdev_read_iter+0x1c0/0x1c0 [ 1331.779101] __x64_sys_ioctl+0x19a/0x210 [ 1331.780038] do_syscall_64+0x33/0x40 [ 1331.780881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1331.782038] RIP: 0033:0x7eff8aae28d7 [ 1331.782877] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.787040] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.788767] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1331.790377] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1331.792004] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1331.793632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1331.795243] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1331.798554] loop6: detected capacity change from 0 to 2048 [ 1331.805012] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1331.831620] audit: type=1400 audit(1749141204.936:126): avc: denied { relabelto } for pid=8949 comm="syz-executor.7" name="NETLINK" dev="sockfs" ino=30028 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sshd_key_t:s0 tclass=netlink_audit_socket permissive=1 [ 1331.852992] FAULT_INJECTION: forcing a failure. [ 1331.852992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.855927] CPU: 1 PID: 8957 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1331.857489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.859375] Call Trace: [ 1331.859987] dump_stack+0x107/0x167 [ 1331.860829] should_fail.cold+0x5/0xa [ 1331.861693] ? copyout.part.0+0x112/0x140 [ 1331.862642] copy_page_to_iter+0x878/0xf80 [ 1331.863621] blk_rq_unmap_user+0x552/0x750 [ 1331.864608] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1331.865595] sg_finish_rem_req+0x73/0x320 [ 1331.866546] sg_new_read+0x3d1/0x4b0 [ 1331.867393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1331.868884] ? _raw_write_unlock_irq+0x1f/0x30 [ 1331.869950] sg_ioctl_common+0x1f45/0x2570 [ 1331.870925] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1331.872110] ? do_vfs_ioctl+0x283/0x10d0 [ 1331.873025] ? sg_write+0x120/0x120 [ 1331.873849] ? generic_block_fiemap+0x60/0x60 [ 1331.874871] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.875978] ? wait_for_completion_io+0x270/0x270 [ 1331.877085] ? selinux_file_ioctl+0xb6/0x270 [ 1331.878083] ? sg_compat_ioctl+0x120/0x120 [ 1331.879052] sg_ioctl+0x8f/0x120 [ 1331.879835] __x64_sys_ioctl+0x19a/0x210 [ 1331.880754] do_syscall_64+0x33/0x40 [ 1331.881592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1331.882754] RIP: 0033:0x7f16a9b0ab19 16:33:24 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 35) [ 1331.883591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.887961] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.889683] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1331.891292] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1331.892916] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.894529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.896148] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1331.979204] FAULT_INJECTION: forcing a failure. [ 1331.979204] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.981704] CPU: 0 PID: 8965 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1331.983155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.984919] Call Trace: [ 1331.985495] dump_stack+0x107/0x167 [ 1331.986276] should_fail.cold+0x5/0xa [ 1331.987097] ? __kernfs_new_node+0xd4/0x860 [ 1331.988026] should_failslab+0x5/0x20 [ 1331.988848] kmem_cache_alloc+0x5b/0x310 [ 1331.989722] __kernfs_new_node+0xd4/0x860 [ 1331.990615] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1331.991618] ? kernfs_add_one+0x36e/0x4d0 [ 1331.992518] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.993543] ? wait_for_completion_io+0x270/0x270 [ 1331.994577] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1331.995709] kernfs_new_node+0x18d/0x250 [ 1331.996583] __kernfs_create_file+0x51/0x350 [ 1331.997524] sysfs_add_file_mode_ns+0x221/0x560 [ 1331.998526] internal_create_group+0x324/0xb30 [ 1331.999502] ? sysfs_remove_group+0x170/0x170 [ 1332.000469] ? lockdep_init_map_type+0x2c7/0x780 [ 1332.001477] ? blk_queue_flag_set+0x22/0x30 [ 1332.002392] ? __loop_update_dio+0x2d2/0x690 [ 1332.003332] loop_configure+0x953/0x1410 [ 1332.004230] lo_ioctl+0xa57/0x16b0 [ 1332.005129] ? avc_has_extended_perms+0x7f1/0xf40 [ 1332.006165] ? loop_set_status_old+0x250/0x250 [ 1332.007336] ? avc_ss_reset+0x180/0x180 [ 1332.008265] ? find_held_lock+0x2c/0x110 [ 1332.009155] ? __lock_acquire+0xbb1/0x5b00 [ 1332.010111] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1332.011224] ? generic_block_fiemap+0x60/0x60 [ 1332.012187] ? lock_downgrade+0x6d0/0x6d0 [ 1332.013075] ? build_open_flags+0x6f0/0x6f0 [ 1332.014006] ? loop_set_status_old+0x250/0x250 [ 1332.014969] blkdev_ioctl+0x291/0x710 [ 1332.015798] ? blkdev_common_ioctl+0x1930/0x1930 [ 1332.016813] ? selinux_file_ioctl+0xb6/0x270 [ 1332.017758] block_ioctl+0xf9/0x140 [ 1332.018698] ? blkdev_read_iter+0x1c0/0x1c0 [ 1332.019621] __x64_sys_ioctl+0x19a/0x210 [ 1332.020496] do_syscall_64+0x33/0x40 [ 1332.021287] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1332.022371] RIP: 0033:0x7eff8aae28d7 [ 1332.023160] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.027044] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.028671] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1332.030181] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1332.031696] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1332.033203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1332.034714] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1332.037666] loop6: detected capacity change from 0 to 2048 [ 1332.048812] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:33:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2279, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) (fail_nth: 1) 16:33:41 executing program 0: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setfsuid(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r6, &(0x7f0000000040)='./mnt\x00', r7, r8, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './mnt\x00'}) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f2c54b8eb7050b811e0f3a571189bd3d2e8f1710485e4a0ed28e9d74aec430624f8355b1901b5a1e4d71b2a98460e832791e47eff53337bdae5f69b6a8283a4eda496281be9368576e9840e2f78a107218dd8a90c75f0dd11e3793f1c642709edd8ad3d99174401d77629640e8e1ffd6ea29fbe2369cb8f5bdc1958bf1dc85eee056000a6a33075bcce09e6bc1f0960373c3b2028e6ec63d850bb8901fc95d8c6efb7b427afa68eff7142d64f1520b11744a3d13635cc313f539361fab016893", 0xc0}, {&(0x7f00000002c0)="f2ad3aee6616b0158f7b62f61cd64813e671993a9967201522cdbe609c3edd2ef8964eef2ebab0ccefb2f02b4e38fd941c0a5c868010f1c2f0c3cd24e25a3ab0a719f99de6d3caaebe8a37781e8ebd7e1d6d33e84adbc0265d861441499b8d51155639b96cf154dfc6f9177cce29b1f0b57895a05f190ec9b3ac2d76a128e9", 0x7f}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}], 0x40, 0x54}, 0x810) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1, 0x5}, &(0x7f0000000000)=':\x15\x00U\x1bT;\xfa4\x8dd\xa0\x9d&\xb0Z\xdfv\x8b\x84\x87\xa8K\xff\xb5\xce\xb4\xa7\xab\xc6\xf1\a\xdb\xc2m\xb2w\b\xb7*v\xfdo\x83\'\xd9[\xee|4P\xa7\xe8\xad\x82,\xf5\xd1\xea\xdb\xf4\xf5F\xc0H\v\x8d\xbc\x9e)&nH\x032\x15\x80\x19\xc0\fn\xdc\x8dk\xf2\xe4\x80\x9aJ\xe7\xdb\x8e\xd3\x80*i\x82CT\xb3j%\x94\x15\xc6\xc1\xc2\x82\x83\xdc\xf6sqF\x9cX', 0x0) 16:33:41 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:33:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 36) 16:33:41 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r9 = open(&(0x7f0000000380)='./file0\x00', 0x60000, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x208}}, 0xa91) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a, &(0x7f00000001c0)={0x0, 0x5d48, 0x1, 0x3, 0x2e0, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000340)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600041, 0x35) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r10, 0x1) 16:33:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 58) 16:33:41 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{}, {r1, r2+60000000}}, &(0x7f0000000700)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f0000000340)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) timer_gettime(0x0, 0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1348.620153] FAULT_INJECTION: forcing a failure. [ 1348.620153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.623283] CPU: 0 PID: 8980 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1348.625051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.627073] FAULT_INJECTION: forcing a failure. [ 1348.627073] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.627181] Call Trace: [ 1348.627216] dump_stack+0x107/0x167 [ 1348.631098] should_fail.cold+0x5/0xa [ 1348.632088] ? copyout.part.0+0x112/0x140 [ 1348.633165] copy_page_to_iter+0x878/0xf80 [ 1348.634267] blk_rq_unmap_user+0x552/0x750 [ 1348.635367] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1348.636491] sg_finish_rem_req+0x73/0x320 [ 1348.637529] sg_new_read+0x3d1/0x4b0 [ 1348.638325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1348.639432] ? _raw_write_unlock_irq+0x1f/0x30 [ 1348.640410] sg_ioctl_common+0x1f45/0x2570 [ 1348.641311] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1348.642401] ? do_vfs_ioctl+0x283/0x10d0 [ 1348.643260] ? sg_write+0x120/0x120 [ 1348.644033] ? generic_block_fiemap+0x60/0x60 [ 1348.644978] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1348.646001] ? wait_for_completion_io+0x270/0x270 [ 1348.647033] ? selinux_file_ioctl+0xb6/0x270 [ 1348.647966] ? sg_compat_ioctl+0x120/0x120 [ 1348.648860] sg_ioctl+0x8f/0x120 [ 1348.649578] __x64_sys_ioctl+0x19a/0x210 [ 1348.650440] do_syscall_64+0x33/0x40 [ 1348.651230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.652318] RIP: 0033:0x7f16a9b0ab19 [ 1348.653102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.656990] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.658600] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1348.660110] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1348.661619] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.663130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.664652] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1348.666189] CPU: 1 PID: 8982 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1348.667649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.669419] Call Trace: [ 1348.669983] dump_stack+0x107/0x167 [ 1348.670751] should_fail.cold+0x5/0xa [ 1348.671561] ? __kernfs_new_node+0xd4/0x860 [ 1348.672487] should_failslab+0x5/0x20 [ 1348.673288] kmem_cache_alloc+0x5b/0x310 [ 1348.674152] __kernfs_new_node+0xd4/0x860 [ 1348.675039] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1348.676038] ? kernfs_add_one+0x36e/0x4d0 [ 1348.676920] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1348.677939] ? wait_for_completion_io+0x270/0x270 [ 1348.678956] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1348.680076] kernfs_new_node+0x18d/0x250 [ 1348.680934] __kernfs_create_file+0x51/0x350 [ 1348.681861] sysfs_add_file_mode_ns+0x221/0x560 [ 1348.682850] internal_create_group+0x324/0xb30 [ 1348.683829] ? sysfs_remove_group+0x170/0x170 [ 1348.684776] ? lockdep_init_map_type+0x2c7/0x780 [ 1348.685775] ? blk_queue_flag_set+0x22/0x30 [ 1348.686682] ? __loop_update_dio+0x2d2/0x690 [ 1348.687611] loop_configure+0x953/0x1410 [ 1348.688484] lo_ioctl+0xa57/0x16b0 [ 1348.689251] ? avc_has_extended_perms+0x7f1/0xf40 [ 1348.690286] ? loop_set_status_old+0x250/0x250 [ 1348.691274] ? avc_ss_reset+0x180/0x180 [ 1348.692137] ? find_held_lock+0x2c/0x110 [ 1348.693024] ? __lock_acquire+0xbb1/0x5b00 [ 1348.693985] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1348.695105] ? generic_block_fiemap+0x60/0x60 [ 1348.696073] ? lock_downgrade+0x6d0/0x6d0 [ 1348.696960] ? build_open_flags+0x6f0/0x6f0 [ 1348.697889] ? loop_set_status_old+0x250/0x250 [ 1348.698865] blkdev_ioctl+0x291/0x710 [ 1348.699686] ? blkdev_common_ioctl+0x1930/0x1930 [ 1348.700713] ? selinux_file_ioctl+0xb6/0x270 [ 1348.701664] block_ioctl+0xf9/0x140 [ 1348.702446] ? blkdev_read_iter+0x1c0/0x1c0 [ 1348.703379] __x64_sys_ioctl+0x19a/0x210 [ 1348.704260] do_syscall_64+0x33/0x40 [ 1348.705057] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.706152] RIP: 0033:0x7eff8aae28d7 [ 1348.706947] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.710880] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.712527] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1348.714056] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1348.715581] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1348.715963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12 comm=kworker/0:1 [ 1348.717108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1348.717121] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1348.719574] loop6: detected capacity change from 0 to 2048 [ 1348.729745] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:33:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) 16:33:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227a, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 59) 16:33:41 executing program 0: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0x6) keyctl$set_reqkey_keyring(0xe, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setfsuid(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8) r6 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r6, &(0x7f0000000040)='./mnt\x00', r7, r8, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {r7, r8}}, './mnt\x00'}) sendmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f2c54b8eb7050b811e0f3a571189bd3d2e8f1710485e4a0ed28e9d74aec430624f8355b1901b5a1e4d71b2a98460e832791e47eff53337bdae5f69b6a8283a4eda496281be9368576e9840e2f78a107218dd8a90c75f0dd11e3793f1c642709edd8ad3d99174401d77629640e8e1ffd6ea29fbe2369cb8f5bdc1958bf1dc85eee056000a6a33075bcce09e6bc1f0960373c3b2028e6ec63d850bb8901fc95d8c6efb7b427afa68eff7142d64f1520b11744a3d13635cc313f539361fab016893", 0xc0}, {&(0x7f00000002c0)="f2ad3aee6616b0158f7b62f61cd64813e671993a9967201522cdbe609c3edd2ef8964eef2ebab0ccefb2f02b4e38fd941c0a5c868010f1c2f0c3cd24e25a3ab0a719f99de6d3caaebe8a37781e8ebd7e1d6d33e84adbc0265d861441499b8d51155639b96cf154dfc6f9177cce29b1f0b57895a05f190ec9b3ac2d76a128e9", 0x7f}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r8}}}], 0x40, 0x54}, 0x810) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1, 0x5}, &(0x7f0000000000)=':\x15\x00U\x1bT;\xfa4\x8dd\xa0\x9d&\xb0Z\xdfv\x8b\x84\x87\xa8K\xff\xb5\xce\xb4\xa7\xab\xc6\xf1\a\xdb\xc2m\xb2w\b\xb7*v\xfdo\x83\'\xd9[\xee|4P\xa7\xe8\xad\x82,\xf5\xd1\xea\xdb\xf4\xf5F\xc0H\v\x8d\xbc\x9e)&nH\x032\x15\x80\x19\xc0\fn\xdc\x8dk\xf2\xe4\x80\x9aJ\xe7\xdb\x8e\xd3\x80*i\x82CT\xb3j%\x94\x15\xc6\xc1\xc2\x82\x83\xdc\xf6sqF\x9cX', 0x0) 16:33:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 37) 16:33:41 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) connect(0xffffffffffffffff, &(0x7f00000001c0)=@l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0x7, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1348.879818] FAULT_INJECTION: forcing a failure. [ 1348.879818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.882436] CPU: 1 PID: 8999 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1348.883921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.885699] Call Trace: [ 1348.886272] dump_stack+0x107/0x167 [ 1348.887057] should_fail.cold+0x5/0xa [ 1348.887880] ? copyout.part.0+0x112/0x140 [ 1348.888775] copy_page_to_iter+0x878/0xf80 [ 1348.889697] blk_rq_unmap_user+0x552/0x750 [ 1348.890630] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1348.891562] sg_finish_rem_req+0x73/0x320 [ 1348.892471] sg_new_read+0x3d1/0x4b0 [ 1348.893276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1348.894408] ? _raw_write_unlock_irq+0x1f/0x30 [ 1348.895397] sg_ioctl_common+0x1f45/0x2570 [ 1348.896321] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1348.897429] ? do_vfs_ioctl+0x283/0x10d0 [ 1348.898303] ? sg_write+0x120/0x120 [ 1348.899083] ? generic_block_fiemap+0x60/0x60 [ 1348.900059] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1348.901100] ? wait_for_completion_io+0x270/0x270 [ 1348.902151] ? selinux_file_ioctl+0xb6/0x270 [ 1348.903098] ? sg_compat_ioctl+0x120/0x120 [ 1348.904014] sg_ioctl+0x8f/0x120 [ 1348.904748] __x64_sys_ioctl+0x19a/0x210 [ 1348.905623] do_syscall_64+0x33/0x40 [ 1348.906428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.907529] RIP: 0033:0x7f16a9b0ab19 [ 1348.908336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.912301] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.913936] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1348.915470] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1348.917011] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.918543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.920079] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:33:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227b, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1348.937583] FAULT_INJECTION: forcing a failure. [ 1348.937583] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.940077] CPU: 0 PID: 9005 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1348.941563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.943366] Call Trace: [ 1348.943953] dump_stack+0x107/0x167 [ 1348.944754] should_fail.cold+0x5/0xa [ 1348.945595] ? create_object.isra.0+0x3a/0xa20 [ 1348.946596] should_failslab+0x5/0x20 [ 1348.947432] kmem_cache_alloc+0x5b/0x310 [ 1348.948337] create_object.isra.0+0x3a/0xa20 [ 1348.949297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1348.950408] kmem_cache_alloc+0x159/0x310 [ 1348.951333] __kernfs_new_node+0xd4/0x860 [ 1348.952255] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1348.953295] ? kernfs_add_one+0x36e/0x4d0 [ 1348.954207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1348.955260] ? wait_for_completion_io+0x270/0x270 [ 1348.956320] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1348.957470] kernfs_new_node+0x18d/0x250 [ 1348.958356] __kernfs_create_file+0x51/0x350 [ 1348.959321] sysfs_add_file_mode_ns+0x221/0x560 [ 1348.960354] internal_create_group+0x324/0xb30 [ 1348.961360] ? sysfs_remove_group+0x170/0x170 [ 1348.962346] ? lockdep_init_map_type+0x2c7/0x780 [ 1348.963393] ? blk_queue_flag_set+0x22/0x30 [ 1348.964341] ? __loop_update_dio+0x2d2/0x690 [ 1348.965309] loop_configure+0x953/0x1410 [ 1348.966212] lo_ioctl+0xa57/0x16b0 [ 1348.966997] ? avc_has_extended_perms+0x7f1/0xf40 [ 1348.968070] ? loop_set_status_old+0x250/0x250 [ 1348.969074] ? avc_ss_reset+0x180/0x180 [ 1348.969949] ? find_held_lock+0x2c/0x110 [ 1348.970859] ? __lock_acquire+0xbb1/0x5b00 [ 1348.971865] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1348.973020] ? generic_block_fiemap+0x60/0x60 [ 1348.974001] ? lock_downgrade+0x6d0/0x6d0 [ 1348.974908] ? build_open_flags+0x6f0/0x6f0 [ 1348.975870] ? loop_set_status_old+0x250/0x250 [ 1348.976877] blkdev_ioctl+0x291/0x710 [ 1348.977716] ? blkdev_common_ioctl+0x1930/0x1930 [ 1348.978764] ? selinux_file_ioctl+0xb6/0x270 [ 1348.979739] block_ioctl+0xf9/0x140 [ 1348.980542] ? blkdev_read_iter+0x1c0/0x1c0 [ 1348.981496] __x64_sys_ioctl+0x19a/0x210 [ 1348.982394] do_syscall_64+0x33/0x40 [ 1348.983218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.984358] RIP: 0033:0x7eff8aae28d7 [ 1348.985173] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.989218] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.990896] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1348.992465] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1348.994026] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1348.995596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1348.997159] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:33:42 executing program 0: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x2, 0x6, 0x0, 0xcc3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) acct(0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x62, 0x6, @scatter={0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/164, 0xa4}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000580)=""/140, 0x8c}]}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd", &(0x7f0000000480)=""/253, 0x0, 0x10030, 0x0, &(0x7f0000000340)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="030000000000000000000000dbf57d645b43ab7eecf6a7e7cd33ce337ca1334e1111a81b0f7dd3b3e9e6b952da07ad81bf7ef6f6b1cada49f2244e2b27f12ef25f613a7c258059af393351a8ce8f7cbe1585c5ffcb99b1032fe72a81753a5a073b3c54390cd4eec55394bf683e0e72000d94d153297872b44896b9a2dfd492e4a11988cea08f7af95510d6344194462168319c58ee998ca316ce8edb66266f506ee051159c11fb4266bb2631fe612dc7be613c7befbeb264d8f82fdb42521459563b23a2410235cec14c47195d0dfabe773e11fb73f522c0149b92ce14ccaf4761e9f75b07812ca0499ed0"]) perf_event_open(&(0x7f0000000640)={0x8, 0x80, 0xff, 0x2e, 0xf8, 0x40, 0x0, 0x4, 0x800, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0xa11c, 0x3}, 0x200, 0x200, 0x5, 0xf, 0x3, 0x8, 0x5, 0x0, 0x80, 0x0, 0x401}, 0x0, 0x5, r1, 0x9) unshare(0x20000200) [ 1349.075559] loop6: detected capacity change from 0 to 2048 [ 1349.103482] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1349.140426] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1349.142564] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 1349.143746] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 1349.145618] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 1349.147465] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 1349.149322] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 1349.151164] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 1349.153047] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 1349.154918] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd [ 1349.156275] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1349.246852] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1349.248962] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 1349.250121] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 1349.251972] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 1349.253837] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 1349.255681] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 1349.257548] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 1349.259399] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 1349.261252] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 16:33:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 60) 16:33:59 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:33:59 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "77004a6efdff00002d1ceb7300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) dup3(r1, r0, 0x0) 16:33:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227c, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:59 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, r0, 0x0) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r5, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r8, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001cc0), 0x8f810e4cda7f265d, 0x0) r10 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r10, 0x8000000) io_uring_enter(r10, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f0000001700)=[{&(0x7f00000001c0)={0x18c, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@generic="296e41b2c7edde79d72d291e7a4b47063c781978be2750cc547cb99df6b89b2248e41d2a216fa7cc5bb3af7348fb54bd65b69385840d955bd22b0a6d4153cf65eed6b00a66a096616528df2f65d8d4729182373ceb88854ae1954ee9f73ea741f2a174956d6275ed9cd338168ff89286aefb87633da974e3b85a0f7f00fb22ff9fa7be83a97018754424f8dc99e038c86087cd17c2a91d5bb451b6e86b06e82ddba2", @nested={0xd6, 0x87, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="dcc89f3757ed0d1e9d959f5167077de4d26c0d25fbf3e71a58a86ca5dabe8a7c3df10ef4fb4afb42f777e07b27f715ea7a99e0902e649f6a4e3ca79f4aad87102077a48f6e4646999c758195e87e1f76ed76bd59daa224926c5b15975fdf8a92b4743c2da3e74759bcc74060deec595905029e6906a9ac993ec351e21a4442964f8c3dfb59afe2464cbe71050a876969be9a73c2ff7f4b6ff6f904c32408579fa0811c470e9f943399746f81c30db19b6c68", @typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x3d}]}]}, 0x18c}, {&(0x7f0000001e40)={0x1248, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x8f, 0x0, 0x0, @u32=0x1f}, @generic="114763a2aa91755f9fa6b36b979faeec657250860cd185784833c86b0656510eb8a1fa36ed3b915036c93850ac1ab3ca4201375d044a6a391ecafa767b667b8c7dd5f86ac1630b9f057bb66e21d314a875e773e254062588a6013e975793ae0a2461b4270088dcd01d6295774e69df22b5d1967f3f962ae71569b7968af6c32c5085e3976aa70285aa10302cbce86f74dd1163fd59eb2aa6e63c9c314032135cd573dcf14e26d2ebe78759bf2718", @nested={0x14, 0x7c, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x7f, 0x0, 0x0, @uid}]}, @nested={0x10e6, 0x79, 0x0, 0x1, [@typed={0xc, 0x28, 0x0, 0x0, @u64=0x8}, @generic="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", @typed={0x99, 0x17, 0x0, 0x0, @binary="48b34e1e1a5015cbbc75346aa3e4d518c764ae64817586cbcbe552af9090c9a9c9130347d458f46dc9fee6796d413f9fa6be6ec4ad798731a3df9da9f3adb7a3b158b336e1511b3e600d8432bf1e2b7fd591a6e8823825b1a44846edc71effca6a1728ec56af2b1c034f8928393a0a6f7c0fe8f1e14c421813cc2f25171bb22cea7c8ff23b76abda9738a14c51cdb425d486178f8b"}, @typed={0x8, 0x77, 0x0, 0x0, @u32}, @generic="348a96200265a4dc679db87c57514b2bc433a887d6bfd6df130bee4c5f7f9874fec657ea4495fedb28b69fcaf270e87ee83d"]}, @generic="e700f186f70fb10def908589b9c870997f8984d8de60b4b6bdfbeb5e4aa558dfef35138242dbc4ddc87f9761fe762c0b5fcd0d84dac20a5bafd1fa56541c6680f37f37955600d44fd662bf289c7606d7582e59498e5ad82c28b5124252c02b11e194fcdd455659c7e6ed1f61819e3ccca265afb0af6443f20c3f89799b04940e801cb54334"]}, 0x1248}], 0x2, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, r5, r0, r8, r0, r1, r9]}}, @rights={{0x18, 0x1, 0x1, [r0, r10]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0xe8, 0x810}, 0x880) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) openat(r11, &(0x7f0000000100)='./file0\x00', 0x30140, 0x94) statfs(0x0, 0x0) 16:33:59 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 38) 16:33:59 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) io_uring_enter(r4, 0x35c, 0x1ecb, 0x1, &(0x7f0000000140)={[0x2]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:33:59 executing program 7: unlink(&(0x7f0000000080)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa44) close(0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x192) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x2c0900, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x7ffffff}, {0x6}]}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x7ffffff}, {0x6}]}, 0x10) r4 = getpgrp(0x0) pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x20, 0x7a, 0x8, 0x8, 0x0, 0x8c7a, 0x20040, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x40104, 0x6, 0x8, 0x9, 0x9, 0x2, 0xfb2c, 0x0, 0xf4, 0x0, 0x9d1}, r4, 0xd, r1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@empty}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0x1c) [ 1366.322658] FAULT_INJECTION: forcing a failure. [ 1366.322658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.324084] CPU: 0 PID: 9034 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1366.324857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.325805] Call Trace: [ 1366.326120] dump_stack+0x107/0x167 [ 1366.326543] should_fail.cold+0x5/0xa [ 1366.326982] ? copyout.part.0+0x112/0x140 [ 1366.327456] copy_page_to_iter+0x878/0xf80 [ 1366.327949] blk_rq_unmap_user+0x552/0x750 [ 1366.328449] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1366.328948] sg_finish_rem_req+0x73/0x320 [ 1366.329425] sg_new_read+0x3d1/0x4b0 [ 1366.329859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.330464] ? _raw_write_unlock_irq+0x1f/0x30 [ 1366.330987] sg_ioctl_common+0x1f45/0x2570 [ 1366.331475] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1366.332072] ? do_vfs_ioctl+0x283/0x10d0 [ 1366.332545] ? sg_write+0x120/0x120 [ 1366.332962] ? generic_block_fiemap+0x60/0x60 [ 1366.333475] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1366.333660] FAULT_INJECTION: forcing a failure. [ 1366.333660] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.334027] ? wait_for_completion_io+0x270/0x270 [ 1366.334047] ? selinux_file_ioctl+0xb6/0x270 [ 1366.334062] ? sg_compat_ioctl+0x120/0x120 [ 1366.337037] sg_ioctl+0x8f/0x120 [ 1366.337426] __x64_sys_ioctl+0x19a/0x210 [ 1366.337890] do_syscall_64+0x33/0x40 [ 1366.338313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1366.338891] RIP: 0033:0x7f16a9b0ab19 [ 1366.339319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.341421] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1366.342288] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1366.343106] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1366.343921] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1366.344740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.345562] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1366.346397] CPU: 1 PID: 9039 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1366.347291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.348367] Call Trace: [ 1366.348710] dump_stack+0x107/0x167 [ 1366.349194] should_fail.cold+0x5/0xa [ 1366.349698] ? create_object.isra.0+0x3a/0xa20 [ 1366.350300] should_failslab+0x5/0x20 [ 1366.350779] kmem_cache_alloc+0x5b/0x310 [ 1366.351291] ? __lockdep_reset_lock+0x180/0x180 [ 1366.351882] create_object.isra.0+0x3a/0xa20 [ 1366.352455] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1366.353099] kmem_cache_alloc+0x159/0x310 [ 1366.353644] __kernfs_new_node+0xd4/0x860 [ 1366.354168] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 1366.354761] ? kernfs_add_one+0x36e/0x4d0 [ 1366.355298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1366.355917] ? wait_for_completion_io+0x270/0x270 [ 1366.356532] ? kernfs_next_descendant_post+0x1a7/0x2a0 [ 1366.357195] kernfs_new_node+0x18d/0x250 [ 1366.357712] __kernfs_create_file+0x51/0x350 [ 1366.358278] sysfs_add_file_mode_ns+0x221/0x560 [ 1366.358879] internal_create_group+0x324/0xb30 [ 1366.359467] ? sysfs_remove_group+0x170/0x170 [ 1366.360042] ? lockdep_init_map_type+0x2c7/0x780 [ 1366.360647] ? blk_queue_flag_set+0x22/0x30 [ 1366.361204] ? __loop_update_dio+0x2d2/0x690 [ 1366.361761] loop_configure+0x953/0x1410 [ 1366.362292] lo_ioctl+0xa57/0x16b0 [ 1366.362746] ? avc_has_extended_perms+0x7f1/0xf40 [ 1366.363370] ? loop_set_status_old+0x250/0x250 [ 1366.363952] ? avc_ss_reset+0x180/0x180 [ 1366.364468] ? find_held_lock+0x2c/0x110 [ 1366.364983] ? __lock_acquire+0xbb1/0x5b00 [ 1366.365555] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1366.366218] ? generic_block_fiemap+0x60/0x60 [ 1366.366778] ? lock_downgrade+0x6d0/0x6d0 [ 1366.367298] ? build_open_flags+0x6f0/0x6f0 [ 1366.367849] ? loop_set_status_old+0x250/0x250 [ 1366.368422] blkdev_ioctl+0x291/0x710 [ 1366.368905] ? blkdev_common_ioctl+0x1930/0x1930 [ 1366.369505] ? selinux_file_ioctl+0xb6/0x270 [ 1366.370063] block_ioctl+0xf9/0x140 [ 1366.370513] ? blkdev_read_iter+0x1c0/0x1c0 [ 1366.371065] __x64_sys_ioctl+0x19a/0x210 [ 1366.371580] do_syscall_64+0x33/0x40 [ 1366.372063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1366.372700] RIP: 0033:0x7eff8aae28d7 [ 1366.373172] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.375467] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1366.376424] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1366.377311] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1366.378201] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1366.379086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1366.379986] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1366.387741] loop6: detected capacity change from 0 to 2048 16:33:59 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:33:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 61) 16:33:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227d, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:33:59 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) io_uring_enter(r4, 0x4c07, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10010, r4, 0x8000000) syz_io_uring_setup(0x2548, &(0x7f0000000200)={0x0, 0x414e, 0x0, 0x2, 0x95, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000340)=0x0) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) io_uring_enter(r7, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r7}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x30, r4, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:33:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') lseek(r1, 0xfffffffffffffffa, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000180)) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x13, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) dup2(r0, r2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x240200, 0x12345, {0x0, r4}}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x3}, 0x100) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x2, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x91) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x4000000) [ 1366.468149] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:33:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227c, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1366.483461] FAULT_INJECTION: forcing a failure. [ 1366.483461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.484899] CPU: 0 PID: 9057 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1366.485686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1366.486635] Call Trace: [ 1366.486943] dump_stack+0x107/0x167 [ 1366.487358] should_fail.cold+0x5/0xa [ 1366.487793] ? copyout.part.0+0x112/0x140 [ 1366.488275] copy_page_to_iter+0x878/0xf80 [ 1366.488763] blk_rq_unmap_user+0x552/0x750 [ 1366.489252] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1366.489750] sg_finish_rem_req+0x73/0x320 [ 1366.490225] sg_new_read+0x3d1/0x4b0 [ 1366.490651] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1366.491248] ? _raw_write_unlock_irq+0x1f/0x30 [ 1366.491770] sg_ioctl_common+0x1f45/0x2570 [ 1366.492261] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1366.492858] ? do_vfs_ioctl+0x283/0x10d0 [ 1366.493322] ? sg_write+0x120/0x120 [ 1366.493739] ? generic_block_fiemap+0x60/0x60 [ 1366.494251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1366.494802] ? wait_woken+0x250/0x250 [ 1366.495235] ? wait_for_completion_io+0x270/0x270 [ 1366.495794] ? selinux_file_ioctl+0xb6/0x270 [ 1366.496308] ? sg_compat_ioctl+0x120/0x120 [ 1366.496789] sg_ioctl+0x8f/0x120 [ 1366.497177] __x64_sys_ioctl+0x19a/0x210 [ 1366.497640] do_syscall_64+0x33/0x40 [ 1366.498061] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1366.498648] RIP: 0033:0x7f16a9b0ab19 [ 1366.499075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1366.501166] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1366.502041] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1366.502858] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1366.503677] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1366.504496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1366.505316] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:34:13 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) 16:34:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000200000000005b07957d07000000c4048f01000000001c0000000000000000000000080000004123de4aa64e0f23c7d1c722a785a20364101b771da3dfacf9260d9332b49e79f16c6203edc4596dba5faccb96cb2d361eec34c0bcab7cfba102ca81fa43e93375df939f6cba43739728d9f09885aad4c873c4d571242332d43e57f6c91cd08cdcf34a", @ANYRES32=r8], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x1) copy_file_range(r5, 0x0, r4, 0x0, 0x10001, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r9, 0x0, 0x20d315) 16:34:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227e, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 39) 16:34:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:34:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 62) 16:34:13 executing program 0: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c00, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r3, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) tee(r3, r0, 0x7, 0x9) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100000, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x40004e20}, 0x2c, {[{@posixacl}, {@mmap}, {@nodevmap}, {@afid={'afid', 0x3d, 0x7}}], [{@subj_user={'subj_user', 0x3d, 'R'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '/\'[\\,'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}}) 16:34:13 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r6, 0x8000000) io_uring_enter(r6, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) r7 = getpgrp(0x0) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x0, 0x0, 0x5, 0x1}, r7, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_IO(r10, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x0) statfs(0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000000)) 16:34:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) [ 1380.108184] FAULT_INJECTION: forcing a failure. [ 1380.108184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.110930] CPU: 1 PID: 9075 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1380.112477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.114351] Call Trace: [ 1380.114950] dump_stack+0x107/0x167 [ 1380.115769] should_fail.cold+0x5/0xa [ 1380.116631] ? copyout.part.0+0x112/0x140 [ 1380.117567] copy_page_to_iter+0x878/0xf80 [ 1380.118527] blk_rq_unmap_user+0x552/0x750 [ 1380.119490] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1380.120474] sg_finish_rem_req+0x73/0x320 [ 1380.121408] sg_new_read+0x3d1/0x4b0 [ 1380.122243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1380.123423] ? _raw_write_unlock_irq+0x1f/0x30 [ 1380.124460] sg_ioctl_common+0x1f45/0x2570 [ 1380.125429] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1380.126621] ? do_vfs_ioctl+0x283/0x10d0 [ 1380.127532] ? sg_write+0x120/0x120 [ 1380.128365] ? generic_block_fiemap+0x60/0x60 [ 1380.129375] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1380.130461] ? wait_for_completion_io+0x270/0x270 [ 1380.131552] ? selinux_file_ioctl+0xb6/0x270 [ 1380.132562] ? sg_compat_ioctl+0x120/0x120 [ 1380.133514] sg_ioctl+0x8f/0x120 [ 1380.134281] __x64_sys_ioctl+0x19a/0x210 [ 1380.135206] do_syscall_64+0x33/0x40 [ 1380.136042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.137205] RIP: 0033:0x7f16a9b0ab19 [ 1380.138038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.142184] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.143915] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1380.145536] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1380.147139] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1380.148747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1380.150342] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1380.201728] loop6: detected capacity change from 0 to 2048 [ 1380.202521] FAULT_INJECTION: forcing a failure. [ 1380.202521] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.203973] CPU: 1 PID: 9090 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1380.204853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.205904] Call Trace: [ 1380.206250] dump_stack+0x107/0x167 [ 1380.206720] should_fail.cold+0x5/0xa [ 1380.207215] ? kobject_uevent_env+0x22b/0xfd0 [ 1380.207792] ? dev_uevent_filter+0xd0/0xd0 [ 1380.208348] should_failslab+0x5/0x20 [ 1380.208841] kmem_cache_alloc_trace+0x55/0x320 [ 1380.209432] ? dev_uevent_filter+0xd0/0xd0 [ 1380.209975] kobject_uevent_env+0x22b/0xfd0 [ 1380.210530] ? get_disk_and_module+0xf0/0xf0 [ 1380.211095] ? blk_queue_flag_set+0x22/0x30 [ 1380.211645] ? __loop_update_dio+0x2d2/0x690 [ 1380.212276] loop_configure+0x1118/0x1410 [ 1380.212825] lo_ioctl+0xa57/0x16b0 [ 1380.213289] ? avc_has_extended_perms+0x7f1/0xf40 [ 1380.214146] ? loop_set_status_old+0x250/0x250 [ 1380.214742] ? avc_ss_reset+0x180/0x180 [ 1380.215256] ? find_held_lock+0x2c/0x110 [ 1380.215783] ? __lock_acquire+0xbb1/0x5b00 [ 1380.216747] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1380.218073] ? generic_block_fiemap+0x60/0x60 [ 1380.219217] ? lock_downgrade+0x6d0/0x6d0 [ 1380.220274] ? build_open_flags+0x6f0/0x6f0 [ 1380.221260] ? loop_set_status_old+0x250/0x250 [ 1380.222283] blkdev_ioctl+0x291/0x710 [ 1380.223143] ? blkdev_common_ioctl+0x1930/0x1930 [ 1380.224234] ? selinux_file_ioctl+0xb6/0x270 [ 1380.225253] block_ioctl+0xf9/0x140 [ 1380.226075] ? blkdev_read_iter+0x1c0/0x1c0 [ 1380.227082] __x64_sys_ioctl+0x19a/0x210 [ 1380.228012] do_syscall_64+0x33/0x40 [ 1380.228881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.230029] RIP: 0033:0x7eff8aae28d7 [ 1380.230881] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.235065] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.236785] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1380.238428] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1380.240064] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1380.241683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1380.243319] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1380.255596] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:34:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) 16:34:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227f, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:13 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r4, &(0x7f0000000140)='./file0\x00', 0x1e4) 16:34:13 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 40) 16:34:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227d, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:13 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:34:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 63) 16:34:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x98, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) [ 1380.462943] loop6: detected capacity change from 0 to 2048 [ 1380.464534] FAULT_INJECTION: forcing a failure. [ 1380.464534] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.467300] CPU: 1 PID: 9109 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1380.468885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.470895] Call Trace: [ 1380.471513] dump_stack+0x107/0x167 [ 1380.472346] should_fail.cold+0x5/0xa [ 1380.473249] ? create_object.isra.0+0x3a/0xa20 [ 1380.474317] should_failslab+0x5/0x20 [ 1380.475301] kmem_cache_alloc+0x5b/0x310 [ 1380.476241] create_object.isra.0+0x3a/0xa20 [ 1380.477247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1380.478456] kmem_cache_alloc_trace+0x151/0x320 [ 1380.479523] ? dev_uevent_filter+0xd0/0xd0 [ 1380.480520] kobject_uevent_env+0x22b/0xfd0 [ 1380.481611] ? get_disk_and_module+0xf0/0xf0 [ 1380.482631] ? blk_queue_flag_set+0x22/0x30 [ 1380.483615] ? __loop_update_dio+0x2d2/0x690 [ 1380.484636] loop_configure+0x1118/0x1410 [ 1380.485615] lo_ioctl+0xa57/0x16b0 [ 1380.486422] ? avc_has_extended_perms+0x7f1/0xf40 [ 1380.487486] ? loop_set_status_old+0x250/0x250 [ 1380.488540] ? avc_ss_reset+0x180/0x180 [ 1380.489443] ? find_held_lock+0x2c/0x110 [ 1380.490388] ? __lock_acquire+0xbb1/0x5b00 [ 1380.491444] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1380.492657] ? generic_block_fiemap+0x60/0x60 [ 1380.493700] ? lock_downgrade+0x6d0/0x6d0 [ 1380.494643] ? build_open_flags+0x6f0/0x6f0 [ 1380.495662] ? loop_set_status_old+0x250/0x250 [ 1380.496716] blkdev_ioctl+0x291/0x710 [ 1380.497618] ? blkdev_common_ioctl+0x1930/0x1930 [ 1380.498697] ? selinux_file_ioctl+0xb6/0x270 [ 1380.499718] block_ioctl+0xf9/0x140 [ 1380.500570] ? blkdev_read_iter+0x1c0/0x1c0 [ 1380.501578] __x64_sys_ioctl+0x19a/0x210 [ 1380.502511] do_syscall_64+0x33/0x40 [ 1380.503366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.504569] RIP: 0033:0x7eff8aae28d7 [ 1380.505419] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.509663] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.511421] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1380.513067] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1380.514717] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1380.516355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1380.517971] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1380.531502] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1380.574074] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1380.575862] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1380.578879] FAULT_INJECTION: forcing a failure. [ 1380.578879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.581600] CPU: 1 PID: 9121 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1380.583162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1380.585066] Call Trace: [ 1380.585687] dump_stack+0x107/0x167 [ 1380.586696] should_fail.cold+0x5/0xa [ 1380.587609] ? copyout.part.0+0x112/0x140 [ 1380.588609] copy_page_to_iter+0x878/0xf80 [ 1380.589602] blk_rq_unmap_user+0x552/0x750 [ 1380.590597] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1380.591615] sg_finish_rem_req+0x73/0x320 [ 1380.592586] sg_new_read+0x3d1/0x4b0 [ 1380.593445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1380.594642] ? _raw_write_unlock_irq+0x1f/0x30 [ 1380.595693] sg_ioctl_common+0x1f45/0x2570 [ 1380.596670] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1380.597817] ? do_vfs_ioctl+0x283/0x10d0 [ 1380.598739] ? sg_write+0x120/0x120 [ 1380.599555] ? generic_block_fiemap+0x60/0x60 [ 1380.600592] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1380.601685] ? wait_for_completion_io+0x270/0x270 [ 1380.602792] ? selinux_file_ioctl+0xb6/0x270 [ 1380.603786] ? sg_compat_ioctl+0x120/0x120 [ 1380.605011] sg_ioctl+0x8f/0x120 [ 1380.605884] __x64_sys_ioctl+0x19a/0x210 [ 1380.606968] do_syscall_64+0x33/0x40 [ 1380.607913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1380.609229] RIP: 0033:0x7f16a9b0ab19 [ 1380.610081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1380.614231] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1380.615949] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1380.617572] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1380.619177] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1380.620790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1380.622394] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:34:29 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 41) 16:34:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2282, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:29 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000004600)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=r2, @ANYBLOB="000000b5"], 0x28}}], 0x1, 0x0) 16:34:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 64) 16:34:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227d, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@permit_directio}]}}) 16:34:29 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x3139, &(0x7f00000001c0)={0x0, 0xf5bd, 0x8, 0x3, 0x211, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x48ed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000340)={0x0, 0xb, 0x8001, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={r4, 0x1, 0xa2, 0x1}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:34:29 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x40, 0xff, 0x0, 0x8, 0x0, 0x1, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7f}, 0x2000, 0x7, 0xac, 0x5, 0x70, 0x7f, 0x3, 0x0, 0x1f, 0x0, 0xcc7}, 0x0, 0xa, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xad, 0x3, 0x5, 0x20, 0x0, 0xc79, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x5, 0x7}, 0x1, 0x2, 0x5, 0x3, 0x2, 0x4, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffa7}, 0x0, 0xc, r1, 0x2) statfs(0x0, 0x0) [ 1395.953857] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1395.955639] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1395.963434] FAULT_INJECTION: forcing a failure. [ 1395.963434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.966204] CPU: 1 PID: 9139 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1395.967764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1395.969682] Call Trace: [ 1395.970296] dump_stack+0x107/0x167 [ 1395.971141] should_fail.cold+0x5/0xa [ 1395.972027] ? copyout.part.0+0x112/0x140 [ 1395.972998] copy_page_to_iter+0x878/0xf80 [ 1395.973993] blk_rq_unmap_user+0x552/0x750 [ 1395.974981] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1395.976000] sg_finish_rem_req+0x73/0x320 [ 1395.976965] sg_new_read+0x3d1/0x4b0 [ 1395.977850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1395.979053] ? _raw_write_unlock_irq+0x1f/0x30 [ 1395.980102] sg_ioctl_common+0x1f45/0x2570 [ 1395.981084] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1395.982269] ? do_vfs_ioctl+0x283/0x10d0 [ 1395.983227] ? sg_write+0x120/0x120 [ 1395.984066] ? generic_block_fiemap+0x60/0x60 [ 1395.985109] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1395.986222] ? wait_for_completion_io+0x270/0x270 [ 1395.987356] ? selinux_file_ioctl+0xb6/0x270 [ 1395.988373] ? sg_compat_ioctl+0x120/0x120 [ 1395.989348] sg_ioctl+0x8f/0x120 [ 1395.990135] __x64_sys_ioctl+0x19a/0x210 [ 1395.991082] do_syscall_64+0x33/0x40 [ 1395.991946] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1395.993134] RIP: 0033:0x7f16a9b0ab19 [ 1395.993994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1395.998184] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.999933] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1396.001567] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1396.003195] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.004842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.006463] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1396.030057] loop6: detected capacity change from 0 to 2048 [ 1396.031665] FAULT_INJECTION: forcing a failure. [ 1396.031665] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.034271] CPU: 1 PID: 9132 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1396.035823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1396.037704] Call Trace: [ 1396.038321] dump_stack+0x107/0x167 [ 1396.039170] should_fail.cold+0x5/0xa [ 1396.040057] ? kobject_get_path+0xc5/0x1f0 [ 1396.041048] should_failslab+0x5/0x20 [ 1396.041925] __kmalloc+0x72/0x390 [ 1396.042724] ? trace_hardirqs_on+0x5b/0x180 [ 1396.043721] kobject_get_path+0xc5/0x1f0 [ 1396.044682] kobject_uevent_env+0x251/0xfd0 [ 1396.045675] ? blk_queue_flag_set+0x22/0x30 [ 1396.046664] ? __loop_update_dio+0x2d2/0x690 [ 1396.047687] loop_configure+0x1118/0x1410 [ 1396.048674] lo_ioctl+0xa57/0x16b0 [ 1396.049496] ? avc_has_extended_perms+0x7f1/0xf40 [ 1396.050617] ? loop_set_status_old+0x250/0x250 [ 1396.051669] ? avc_ss_reset+0x180/0x180 [ 1396.052626] ? __lock_acquire+0xbb1/0x5b00 [ 1396.053656] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1396.054849] ? generic_block_fiemap+0x60/0x60 [ 1396.055874] ? lock_downgrade+0x6d0/0x6d0 [ 1396.056842] ? loop_set_status_old+0x250/0x250 [ 1396.057888] blkdev_ioctl+0x291/0x710 [ 1396.058761] ? blkdev_common_ioctl+0x1930/0x1930 [ 1396.059854] ? selinux_file_ioctl+0xb6/0x270 [ 1396.060885] block_ioctl+0xf9/0x140 [ 1396.061725] ? blkdev_read_iter+0x1c0/0x1c0 [ 1396.062711] __x64_sys_ioctl+0x19a/0x210 [ 1396.063647] do_syscall_64+0x33/0x40 [ 1396.064511] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1396.065685] RIP: 0033:0x7eff8aae28d7 [ 1396.066536] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1396.070724] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1396.072463] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 16:34:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) 16:34:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) r0 = getpgrp(0x0) pidfd_open(r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/pps', 0x202, 0x40) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xa3, 0x3f, 0x1, 0x9, 0x0, 0xfffffffffffffffc, 0x412, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x3}, 0x1, 0x3, 0x1, 0x6, 0x8, 0x6, 0x1, 0x0, 0x2, 0x0, 0x5}, r0, 0x1, r1, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x90) 16:34:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x227d, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2283, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) [ 1396.074091] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1396.075957] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1396.077587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1396.079215] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:34:29 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat(r0, &(0x7f0000000480)='./file0\x00', 0x204040, 0x50) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xcd202000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = getpgrp(0x0) prlimit64(r3, 0x6, &(0x7f0000000100)={0x1}, &(0x7f0000000200)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x81403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4, 0x100000000002, 0xfffffffc, 0x2, 0x3, 0x40000400, 0xfffe, 0x0, 0x0, 0x0, 0x7f}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) sendfile(0xffffffffffffffff, r4, 0x0, 0x3) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x44}, 0x1, 0x0, 0x0, 0x48011}, 0x4000801) pwrite64(r6, &(0x7f00000000c0)="04", 0x1, 0x3ff03) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x58, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b58f1c4e6f"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c23d5450b8f55a74e69645eef1"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(r3, 0xb, &(0x7f0000000000)={0x8001, 0x6}, &(0x7f0000000400)) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xff, 0x3, 0x12, 0x14, "89f5e098115db60136d1d378e45f29636f0a74d7fd2b954ac53340fa745e40721eec0c08b7d035177b2bf6830e4e381a21ec2040793bae1a3f3ff60b4feb9ee1", "bf1047a99b9c26db92c45dc422ff6a112317d290329812cbd09ae21835b7290d", [0x3, 0x8]}) sendfile(r2, r0, 0x0, 0xffffffff000) 16:34:29 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0) 16:34:29 executing program 3: syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r4, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x600}, 0x1}, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r6 = fcntl$dupfd(r0, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x3ff}) faccessat(r5, &(0x7f0000000240)='./file0\x00', 0x8) r7 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1396.349213] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:34:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 65) 16:34:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2284, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:43 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1a10c0, 0x1ca) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = syz_open_procfs(0x0, 0x0) lseek(r1, 0xfffffffffffffffa, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f0000000580)='pagemap\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00210c00000000000000000aff0f000000000000000000140001"], 0x30}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0x2000) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000005c0)) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/auth_rpcgss', 0x40, 0x20) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000480), &(0x7f00000004c0)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="86881d18e0a4634dca41639461d6930fc5a1", 0x12, 0x400, &(0x7f0000000240)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00']) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000002c0)=ANY=[@ANYBLOB='gid', @ANYRESHEX=0x0, @ANYBLOB="2c73697a653d6b256d2d3474c82c6d6f64653d30303030303030303030303030303030303037373032332c6769643d", @ANYRESHEX=0xee00, @ANYBLOB="00040000ff9bd492c35891f93cc82c5208cc4494fe3e98f509c1c3338615e16a81d0bafbc05ac21892e21277a6142459205ead9b70f20dd2bec43edb079c8958f0b8b9313ab1ee5392654f9119f2c9089bc0b39b2a1e8479087932fd4ab56741ce18c3e6caaa5b5a4166c408e5885dd946eb5f9aa9728f5bd3f112c9bc2c12afd9f094101bfd61c9000000007a1f0252fcc51e984699bafd139660222456c09d034f6d0205e2a01b744bfb14cecda511aefc6352b7"]) [ 1410.852155] 9pnet: Insufficient options for proto=fd [ 1410.854221] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1410.856095] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1410.869171] FAULT_INJECTION: forcing a failure. [ 1410.869171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.872167] CPU: 1 PID: 9188 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1410.873896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1410.875817] Call Trace: [ 1410.876435] dump_stack+0x107/0x167 [ 1410.877288] should_fail.cold+0x5/0xa [ 1410.878167] ? copyout.part.0+0x112/0x140 [ 1410.879179] copy_page_to_iter+0x878/0xf80 [ 1410.880284] blk_rq_unmap_user+0x552/0x750 [ 1410.881317] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1410.882363] sg_finish_rem_req+0x73/0x320 [ 1410.883296] sg_new_read+0x3d1/0x4b0 [ 1410.884138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1410.885332] ? _raw_write_unlock_irq+0x1f/0x30 [ 1410.886365] sg_ioctl_common+0x1f45/0x2570 [ 1410.887317] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1410.888480] ? do_vfs_ioctl+0x283/0x10d0 [ 1410.889405] ? sg_write+0x120/0x120 [ 1410.890308] ? generic_block_fiemap+0x60/0x60 [ 1410.891454] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1410.892667] ? wait_for_completion_io+0x270/0x270 [ 1410.893870] ? selinux_file_ioctl+0xb6/0x270 [ 1410.894932] ? sg_compat_ioctl+0x120/0x120 [ 1410.895910] sg_ioctl+0x8f/0x120 [ 1410.896675] __x64_sys_ioctl+0x19a/0x210 [ 1410.897579] do_syscall_64+0x33/0x40 [ 1410.898456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1410.899719] RIP: 0033:0x7f16a9b0ab19 [ 1410.900625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.904831] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.906634] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1410.908330] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1410.910016] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.911735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.913391] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 16:34:43 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 42) 16:34:43 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x3918, &(0x7f00000001c0)={0x0, 0xc110, 0x4, 0x1, 0xf2, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x9d64) r8 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r9, 0x8000000) io_uring_enter(r9, 0x4c07, 0x0, 0x0, 0x0, 0x0) lseek(r9, 0xd51d, 0x3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/kexec_loaded', 0x2001, 0x40) openat(r10, &(0x7f0000000380)='./file0\x00', 0x100, 0x159) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x2, 0x81}}, './file0\x00'}) io_uring_enter(r11, 0x6efe, 0x986e, 0x3, &(0x7f0000000400)={[0x3]}, 0x8) 16:34:43 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) 16:34:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) 16:34:43 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) pwritev2(r0, &(0x7f0000000780)=[{&(0x7f0000000940)="5f40b41f5e714d1476319dd0ff79b5ec2cd6c1a3f8c613a86e5fc79819cef9fed3419d16c603039d82778c6738904fc703bebfafaff3cbc4e43ae7e9ee3cfff4d85d0675498540f09cf9e14ea583f9c3dcd981f5ce9bffbb290d78ad029771af4889fdffc77eaa21d7a1f22cea11708317f8cdaa43ff0ad33cb3c1539740a833722df3987e0cf5611cc3ffccd7230be6abc46055376c5c6dcca757f0400ae9bf681fb61d965dd52dfe88b37c4d7685d0c30b224b3a849179e77e41c26e50f83928407377e6043a976f24d84146d2d7b07573df7f6c30ca18bdde9530fdaaaf18a37a954ac9c27500a10da1272732d1fafbd0a6ed8fd2e8f50ee5d2419950083b1859d337e3345b6738f1841b0b659aabacdd9ba300150d002cce29c9b2b3cf8ec5d055b08dc4afd38c6dd3a21345daa5ac52cbb21f050967e8890e72279d4ba6af39731ef755382c49da04391b5bcea00a419218a794e8893f6d2e8af6bf7ada38caeebdfa172ff1165ee04b8384b4c700e3ef2d965f14d5b4efbc248d4fb5b493b128e7e8d2615a01555059fea98b8b718dadc064ac1b30ce69dc01e107b23e0552f66627aba255c3433ea9b588a8b6c397f15cb9043c055f68a102e61f56c66a4d87c9daf95deed8d80d65657269e6a9908c99c4189ba6d27105a679dec070b19a02a8840ac20528926495b22b21a9322f1999c0237b4a3bf201eb4434bd90575ccf97bfcf2c6945bdb24531a6ff18e8cad354805f189ba8e96eb302fb4826cc94fb0d6f54539c585cd7e73ef914183ebd80b0ffac3b7cb350b2ee04de73cb0fe88d0d6415ccd30c84f1cf3782a3d9a20ec0151eefeb0737ded9af85a9302ee0bf61f189f4a95ebbdd3d2e04ababa6b0fa6ee7840ebf9e50ddf7fa1a7d8288089ef9b63099fd974c4157f4b4dd17b8735361d7dbb4964595e83e3f96fe9d63e87703f645a49cb72ab0b88184dbcb8e178747c4022767cb623bf040402638f13fc096b9da632514a751948c1357a26dbf38f8cbc8e4cd99a2992ca4a60ea6dc149d280ba5ba79b769d13ddcca84c56c3411f03a15e1788fad8082a49f9cea89c9e84caff6955179d3ee6e4e62ca05809c7aa7091c504813e7867f20962adf28595b42b958baf788c0812ab586daabbe99ac14683d3a6c107bed8dd492ed12b893d3084a7274acdc8a5477da20d5d86f9bb6d51ddf4c0adab8dec58b203fbdbb337546a449795724f8bcf9e5152055dd0b7c62610796f5d62de4a6efe1d33a707706abfbac34e14c0b24800a3ff4232fdad35118bb3a00e5215bb47e91ff83c7f2e772592d13e0df2099225a9a659ea8a57b8faa8b2e2edb24583bae40ffb50459064441db32187d2a428774c5f4ed39d42fed2d19ef39da04637622dbc90b361fe820e09d2a3fcfeff2f32b4d31991769c15d8cb7c1ea482145d31fe47cc3cabe2a7818e6b7363bd2ec29372d4752ad20bb4505b3339bb1e175f1556db89170ce23438203793f21ecf4ece593ff1089b8e6f407d2f460c9fac628a494474a5c589c559873003f95a2df823fffb39744e7ac6dc86eedbee8cf8b40bc0fdd6530cb6b4d95ec0cb650986b24f7312058a58506c9c6046114000d6770fce05e462171078ad2b65b334d3304cce5e9f6ec792ef8b6aaa7e7b0959cbe1284e9b3c0321768e1b52e880d0c69122beb0034d925d5b2fc9049181b18bdfa49a803cb937f67066c199f358de9b961863f5aeca565ffc7edc9509bd0695b213da2f2477cf5d7cee61ec61687861c5b572afff3817f8a81bffb943370d4b72e328a29eb95818f6db7a230537814f9dac758fab00bda5105ef7a3f4d829877c32c695d6639926eb7742069d9484203760105ac102551a8c6ee0b67d013e2ba189992f339db2426e0f19ac14cacc99b38a3f32959b37f6e49d76a79eb8fed15258421dbea3d602d345c635ec06792d63ed9a287145e01aa737469e535209dd6178bba211148b201c8c02280fbead581381df6d68c1ce0ce856fc80c236cae3bc0d85fd2fbae7f4d3643281e54c43bea1498335ac1225ce8ed85c1023963c6eb2f9e4c2bbef00c9a1c564509a13c14d4b7df5fc859a89efbc96874af940cbace5f506813955c1d6baac399fd32e7dc8ddc2c7c96157657c928e7a258c6fca8e2d0d9e82a83ba7466fcdaec0f7413906eda88ccefc8943bfc1e1743d05f2f9c6d34880857afb464e19647caac58cbacdbff37f25e4b9f0dc25ce48e10a2b44ca67998ddcfb8474539c8a68c36a79f02d4ae43e7c48c5145e5836da85bab94ce0f6e578770ec2471aae661bd21af2762d93e5cb1692e975e1b733a1097f9714907c894475b18842d25edf578e225560d92c3fc1fb9319a0098f5cf9217e1c5e49baaddb13d21e9757d231de2c84cb80f8ebeffd8126940962cbaffb116dd3c93c62ad1a710bff1edc7368271ceb889fb310f26d06c8464751364e25ba71ea14a7b44b3c0bd0f7b19a5869c1ed0e3e23fbe9b443a5eff0f8b1521546b81aec7839ba061153057478ebfabdd152a66d365bb0dbcda1d03a88f26628c24052b8dd18ab8828c978347fb416937b7795e49e8fdf474e3f4fc15b42cce5f97657dc127ce18a12a3adb4176dba87aaba49728d1a7fda397d05037d1c6f9c43bc0a67b573107386cd25a0ee0b29d269dfcd3c08ea8d6c752387bc776779960a00aa3489f2506a8ba18a2c105169093a3e9df3c74bf08ce415781692df314f95d49f50711252c55f0599456c1e1899090dfc3ab611d3e9d060bf0a057be548d97cd5839ce3413e0dbc250ca6eca891e5d727d6f13d2a0cd58bc6fc19c603c9f68a7ef566013bdc948e1b436653ed387635792f32382983b8a4cd9ef499e154ea8413c921dff97fa17350d7f5dc2584a72bf45e9b19833d3bbd752b3307b456ce04f8e2cbe955a5ae8990d1043ab7da896c5423f62886a174be6402243c5a9dde74c851817484e5c8878511a805eef685dc94d5a4f03fa95383fb1320a9fc24bd372a0400aa181e6cd1a8ac59ecda0e6d3b0d336ea32bad3283566950affcae1f7fd2b702ec231df1e02ece0a90dbf640df8d650239e5df80605b7b08361fb1ea3459e2be2ed57e69dfa9fc6a2f59aa02f04e9f8dcbf68131a7daada3c444e32eb3c7392bacf74c60df32f624b3d1f11af46f5ba120c91c54a0a59aee5e10599b656e3c776dc66e72870419ce78956b4828dfefce9240fdc837a7cb5cf5b0d669e441c778fce5f4a78ab364e6c6dbcf716f5fa4c20dcff6f0c8176a3ac18c10a6050fcd9afdc69dbe47bc93f7a66fdb73b98d9895dcebc2ac66cfd8323a88ed850b4678cbba73c2bd45a6159c7c962c8aeca2ec4d6b28d88bb8888dc2fa1b35bea0b91d1f5ef6510c58f873ff2b67dd875394506fc185e5c04d1c31aeb015ac5ebfe3da4c1a2b4466bab7c62d77336825a5546146e223714d31b17a10c776d57ca8abafd1f3b408732e1462e8c2bdca6c33b6e6fd3e090efb7ee32708c9bb9d660d5804029e3f8d5e6748b8b8cda6bec2ebffd023a9196c7fe89bba6d9e59ebf1c538f94df18b44bddeccb5fc47675a882969357867faaa73fa9d96e90fb83b3fd78950f211579003517d03d9658eb9e4562f07d94cd6b6655684c8d0cc0fa53c56e2ec88033bcdb315d4ce46e35371f7cdebf0fab4faac198533d65a0b606655e2aef399c1b98040c7ba363c1f62ff22fe2a78b0e54e2c678ae49aaf8dd170a0aea5c4cc46eada5bec807e59e88ec261a2ff5436929c320e71743b7ba37235d280466049c567247f511e107c669aaf08a2d3d9f2d2cb9ff2cabcdc02880511ecee06d5d5cbc7ebf8d243597fffce0ca2117e40a011ad178c7e31351ce4f76af19647c781154c75e0a41b3d03e2d818d86340c6a73e3b7200a4d0a958a56bb63e95a2f2bc46c70b5c9eb6964b3994aabb8f2a4b2323c11ba50959d4ec1c09519ee21c27645de6648a1de707c642b9cb2b7e67171cf8a28947ddff10d82e48bd6dab9f4aa4d0894795a85cb98cb2bd2aa9abb2941d511f906e58b0b32c573ceed755fa536eb1237d231d9f024eff66b89f35c27d85dacf71b7e893173bfcf5dce364c5936596e9e5a72aefcb617b5d52eff04367d29c4ddb926346cb4fd60924c761609a520d304a79cb057bd1db8ef5ef6018dc4d3588139b4f39505af5541faa5f2b9f9476a578e598e0595898a48ffe8fda54410ea45394715006439b257cad6b2e9dafa662a96084e2306074b27ece95f6b789170b0cb30cd5c9fd199f26d8bc3d8cd0c272a23cc87afe109c0d916b82f6e9d4dfc8144d0e08c76dc21f0143673efc3ee72c4439c97c3297a9e6658545c909556d6cd1d37d34ffc181e01fc8838279b55c7600e08086a7ee7edd0ba96d7bb2f3ce4d09302152ca47d6aebeefd294f08598a5cd6f3b0ebd0a83a1c518409b72cb596ba767c0b47812072aa6902886c48edd7ac2c334fc7c7cbaa6da23126c9ed04c5d4f4c3be3c097612099a9d2ecdb7b1e59f0f177218daea347f0e2b3526b5f5ca949cfbda15f874241e4d89e53b2adf6b5d8db5575757fbdf4771dd4c7ec84d2930d03ca339fe72a19553ea454a69b2bd8f03024ffa9fed25d872facbf65203bd8711ae4b05de3e2aa94ff0506407ce03b7a5dc11d522087c897d9ac96306f9c62757ce9a47d8625bdea7f7268dcb59cbbc0e6806788c73bdec112c1b7df1ddbfeb8b27afe89278f14e80bdd0d5a2e91d34d85eeaa48d299aab873094a29b7f0ce86a5b139ef5d5a350ba14c503809bad99997e6c7ae03dc816a4e1a1dc82456a45ad6b90ffad903d530b73467ffc0a1bdf5c54ec87abacbc25625073fa3bd3156c290c245c49ac5781485c25d117f6993e2e798e56083549bda455c66fa2c8aaeb849b22a4dd4eb922f56ed16b11c72c9dc676ecfe04eee0ad11aab0be99d7d786dc16e6ca162659ad7ebd3783d836ec84a37e395951b447cf955721c2732d9077b5386e04f8ff7f724e8904711625086523c1050923962d89a0517e1437604f3d6b99721684784a762f7054c2aa70515581e6d42fd063ab5bc7a59c6b9eb59f050424696bb13fcb88c2c415f577570856f4d94bb6efdda0dd38df2849661299e864a6bb8a76261c07374b0961afc2aa2fb4f20bf4a7b6aeb909e98362507c1df16a7a0be256012edc4c17d164caf40aaee1442fba794bf796a86703dbd6d2d8381630a3e9a0caaeb8ad9a780f50023324743277a343377d11172017550efbc72c4144a533d4722038bacda5cfc92d2580df3586f34d186b0ba6fe26fe21a882a319d2bd6d1e779949b09a16f9ab708304b92bdeae96c093fbdea58724889d0be04861bb42d063bde26dc424d87459cca08e285049ee2c7f8e9e84afb966e0baa560fed7fd7e48b57b12858ca8f4a3beddf2c3f0c91263bfbb537bee1d10d4a12191241fd3a272f9fe450cef061e5c44a307531f0858d7173d828eba68f935de19043fdf29f41a87f0ce8843301769c93fc5767bde92f2b099a201af0f5b76ea01fe4e39e456039456b130774fbc1c392b5970f2975514ed3f096894c2428ae095d6912cc1336a997754793da5c5f307b19700d431123a7636e9413c138e5ceb9e7f88d06c78e6883726dc2397f1bb9560abadbe85719c88c4195baa27143472d2ec703434838b6c767eec7e22083d87def7065a691ada9cfb99239551cdc1dcad11de88275aee42db5804779e1b22dc3a5ad7b8c377192061383333c7a01e45513bb1cd2e98a74e74fc6fefc181927e801b4dfcdcec5e", 0x1000}, {&(0x7f0000000040)="c3442580cc299af4d88d06ef6b113d788bffc654fc5944a0ca7d7087ea428e5566cf6334af", 0x25}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000340)="8661651f42a63adff786fea1c356e92f7de93d9c832526692db81cdf22d5bb29ebd58ac240cb216da42145fab5fd716b36cef0628f91d2a5846edaffd5734320ee014550e5a68a1449ae31db992d354ca004eb9853777f8bc775d7f64f490656bfb35f4c2fe29dbb2d2bf8cda388311ec106593afd63c487a8732f951eecbbed504ebe514a1b16ebe401b76972e1eba83cf1a91bed56dea35a509fecf5cd12ea9d2e74eb279a9a9583b1", 0xaa}, {&(0x7f0000000080)}, {&(0x7f0000000500)="1e259ffa62ea41bf7ebbaf219cda5c82ac6f60cc86781e162dfde77637ca7a2788c9dabb9a5acd83d8fcdab5a9f7951e9d6ea016e5d7e24a024ea17da55a7537c92065c789368713d587a923adff96ed47920d61f92a520b4de846aaabaad11a75061c1054c5f7a26420e32711e05f77a7656923a34908e84b5ee8d8b5ad5774d82152f409cb7ba95c3482ac6a917c3324bddada1483453f11264215e8004fb3b2dbc71ba875", 0xa6}, {&(0x7f00000005c0)="06729268a23b1d8d4fa3d2fa1ad85d65f0ae110a59b63ad3fc1cea1e01385d870239157f4463aded9338e228dc927634d1e9491607a722ebcc0a1e4bef0eaac7c85444e7d72531458e0aa2c3aefc18a00314b84edaaacfad8469434642150745fbb9a3d3fb39475f74d06bc03dbea40e9e8634f172a1d4b51272d451c04f5faf2e9fed1e42973677fe2b5af562a2f5f15d610c57fecc42ff205e51a44ac22160cfa773", 0xa3}, {&(0x7f0000000680)="be6f74153fb57fcd47a383525a20ddfac5b71b19cdc12dcaf34cc5aa7e762c5358b005b6db993779cff10778f3787f3d44ad4c229f7c75b8e7fc664cf0980a50d91015ef87291f77c3d9003d89f580ef9e28e9dfffe5ac3ea91eb97dc3ad5cabd61417fb09c1e2546403a1a835e852d1b907caec26f82183051681cfd0e7c582a20f5dbf5db53f6edd7fccfcef13f1af9a7bddf5c873fb8117e40fd0bebd5a279624301df0c4d6035758f9a4ee711c23c63531265d1a4239c38d78fa6301543069820dd09926e3fd43323dc85c2b0419fa4eb9aecdcf85c567173d34a420ad60f1227363bcef67ab34616798", 0xec}, {&(0x7f00000000c0)="ebd328211a19b0d406fc", 0xa}, {&(0x7f0000000400)="56da6ae86a71740b86ec3fdf46d2f5b55900b3260ae30e6e772af73f4c0353a5ee347c60a63417e7a045e043f8f1343ce249f153dc218bc0513566ba51cbcbbd22eb0e9edab34d630776", 0x4a}], 0xa, 0x81, 0x8, 0x1e) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000009, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0xb6ee3011eebb9af1}, 0x200) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="041f003dcf60f0ecb90000008d6df69af408b1a603050200010758"], 0x108) setsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:34:43 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) [ 1410.930393] loop6: detected capacity change from 0 to 2048 [ 1410.932153] FAULT_INJECTION: forcing a failure. [ 1410.932153] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.934877] CPU: 1 PID: 9198 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1410.936450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1410.938293] Call Trace: [ 1410.938915] dump_stack+0x107/0x167 [ 1410.939774] should_fail.cold+0x5/0xa [ 1410.940680] ? create_object.isra.0+0x3a/0xa20 [ 1410.941756] should_failslab+0x5/0x20 [ 1410.942648] kmem_cache_alloc+0x5b/0x310 [ 1410.943603] ? kmem_cache_alloc_trace+0x151/0x320 [ 1410.944747] create_object.isra.0+0x3a/0xa20 [ 1410.945777] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1410.946977] __kmalloc+0x16e/0x390 [ 1410.947827] kobject_get_path+0xc5/0x1f0 [ 1410.948766] kobject_uevent_env+0x251/0xfd0 [ 1410.949920] ? blk_queue_flag_set+0x22/0x30 [ 1410.950926] ? __loop_update_dio+0x2d2/0x690 [ 1410.952152] loop_configure+0x1118/0x1410 [ 1410.953134] lo_ioctl+0xa57/0x16b0 [ 1410.953964] ? avc_has_extended_perms+0x7f1/0xf40 [ 1410.955085] ? loop_set_status_old+0x250/0x250 [ 1410.956143] ? avc_ss_reset+0x180/0x180 [ 1410.957107] ? find_held_lock+0x2c/0x110 [ 1410.958065] ? __lock_acquire+0xbb1/0x5b00 [ 1410.959099] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1410.960304] ? generic_block_fiemap+0x60/0x60 [ 1410.961363] ? lock_downgrade+0x6d0/0x6d0 [ 1410.962322] ? build_open_flags+0x6f0/0x6f0 [ 1410.963430] ? loop_set_status_old+0x250/0x250 [ 1410.964490] blkdev_ioctl+0x291/0x710 [ 1410.965377] ? blkdev_common_ioctl+0x1930/0x1930 [ 1410.966460] ? selinux_file_ioctl+0xb6/0x270 [ 1410.966480] 9pnet: Insufficient options for proto=fd [ 1410.967495] block_ioctl+0xf9/0x140 [ 1410.967518] ? blkdev_read_iter+0x1c0/0x1c0 [ 1410.970084] __x64_sys_ioctl+0x19a/0x210 [ 1410.971035] do_syscall_64+0x33/0x40 [ 1410.971894] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1410.973122] RIP: 0033:0x7eff8aae28d7 [ 1410.974063] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.978356] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.980138] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1410.981797] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1410.983446] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1410.985153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1410.986774] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1410.997328] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:34:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x420880, 0x89, 0x10}, 0x18) 16:34:44 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@permit_directio}]}}) 16:34:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2286, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1411.063382] 9pnet: Insufficient options for proto=fd 16:34:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 43) 16:34:44 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@permit_directio}]}}) 16:34:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 66) 16:34:44 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r0, &(0x7f0000000040)=0x9, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) io_uring_enter(r0, 0x78c0, 0xab07, 0x3, &(0x7f0000000240)={[0x9]}, 0x8) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xb6, &(0x7f0000000440)=""/182}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x2, 0x0, 0x4, 0x0}) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r9, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) bind$802154_raw(r9, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9, {0x9}}, './file0\x00'}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x5, 0x1, 0xfd, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x100, 0x4f3f}, 0x9001, 0x7fffffff, 0x572, 0x3e3b2a0e93c127fa, 0x5, 0x8, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r6, 0x0) [ 1411.138251] 9pnet: Insufficient options for proto=fd [ 1411.147306] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1411.148455] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1411.149811] loop6: detected capacity change from 0 to 2048 [ 1411.150906] FAULT_INJECTION: forcing a failure. [ 1411.150906] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.152819] CPU: 0 PID: 9222 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1411.153798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.154964] Call Trace: [ 1411.155339] dump_stack+0x107/0x167 [ 1411.155857] should_fail.cold+0x5/0xa [ 1411.156406] ? __alloc_skb+0x6d/0x5b0 [ 1411.156961] should_failslab+0x5/0x20 [ 1411.157509] kmem_cache_alloc_node+0x55/0x330 [ 1411.158150] __alloc_skb+0x6d/0x5b0 [ 1411.158669] alloc_uevent_skb+0x7b/0x210 [ 1411.159253] kobject_uevent_env+0x99a/0xfd0 [ 1411.159881] ? blk_queue_flag_set+0x22/0x30 [ 1411.160493] ? __loop_update_dio+0x2d2/0x690 [ 1411.161124] loop_configure+0x1118/0x1410 [ 1411.161718] lo_ioctl+0xa57/0x16b0 [ 1411.162227] ? avc_has_extended_perms+0x7f1/0xf40 [ 1411.162909] ? loop_set_status_old+0x250/0x250 [ 1411.163572] ? avc_ss_reset+0x180/0x180 [ 1411.164136] ? find_held_lock+0x2c/0x110 [ 1411.164722] ? __lock_acquire+0xbb1/0x5b00 [ 1411.165354] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1411.166105] ? generic_block_fiemap+0x60/0x60 [ 1411.166768] ? lock_downgrade+0x6d0/0x6d0 [ 1411.167355] ? build_open_flags+0x6f0/0x6f0 [ 1411.167971] ? loop_set_status_old+0x250/0x250 [ 1411.168621] blkdev_ioctl+0x291/0x710 [ 1411.169167] ? blkdev_common_ioctl+0x1930/0x1930 [ 1411.169858] ? selinux_file_ioctl+0xb6/0x270 [ 1411.170488] block_ioctl+0xf9/0x140 [ 1411.171006] ? blkdev_read_iter+0x1c0/0x1c0 [ 1411.171625] __x64_sys_ioctl+0x19a/0x210 [ 1411.172201] do_syscall_64+0x33/0x40 [ 1411.172743] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.173468] RIP: 0033:0x7eff8aae28d7 [ 1411.173993] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.176613] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.177700] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1411.178711] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1411.179727] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1411.180764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1411.181772] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1411.192089] FAULT_INJECTION: forcing a failure. [ 1411.192089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.193530] CPU: 0 PID: 9226 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1411.194351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.195302] Call Trace: [ 1411.195603] dump_stack+0x107/0x167 [ 1411.196023] should_fail.cold+0x5/0xa [ 1411.196473] ? copyout.part.0+0x112/0x140 [ 1411.196961] copy_page_to_iter+0x878/0xf80 [ 1411.197464] blk_rq_unmap_user+0x552/0x750 [ 1411.197958] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1411.198466] sg_finish_rem_req+0x73/0x320 [ 1411.198943] sg_new_read+0x3d1/0x4b0 [ 1411.199378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.199989] ? _raw_write_unlock_irq+0x1f/0x30 [ 1411.200550] sg_ioctl_common+0x1f45/0x2570 [ 1411.201038] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1411.201642] ? do_vfs_ioctl+0x283/0x10d0 [ 1411.202115] ? sg_write+0x120/0x120 [ 1411.202534] ? generic_block_fiemap+0x60/0x60 [ 1411.203068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1411.203624] ? wait_for_completion_io+0x270/0x270 [ 1411.204183] ? selinux_file_ioctl+0xb6/0x270 [ 1411.204704] ? sg_compat_ioctl+0x120/0x120 [ 1411.205193] sg_ioctl+0x8f/0x120 [ 1411.205583] __x64_sys_ioctl+0x19a/0x210 [ 1411.206057] do_syscall_64+0x33/0x40 [ 1411.206492] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.207078] RIP: 0033:0x7f16a9b0ab19 [ 1411.207515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.209670] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.210536] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1411.211368] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1411.212211] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.213065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.213918] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1411.227288] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:34:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2287, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:34:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 67) 16:34:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 44) 16:34:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201", 0x63, 0x400}, {&(0x7f0000000040)="0000000000000000000000009b170793010040632f8b22abd3973a5403065829d03f744a70a1b9116433773c7870072284def56afb37a1b8454c09e435c0a0fcd49e245c5d6410af23d9840780518d573d4b3eb701c71333ed273e930c84270d8d997d806851f3a9df2dddcbb762508ba1dfe50003de08c4fc70c1ac197e7ed4caabc06f836cec0f8d70b537efd20a0c71621bf2dc6f4f", 0x97, 0x4e0}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="236049862a7c138ea85046aa0cf33e196b6458ea3c07a21be132e85a41cc161dbdb5932d14066bc52fd17655d3e3bca4a5c2a6bfa336948ebb96a687511ea1abb1fa704e7928784608f5f90d2c36a1c7f08a05fd8e8b405192ff9012b4bbb8f6999bf6d7e677cae9e726513badb1c76684ac9746e57b96fe71280dd191fd5c21e20532398a525ac57a4a1c2bc5b4270c0e7a09a5ed0186bd42db8e121a7500b8d108611a8b8889b9233115ccbb20d5fe5ad11f5a75cb109c449b0ccc7d6d29963886172cff917ff67e24f08dc4de8622e6c1a0"]) 16:34:57 executing program 7: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000240)=[{r2, 0x19520}, {r3, 0x9002}, {0xffffffffffffffff, 0xa109}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x104ad}], 0x2, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x3ff, 0x3) lseek(r1, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstat(r1, 0x0) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) io_uring_enter(r5, 0x4c07, 0x0, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r5, &(0x7f0000000040), 0x348, 0x0) sendfile(r1, r4, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 16:34:57 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@permit_directio}]}}) 16:34:57 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ec, 0x900, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xe317}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:34:57 executing program 5: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000100)=""/214) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd_index=0x4, 0x4, &(0x7f0000000000)=""/37, 0x25, 0x8, 0x0, {0x0, r1}}, 0x4800000) statfs(0x0, 0x0) [ 1424.160005] loop0: detected capacity change from 0 to 2048 [ 1424.174221] EXT4-fs (loop0): Unrecognized mount option "#`I†*|Ž¨PFª ó>kdXê<¢á2èZA̽µ“-kÅ/ÑvUÓ㼤¥Â¦¿£6”Ž»–¦‡Q¡«±úpNy(xFõù" or missing value [ 1424.176065] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1424.176126] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1424.185334] FAULT_INJECTION: forcing a failure. [ 1424.185334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.188136] CPU: 0 PID: 9241 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1424.189691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 16:34:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2288, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1424.191554] Call Trace: [ 1424.192311] dump_stack+0x107/0x167 [ 1424.193150] should_fail.cold+0x5/0xa [ 1424.194010] ? copyout.part.0+0x112/0x140 [ 1424.194957] copy_page_to_iter+0x878/0xf80 [ 1424.195928] blk_rq_unmap_user+0x552/0x750 [ 1424.196904] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1424.197877] sg_finish_rem_req+0x73/0x320 [ 1424.198814] sg_new_read+0x3d1/0x4b0 [ 1424.199661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1424.200842] ? _raw_write_unlock_irq+0x1f/0x30 [ 1424.201874] sg_ioctl_common+0x1f45/0x2570 [ 1424.202830] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1424.203988] ? do_vfs_ioctl+0x283/0x10d0 [ 1424.204907] ? sg_write+0x120/0x120 [ 1424.205722] ? generic_block_fiemap+0x60/0x60 [ 1424.206729] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1424.207806] ? wait_for_completion_io+0x270/0x270 [ 1424.208916] ? selinux_file_ioctl+0xb6/0x270 [ 1424.209907] ? sg_compat_ioctl+0x120/0x120 [ 1424.210860] sg_ioctl+0x8f/0x120 [ 1424.211636] __x64_sys_ioctl+0x19a/0x210 [ 1424.212572] do_syscall_64+0x33/0x40 [ 1424.213407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.214562] RIP: 0033:0x7f16a9b0ab19 [ 1424.215402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.219543] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.221268] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1424.222868] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1424.224468] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1424.226073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1424.227678] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1424.245826] loop6: detected capacity change from 0 to 2048 [ 1424.246835] FAULT_INJECTION: forcing a failure. [ 1424.246835] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.248370] CPU: 1 PID: 9249 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1424.249301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.250420] Call Trace: [ 1424.250791] dump_stack+0x107/0x167 [ 1424.251282] should_fail.cold+0x5/0xa [ 1424.251803] ? create_object.isra.0+0x3a/0xa20 [ 1424.252417] should_failslab+0x5/0x20 [ 1424.252939] kmem_cache_alloc+0x5b/0x310 [ 1424.253488] ? kmem_cache_alloc_trace+0x151/0x320 [ 1424.254139] create_object.isra.0+0x3a/0xa20 [ 1424.254726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1424.255413] __kmalloc+0x16e/0x390 [ 1424.255900] kobject_get_path+0xc5/0x1f0 [ 1424.256450] kobject_uevent_env+0x251/0xfd0 [ 1424.257045] ? blk_queue_flag_set+0x22/0x30 [ 1424.257628] ? __loop_update_dio+0x2d2/0x690 [ 1424.258222] loop_configure+0x1118/0x1410 [ 1424.258792] lo_ioctl+0xa57/0x16b0 [ 1424.259274] ? avc_has_extended_perms+0x7f1/0xf40 [ 1424.259929] ? loop_set_status_old+0x250/0x250 [ 1424.260557] ? avc_ss_reset+0x180/0x180 [ 1424.261103] ? find_held_lock+0x2c/0x110 [ 1424.261661] ? __lock_acquire+0xbb1/0x5b00 [ 1424.262271] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1424.262977] ? generic_block_fiemap+0x60/0x60 [ 1424.263578] ? lock_downgrade+0x6d0/0x6d0 [ 1424.264134] ? build_open_flags+0x6f0/0x6f0 [ 1424.264734] ? loop_set_status_old+0x250/0x250 [ 1424.264764] 9pnet: Insufficient options for proto=fd [ 1424.265348] blkdev_ioctl+0x291/0x710 [ 1424.265363] ? blkdev_common_ioctl+0x1930/0x1930 [ 1424.265390] ? selinux_file_ioctl+0xb6/0x270 [ 1424.268283] block_ioctl+0xf9/0x140 [ 1424.268778] ? blkdev_read_iter+0x1c0/0x1c0 [ 1424.269365] __x64_sys_ioctl+0x19a/0x210 [ 1424.269916] do_syscall_64+0x33/0x40 [ 1424.270422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.271112] RIP: 0033:0x7eff8aae28d7 [ 1424.271633] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.274113] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.275137] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1424.276092] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1424.277063] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1424.278025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.278985] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1424.294757] loop0: detected capacity change from 0 to 2048 16:34:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2289, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1424.307431] EXT4-fs (loop0): Unrecognized mount option "#`I†*|Ž¨PFª ó>kdXê<¢á2èZA̽µ“-kÅ/ÑvUÓ㼤¥Â¦¿£6”Ž»–¦‡Q¡«±úpNy(xFõù" or missing value [ 1424.310914] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:34:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 45) 16:34:57 executing program 0: link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000041004d4e2e7900000000"], 0x14}}, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ea, 0x10, 0x0, 0x3aa}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/108, 0x6c}], 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000740)=0x102, 0x4) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)={0x0, 0x7e850000, 0x6, 0x0, 0x0, [{{r1}, 0x800}, {{}, 0x2}, {{r3}, 0x20f}, {{r0}, 0x8}, {{r1}, 0x1ff}, {{r5}, 0xffffbffffffff754}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)={0x14, 0x12, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="880000001400000229bd7000fbdbdf25ac1414aa010000000000000000000000fe80000000000000000000000000002c4e2100064e2100020a00808018000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="bc6b6e00010000000800180019030000080016000800000028001a00fc000000000000000000000000000001ac14143700000000000000000000000002000201"], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) 16:34:57 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x2cfa, &(0x7f00000001c0)={0x0, 0x5722, 0x0, 0x3, 0x22d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:34:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x2, 0xff, 0x39, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast1, 0x40, 0xffa7, 0x40, 0x40}}) connect(r0, &(0x7f0000000300)=@xdp={0x2c, 0x8, r1, 0x2c}, 0x80) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x208400) open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="080000000100000002000000ef070000c63ddc65793bf35f6cba56df6bdac5bfb23b4304fca9ed07befa2fcb49a10cbb657b7cb7fbf9e51f54583170295e657ef49a1196d92c3a1ffcd2c8b0213a8d1be27bc4687e55e5b62639627312643e5abd02b977ebe57ac34e03b6c90b5b8d200a8211fdd5af533a7d0da281965912514ebc67597bb08788fa06781030faa0fbc05421a61bac"], 0x82000) fsmount(r3, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xb4) statfs(0x0, 0x0) pidfd_getfd(r3, r2, 0x0) 16:34:57 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@permit_directio}]}}) [ 1424.465947] loop6: detected capacity change from 0 to 2048 [ 1424.469652] FAULT_INJECTION: forcing a failure. [ 1424.469652] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.472223] CPU: 0 PID: 9274 Comm: syz-executor.6 Not tainted 5.10.237 #1 16:34:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 68) [ 1424.473776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.475810] Call Trace: [ 1424.476426] dump_stack+0x107/0x167 [ 1424.477292] should_fail.cold+0x5/0xa [ 1424.478193] should_failslab+0x5/0x20 [ 1424.479079] __kmalloc_node_track_caller+0x74/0x3b0 [ 1424.480243] ? alloc_uevent_skb+0x7b/0x210 [ 1424.481247] __alloc_skb+0xb1/0x5b0 [ 1424.482099] alloc_uevent_skb+0x7b/0x210 [ 1424.483055] kobject_uevent_env+0x99a/0xfd0 [ 1424.484069] ? blk_queue_flag_set+0x22/0x30 [ 1424.485083] ? __loop_update_dio+0x2d2/0x690 [ 1424.486110] loop_configure+0x1118/0x1410 [ 1424.487093] lo_ioctl+0xa57/0x16b0 [ 1424.487925] ? avc_has_extended_perms+0x7f1/0xf40 [ 1424.489064] ? loop_set_status_old+0x250/0x250 [ 1424.490268] ? avc_ss_reset+0x180/0x180 [ 1424.490333] ? find_held_lock+0x2c/0x110 [ 1424.490372] ? __lock_acquire+0xbb1/0x5b00 [ 1424.490457] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1424.490478] ? generic_block_fiemap+0x60/0x60 [ 1424.490498] ? lock_downgrade+0x6d0/0x6d0 [ 1424.490519] ? build_open_flags+0x6f0/0x6f0 [ 1424.490548] ? loop_set_status_old+0x250/0x250 [ 1424.490566] blkdev_ioctl+0x291/0x710 [ 1424.490588] ? blkdev_common_ioctl+0x1930/0x1930 16:34:57 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) [ 1424.490615] ? selinux_file_ioctl+0xb6/0x270 [ 1424.490642] block_ioctl+0xf9/0x140 [ 1424.490660] ? blkdev_read_iter+0x1c0/0x1c0 [ 1424.490683] __x64_sys_ioctl+0x19a/0x210 [ 1424.490709] do_syscall_64+0x33/0x40 [ 1424.490730] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.490744] RIP: 0033:0x7eff8aae28d7 [ 1424.490764] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.490776] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.490800] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1424.490811] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1424.490823] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 16:34:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x4b47, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1424.490834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.490845] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1424.547648] EXT4-fs (loop6): error: journal path ./file0 is not a block device [ 1424.578762] 9pnet: Insufficient options for proto=fd 16:34:57 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040)=0x1, 0x1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4b39b5a1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) read(r4, &(0x7f00000001c0)=""/138, 0x8a) dup3(r0, r4, 0x80000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:34:57 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 46) 16:34:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x3, 0xf}, 0x18) statfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x50000, 0x151) [ 1424.640248] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1424.641167] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1424.642137] FAULT_INJECTION: forcing a failure. [ 1424.642137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.643475] CPU: 1 PID: 9290 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1424.644272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.645182] Call Trace: [ 1424.645491] dump_stack+0x107/0x167 [ 1424.645911] should_fail.cold+0x5/0xa [ 1424.646355] ? copyout.part.0+0x112/0x140 [ 1424.646839] copy_page_to_iter+0x878/0xf80 [ 1424.647337] blk_rq_unmap_user+0x552/0x750 [ 1424.647835] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1424.648334] sg_finish_rem_req+0x73/0x320 [ 1424.648795] sg_new_read+0x3d1/0x4b0 [ 1424.649233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1424.649843] ? _raw_write_unlock_irq+0x1f/0x30 [ 1424.650345] sg_ioctl_common+0x1f45/0x2570 [ 1424.650835] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1424.651432] ? do_vfs_ioctl+0x283/0x10d0 [ 1424.651897] ? sg_write+0x120/0x120 [ 1424.652295] ? generic_block_fiemap+0x60/0x60 [ 1424.652828] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1424.653355] ? wait_for_completion_io+0x270/0x270 [ 1424.653923] ? selinux_file_ioctl+0xb6/0x270 [ 1424.654429] ? sg_compat_ioctl+0x120/0x120 [ 1424.654918] sg_ioctl+0x8f/0x120 [ 1424.655312] __x64_sys_ioctl+0x19a/0x210 [ 1424.655785] do_syscall_64+0x33/0x40 [ 1424.656219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.656821] RIP: 0033:0x7f16a9b0ab19 [ 1424.657248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.659373] RSP: 002b:00007f16a705f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.660248] RAX: ffffffffffffffda RBX: 00007f16a9c1e020 RCX: 00007f16a9b0ab19 [ 1424.661083] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000004 [ 1424.661906] RBP: 00007f16a705f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1424.662726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1424.663550] R13: 00007fff3b04270f R14: 00007f16a705f300 R15: 0000000000022000 [ 1424.688272] loop6: detected capacity change from 0 to 2048 [ 1424.689101] FAULT_INJECTION: forcing a failure. [ 1424.689101] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.690403] CPU: 1 PID: 9297 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1424.691193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.692141] Call Trace: [ 1424.692453] dump_stack+0x107/0x167 [ 1424.692884] should_fail.cold+0x5/0xa [ 1424.693306] ? create_object.isra.0+0x3a/0xa20 [ 1424.693833] should_failslab+0x5/0x20 [ 1424.694272] kmem_cache_alloc+0x5b/0x310 [ 1424.694741] create_object.isra.0+0x3a/0xa20 [ 1424.695243] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1424.695799] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1424.696385] ? alloc_uevent_skb+0x7b/0x210 [ 1424.696860] __alloc_skb+0xb1/0x5b0 [ 1424.697287] alloc_uevent_skb+0x7b/0x210 [ 1424.697761] kobject_uevent_env+0x99a/0xfd0 [ 1424.698260] ? blk_queue_flag_set+0x22/0x30 [ 1424.698754] ? __loop_update_dio+0x2d2/0x690 [ 1424.699234] loop_configure+0x1118/0x1410 [ 1424.699722] lo_ioctl+0xa57/0x16b0 [ 1424.700133] ? avc_has_extended_perms+0x7f1/0xf40 [ 1424.700696] ? loop_set_status_old+0x250/0x250 [ 1424.701224] ? avc_ss_reset+0x180/0x180 [ 1424.701686] ? find_held_lock+0x2c/0x110 [ 1424.702165] ? __lock_acquire+0xbb1/0x5b00 [ 1424.702686] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1424.703293] ? generic_block_fiemap+0x60/0x60 [ 1424.703810] ? lock_downgrade+0x6d0/0x6d0 [ 1424.704260] ? build_open_flags+0x6f0/0x6f0 [ 1424.704772] ? loop_set_status_old+0x250/0x250 [ 1424.705297] blkdev_ioctl+0x291/0x710 [ 1424.705715] ? blkdev_common_ioctl+0x1930/0x1930 [ 1424.706267] ? selinux_file_ioctl+0xb6/0x270 [ 1424.706783] block_ioctl+0xf9/0x140 [ 1424.707202] ? blkdev_read_iter+0x1c0/0x1c0 [ 1424.707673] __x64_sys_ioctl+0x19a/0x210 [ 1424.708145] do_syscall_64+0x33/0x40 [ 1424.708577] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.709169] RIP: 0033:0x7eff8aae28d7 [ 1424.709601] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.711733] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.712621] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1424.713443] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1424.714218] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1424.715044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1424.715864] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1424.719173] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:35:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x9, 0x0, 0x9, 0x0, 0x5, 0x200, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_config_ext={0xffff, 0x5}, 0x30, 0x4, 0xff, 0x8, 0x7, 0xf1e, 0x1, 0x0, 0x3e7, 0x0, 0x401}, 0xffffffffffffffff, 0x2, r0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xa0201, 0x43, 0x6}, 0x18) close(r1) dup3(0xffffffffffffffff, r1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 16:35:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x4b49, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:35:12 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 16:35:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 47) 16:35:12 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x1e}}, './file0\x00'}) io_uring_enter(r5, 0x78c2, 0xca80, 0x2, &(0x7f0000000140)={[0x8]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:35:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88000) fcntl$dupfd(r0, 0x406, r1) statfs(0x0, 0x0) 16:35:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 69) 16:35:12 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001b80)={'\x00', 0x5f20, 0x40100, 0xb80, 0x0, 0x20000000000000}) r1 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) dup2(r1, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40010) stat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) socket$netlink(0x10, 0x3, 0x15) stat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000001b00)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001a80)={0x0, 0xffffffffffffffff, 0xc0, 0x2, @scatter={0x8, 0x0, &(0x7f0000001940)=[{&(0x7f0000001e00)=""/102400, 0x19000}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000001c00)=""/253, 0xfd}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/119, 0x77}]}, &(0x7f00000019c0)="f8cd04f2ed2a74f68143339ce41dba37036c4b1c11bcfd6d615f2a8c29d2c21a0525646ba67574ec6a4908727186de8845d6883c2d19586487dc1bac30f5010400003f1676bf21064c14abcc838b71f8ad215a8b240690958e2927785c38b4506138602b47b4cbe116e5ec6f20ee1fe40fce5fc8264500754446e0201345ff3d9a0619eee4f9c57c974c56946e1f31df27f4ddd36d38da83040d37c60ed70c715b9e364ab36c6499e9e5b76bfbc571cca02e65c5065912c7699ecc7ee4a8cf53", &(0x7f00000002c0)=""/9, 0x2, 0x0, 0x3, &(0x7f0000000380)}) [ 1439.162865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=12 comm=kworker/0:1 [ 1439.167532] loop6: detected capacity change from 0 to 2048 [ 1439.168554] FAULT_INJECTION: forcing a failure. [ 1439.168554] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.170158] CPU: 0 PID: 9308 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1439.171101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1439.172243] Call Trace: [ 1439.172612] dump_stack+0x107/0x167 [ 1439.173145] should_fail.cold+0x5/0xa [ 1439.173677] should_failslab+0x5/0x20 [ 1439.174205] __kmalloc_node_track_caller+0x74/0x3b0 [ 1439.174891] ? alloc_uevent_skb+0x7b/0x210 [ 1439.175479] __alloc_skb+0xb1/0x5b0 [ 1439.175985] alloc_uevent_skb+0x7b/0x210 [ 1439.176549] kobject_uevent_env+0x99a/0xfd0 [ 1439.177162] ? blk_queue_flag_set+0x22/0x30 [ 1439.177757] ? __loop_update_dio+0x2d2/0x690 [ 1439.178370] loop_configure+0x1118/0x1410 [ 1439.178949] lo_ioctl+0xa57/0x16b0 [ 1439.179443] ? avc_has_extended_perms+0x7f1/0xf40 [ 1439.180123] ? loop_set_status_old+0x250/0x250 [ 1439.180772] ? avc_ss_reset+0x180/0x180 [ 1439.181338] ? find_held_lock+0x2c/0x110 [ 1439.181922] ? __lock_acquire+0xbb1/0x5b00 [ 1439.182543] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1439.183264] ? generic_block_fiemap+0x60/0x60 [ 1439.183881] ? lock_downgrade+0x6d0/0x6d0 [ 1439.184459] ? build_open_flags+0x6f0/0x6f0 [ 1439.185067] ? loop_set_status_old+0x250/0x250 [ 1439.185705] blkdev_ioctl+0x291/0x710 [ 1439.186236] ? blkdev_common_ioctl+0x1930/0x1930 [ 1439.186643] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1439.186890] ? selinux_file_ioctl+0xb6/0x270 [ 1439.186908] block_ioctl+0xf9/0x140 [ 1439.186920] ? blkdev_read_iter+0x1c0/0x1c0 [ 1439.186947] __x64_sys_ioctl+0x19a/0x210 [ 1439.188703] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1439.189229] do_syscall_64+0x33/0x40 [ 1439.189244] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1439.189260] RIP: 0033:0x7eff8aae28d7 [ 1439.190277] FAULT_INJECTION: forcing a failure. [ 1439.190277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.190672] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.198374] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.199426] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1439.200408] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1439.201401] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1439.202377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1439.203355] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1439.204369] CPU: 1 PID: 9321 Comm: syz-executor.2 Not tainted 5.10.237 #1 [ 1439.205968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1439.207880] Call Trace: [ 1439.208499] dump_stack+0x107/0x167 [ 1439.209367] should_fail.cold+0x5/0xa [ 1439.210247] ? copyout.part.0+0x112/0x140 [ 1439.211203] copy_page_to_iter+0x878/0xf80 [ 1439.212205] blk_rq_unmap_user+0x552/0x750 [ 1439.213207] ? blk_rq_map_kern+0x9e0/0x9e0 [ 1439.214210] sg_finish_rem_req+0x73/0x320 16:35:12 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x149300, 0x0) io_uring_enter(r4, 0x175d, 0x721f, 0x3, &(0x7f0000000140)={[0x5]}, 0x8) [ 1439.215165] sg_new_read+0x3d1/0x4b0 [ 1439.216164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1439.217376] ? _raw_write_unlock_irq+0x1f/0x30 [ 1439.218428] sg_ioctl_common+0x1f45/0x2570 [ 1439.219399] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1439.220582] ? do_vfs_ioctl+0x283/0x10d0 [ 1439.221705] ? sg_write+0x120/0x120 [ 1439.222544] ? generic_block_fiemap+0x60/0x60 [ 1439.223566] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1439.224916] ? wait_woken+0x250/0x250 [ 1439.225858] ? wait_for_completion_io+0x270/0x270 [ 1439.227210] ? selinux_file_ioctl+0xb6/0x270 [ 1439.228212] ? sg_compat_ioctl+0x120/0x120 [ 1439.229204] sg_ioctl+0x8f/0x120 [ 1439.229978] __x64_sys_ioctl+0x19a/0x210 [ 1439.230910] do_syscall_64+0x33/0x40 [ 1439.231938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1439.233125] RIP: 0033:0x7f16a9b0ab19 [ 1439.233989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.238140] RSP: 002b:00007f16a7080188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.239864] RAX: ffffffffffffffda RBX: 00007f16a9c1df60 RCX: 00007f16a9b0ab19 [ 1439.241487] RDX: 00000000200003c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 1439.243100] RBP: 00007f16a70801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.244734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1439.246347] R13: 00007fff3b04270f R14: 00007f16a7080300 R15: 0000000000022000 [ 1439.252244] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:35:12 executing program 7: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x100) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto(r1, &(0x7f0000000080)="c4d859cde035a663e53e566cf9f7d2967befebe593b3af00ca3b007c2234af3d07ae93ee508ffefbe53647af0964c71674437b", 0x33, 0x8804, &(0x7f0000000100)=@ll={0x11, 0x17, 0x0, 0x1, 0xff, 0x6, @local}, 0x80) 16:35:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x5382, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:35:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) symlinkat(0x0, 0xffffffffffffff9c, 0x0) statfs(0x0, 0x0) 16:35:12 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) (fail_nth: 48) [ 1439.393152] loop6: detected capacity change from 0 to 2048 [ 1439.394199] FAULT_INJECTION: forcing a failure. [ 1439.394199] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.395903] CPU: 0 PID: 9340 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1439.396862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1439.398008] Call Trace: [ 1439.398377] dump_stack+0x107/0x167 [ 1439.398886] should_fail.cold+0x5/0xa [ 1439.399416] ? create_object.isra.0+0x3a/0xa20 [ 1439.400049] should_failslab+0x5/0x20 [ 1439.400572] kmem_cache_alloc+0x5b/0x310 [ 1439.401156] create_object.isra.0+0x3a/0xa20 [ 1439.401762] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1439.402466] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1439.403191] ? alloc_uevent_skb+0x7b/0x210 [ 1439.403786] __alloc_skb+0xb1/0x5b0 [ 1439.404294] alloc_uevent_skb+0x7b/0x210 [ 1439.404868] kobject_uevent_env+0x99a/0xfd0 [ 1439.405471] ? blk_queue_flag_set+0x22/0x30 [ 1439.406068] ? __loop_update_dio+0x2d2/0x690 [ 1439.406677] loop_configure+0x1118/0x1410 [ 1439.407271] lo_ioctl+0xa57/0x16b0 [ 1439.407772] ? avc_has_extended_perms+0x7f1/0xf40 [ 1439.408446] ? loop_set_status_old+0x250/0x250 [ 1439.409085] ? avc_ss_reset+0x180/0x180 [ 1439.409647] ? find_held_lock+0x2c/0x110 [ 1439.410226] ? __lock_acquire+0xbb1/0x5b00 [ 1439.410856] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1439.411588] ? generic_block_fiemap+0x60/0x60 [ 1439.412225] ? lock_downgrade+0x6d0/0x6d0 [ 1439.412812] ? build_open_flags+0x6f0/0x6f0 [ 1439.413426] ? loop_set_status_old+0x250/0x250 [ 1439.414052] blkdev_ioctl+0x291/0x710 [ 1439.414583] ? blkdev_common_ioctl+0x1930/0x1930 [ 1439.415253] ? selinux_file_ioctl+0xb6/0x270 [ 1439.415880] block_ioctl+0xf9/0x140 [ 1439.416401] ? blkdev_read_iter+0x1c0/0x1c0 [ 1439.417039] __x64_sys_ioctl+0x19a/0x210 [ 1439.417621] do_syscall_64+0x33/0x40 [ 1439.418155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1439.418885] RIP: 0033:0x7eff8aae28d7 [ 1439.419414] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.421985] RSP: 002b:00007eff88057f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.423036] RAX: ffffffffffffffda RBX: 00007eff8ab2c970 RCX: 00007eff8aae28d7 [ 1439.424016] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1439.425006] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1439.425993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1439.426981] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 16:35:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x5385, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) 16:35:12 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="041f003dcf60f0ecb90000008d6df69af403050200010758"], 0x108) setsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8050) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x5, 0x6e, 0x72, 0x7f, 0x0, 0x9b46, 0x40080, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x3b3}, 0xe0, 0x3, 0xfffffff9, 0x0, 0x5, 0xb045, 0x3, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) io_uring_enter(r0, 0x800012d, 0x4, 0x0, 0x0, 0x0) [ 1439.459957] EXT4-fs (loop6): error: journal path ./file0 is not a block device 16:35:12 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$getown(r0, 0x9) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setfsuid(r3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() sendmsg$nl_generic(r1, &(0x7f00000017c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000480)={0x304, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfd, {0x1a}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @uid=r6}]}, @nested={0x0, 0x1e, 0x0, 0x1, [@typed={0x0, 0x57, 0x0, 0x0, @u64=0x26beabc2}, @generic="ef09abd3d9d2085370", @typed={0x0, 0x6d}, @typed={0x0, 0x1d, 0x0, 0x0, @uid=r4}]}, @generic="d103ce51014ab4053b4a5c3e36e3794e194103a5f30be6f2c68207d0255e9bba39b470a74b0908f65186e7582fefdf33f67a3a9e5733fb1c72310855d85fd455809cfa31a32585252d179d9a85e15ca08e8ed45298ea9261a4d1b86a168691e2551d02822978d319a676ca94e02ea7b2b6cfd9ce323ba59d4a3c5a5ad463f421ab3dd3b647641ca8b3dc1fc5", @nested={0x1ae, 0x54, 0x0, 0x1, [@generic="174e9cd79246822d51498346bf26dde3747a6075e6b7fa92e051d666bb2b9996cd72f0ee5b7f99b5124df338eaae82e29da77c31f64e69e4c8fb1b12dbd7493bf947b42f412bc04d0c9546e8a5409f8ceb0086a2b940b9f6bae0a75cd57a7ad764df6390b3998bd2b275194f62c06afe652d0345b86c3da4a3834787be0d60d84117fe4fd6d2c3d9778db086ae1b5cc92b126a8f5787b919e21df622c6343b07ef584abe98b9c3a5d5648ce289136bc48f2e9f6fef78e587827d3f9347f11920d50fcef8ab366f9515a505b54983231afacf9f8c00016a69ade9188914d813e9ccb791c9b741c2d766aabcbd", @generic="b48577c05bfa43e63f519267756a531d84fccea45e2124b75cd13b7402326b1d43f6ea85d465b98d43d50996ed8722760fb3839de9ea7b4569940109262e6cee651843c156fa88903cb3c5f24fcc6cba741f93e8ddae7b7f66b243c9b3c3b56af511e1af04ccac69ef926247c4bd363a6bb2493b00cfac58aeabe216663416e5635db2e2537ce23c676fdc206c19d60f61959af35f77d8b60ecf71c29e0ef63b7c", @typed={0x8, 0x4c, 0x0, 0x0, @u32=0xbbbb}, @generic="f08ae080973fb185fc6f095e1910cc76486a5a21be"]}, @nested={0x29, 0x8b, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0x3f}, @typed={0x0, 0x68, 0x0, 0x0, @binary="7288efbac0804b122fbe2c"}, @typed={0x8, 0x95, 0x0, 0x0, @uid=0xee01}, @typed={0x5, 0x5d, 0x0, 0x0, @u64=0x9}, @generic="465251276eea3ffb1aadd441184e6eb62532eb7618ac0165aef5ed346d9069d1da7f9798fe80874a3723c4b719d2a2", @typed={0x0, 0x7a, 0x0, 0x0, @uid=r5}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x80}, 0x40024) statfs(0x0, 0x0) 16:35:12 executing program 3: r0 = syz_io_uring_setup(0x14e6, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x8004, @fd_index, 0xfffffffffffffff9, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:35:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x3f, 0x2a, 0x55, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x8000}, 0x410, 0x2, 0x400, 0x10, 0x153a, 0x5, 0x3ff, 0x0, 0x1f, 0x0, 0x9}, r1, 0xb, r0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000000)=0x1, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000004c0)) [ 1439.646491] sd 0:0:0:0: [sg_rq_end_io] Sense Key : Illegal Request [current] [ 1439.648399] sd 0:0:0:0: [sg_rq_end_io] Add. Sense: Invalid command operation code [ 1441.986340] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1441.987898] CPU: 0 PID: 275 Comm: syz-fuzzer Not tainted 5.10.237 #1 [ 1441.988625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.989563] Call Trace: [ 1441.989863] dump_stack+0x107/0x167 [ 1441.990278] dump_header+0x107/0x689 [ 1441.990701] oom_kill_process.cold+0x10/0x15 [ 1441.991199] out_of_memory+0x1149/0x1440 [ 1441.991662] ? oom_killer_disable+0x280/0x280 [ 1441.992176] ? mutex_trylock+0x237/0x2b0 [ 1441.992631] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1441.993328] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1441.994000] ? lock_acquire+0x137/0x470 [ 1441.994468] ? warn_alloc+0x190/0x190 [ 1441.994931] __alloc_pages_nodemask+0x51d/0x600 [ 1441.995480] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1441.996157] ? find_get_entry+0x2c8/0x740 [ 1441.996658] alloc_pages_current+0x187/0x280 [ 1441.997171] __page_cache_alloc+0x2d2/0x360 [ 1441.997661] pagecache_get_page+0x2c7/0xc80 [ 1441.998171] filemap_fault+0x177d/0x2210 [ 1441.998642] ? read_cache_page_gfp+0x30/0x30 [ 1441.999156] ? replace_page_cache_page+0x1200/0x1200 [ 1441.999748] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 1442.000364] ext4_filemap_fault+0x87/0xc0 [ 1442.000865] __do_fault+0x113/0x410 [ 1442.001292] handle_mm_fault+0x1e53/0x3500 [ 1442.001786] ? find_held_lock+0x2c/0x110 [ 1442.002265] ? __pmd_alloc+0x5e0/0x5e0 [ 1442.002725] ? vmacache_find+0x55/0x2a0 [ 1442.003201] do_user_addr_fault+0x56e/0xc60 [ 1442.003714] exc_page_fault+0xa2/0x1a0 [ 1442.004170] ? asm_exc_page_fault+0x8/0x30 [ 1442.004668] asm_exc_page_fault+0x1e/0x30 [ 1442.005150] RIP: 0033:0x440310 [ 1442.005524] Code: Unable to access opcode bytes at RIP 0x4402e6. [ 1442.006229] RSP: 002b:000000c00036be48 EFLAGS: 00010206 [ 1442.006853] RAX: 000000c000020800 RBX: 000000c000031500 RCX: 0000000000000000 [ 1442.007683] RDX: 0000000001f20db8 RSI: 000000c00036be20 RDI: 0000000000000001 [ 1442.008512] RBP: 000000c00036bf28 R08: 00000000000005a1 R09: 00007ffec1fcc080 [ 1442.009346] R10: 00007ffec1fcc090 R11: 00000000002988a8 R12: 0000000000000003 [ 1442.010181] R13: 000000c0000adb00 R14: 0000000000e5dacd R15: 0000000000000000 [ 1442.011094] Mem-Info: [ 1442.011399] active_anon:7345 inactive_anon:60381 isolated_anon:0 [ 1442.011399] active_file:19 inactive_file:0 isolated_file:0 [ 1442.011399] unevictable:0 dirty:0 writeback:0 [ 1442.011399] slab_reclaimable:8480 slab_unreclaimable:61604 [ 1442.011399] mapped:69641 shmem:121 pagetables:2029 bounce:0 [ 1442.011399] free:2465 free_pcp:62 free_cma:0 [ 1442.014957] Node 0 active_anon:29380kB inactive_anon:241524kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278564kB dirty:0kB writeback:0kB shmem:484kB writeback_tmp:0kB kernel_stack:4928kB all_unreclaimable? yes [ 1442.017640] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.020672] lowmem_reserve[]: 0 1616 1616 1616 [ 1442.021247] Node 0 DMA32 free:3372kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:29380kB inactive_anon:241524kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:8116kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 1442.024596] lowmem_reserve[]: 0 0 0 0 [ 1442.025089] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1442.026753] Node 0 DMA32: 388*4kB (UM) 80*8kB (UM) 27*16kB (UM) 19*32kB (UM) 8*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3744kB [ 1442.028439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.029424] 170 total pagecache pages [ 1442.029856] 0 pages in swap cache [ 1442.030264] Swap cache stats: add 0, delete 0, find 0/0 [ 1442.030862] Free swap = 0kB [ 1442.031227] Total swap = 0kB [ 1442.031569] 524158 pages RAM [ 1442.031909] 0 pages HighMem/MovableOnly [ 1442.032375] 105069 pages reserved [ 1442.032779] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=275,uid=0 [ 1442.035553] Out of memory (oom_kill_allocating_task): Killed process 254 (syz-fuzzer) total-vm:1241236kB, anon-rss:230940kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:896kB oom_score_adj:0 [ 1443.942907] oom_reaper: reaped process 9326 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1444.102494] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1444.103948] CPU: 1 PID: 9326 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 1444.104739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.105686] Call Trace: [ 1444.105994] dump_stack+0x107/0x167 [ 1444.106415] dump_header+0x107/0x689 [ 1444.106842] oom_kill_process.cold+0x10/0x15 [ 1444.107352] out_of_memory+0x1149/0x1440 [ 1444.107826] ? oom_killer_disable+0x280/0x280 [ 1444.108346] ? mutex_trylock+0x237/0x2b0 [ 1444.108819] ? __alloc_pages_slowpath.constprop.0+0xa7c/0x2170 [ 1444.109498] __alloc_pages_slowpath.constprop.0+0x1b6d/0x2170 [ 1444.110176] ? lock_acquire+0x137/0x470 [ 1444.110637] ? warn_alloc+0x190/0x190 [ 1444.111086] __alloc_pages_nodemask+0x51d/0x600 [ 1444.111621] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1444.112237] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1444.112932] ? policy_node+0xab/0x140 [ 1444.113367] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 1444.113924] alloc_pages_current+0x187/0x280 [ 1444.114423] ? __sanitizer_cov_trace_cmp4+0x4/0x20 [ 1444.114989] relay_open_buf.part.0+0x2a5/0xc00 [ 1444.115519] relay_open+0x531/0xa10 [ 1444.115944] do_blk_trace_setup+0x4cf/0xc10 [ 1444.116441] ? _copy_from_user+0xfb/0x1b0 [ 1444.116925] __blk_trace_setup+0xca/0x180 [ 1444.117397] ? do_blk_trace_setup+0xc10/0xc10 [ 1444.117922] blk_trace_ioctl+0x155/0x290 [ 1444.118386] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1444.118945] ? do_vfs_ioctl+0x283/0x10d0 [ 1444.119409] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1444.120010] ? generic_block_fiemap+0x60/0x60 [ 1444.120519] ? lock_downgrade+0x6d0/0x6d0 [ 1444.121004] blkdev_ioctl+0xc1/0x710 [ 1444.121427] ? blkdev_common_ioctl+0x1930/0x1930 [ 1444.121969] ? selinux_file_ioctl+0xb6/0x270 [ 1444.122472] block_ioctl+0xf9/0x140 [ 1444.122887] ? blkdev_read_iter+0x1c0/0x1c0 [ 1444.123379] __x64_sys_ioctl+0x19a/0x210 [ 1444.123845] do_syscall_64+0x33/0x40 [ 1444.124266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.124860] RIP: 0033:0x7f863fbb4b19 [ 1444.125287] Code: Unable to access opcode bytes at RIP 0x7f863fbb4aef. [ 1444.126029] RSP: 002b:00007f863d109188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.126895] RAX: ffffffffffffffda RBX: 00007f863fcc8020 RCX: 00007f863fbb4b19 [ 1444.127701] RDX: 0000000020001b80 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1444.128510] RBP: 00007f863fc0ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1444.129322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.130130] R13: 00007ffc7cd1c79f R14: 00007f863d109300 R15: 0000000000022000 [ 1444.131305] Mem-Info: [ 1444.131604] active_anon:35 inactive_anon:7985 isolated_anon:0 [ 1444.131604] active_file:39 inactive_file:0 isolated_file:0 [ 1444.131604] unevictable:0 dirty:1 writeback:2 [ 1444.131604] slab_reclaimable:7764 slab_unreclaimable:59360 [ 1444.131604] mapped:8714 shmem:83 pagetables:368 bounce:0 [ 1444.131604] free:2507 free_pcp:177 free_cma:0 [ 1444.135134] Node 0 active_anon:140kB inactive_anon:31940kB active_file:180kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:34844kB dirty:0kB writeback:0kB shmem:332kB writeback_tmp:0kB kernel_stack:2976kB all_unreclaimable? yes [ 1444.137698] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.140595] lowmem_reserve[]: 0 1616 1616 1616 [ 1444.141146] Node 0 DMA32 free:3540kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:140kB inactive_anon:31940kB active_file:180kB inactive_file:12kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:1472kB bounce:0kB free_pcp:708kB local_pcp:708kB free_cma:0kB [ 1444.144315] lowmem_reserve[]: 0 0 0 0 [ 1444.144767] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1444.146352] Node 0 DMA32: 402*4kB (ME) 102*8kB (UME) 46*16kB (UME) 4*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3288kB [ 1444.147892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1444.148850] 131 total pagecache pages [ 1444.149290] 0 pages in swap cache [ 1444.149674] Swap cache stats: add 0, delete 0, find 0/0 [ 1444.150289] Free swap = 0kB [ 1444.150632] Total swap = 0kB [ 1444.150971] 524158 pages RAM [ 1444.151332] 0 pages HighMem/MovableOnly [ 1444.151781] 105069 pages reserved [ 1444.152225] Unreclaimable slab info: [ 1444.152856] Name Used Total [ 1444.153573] pid_3 3KB 3KB [ 1444.154194] pid_2 69KB 71KB [ 1444.154795] IEEE-802.15.4-MAC 63KB 63KB [ 1444.155411] IEEE-802.15.4-RAW 63KB 63KB [ 1444.156027] p9_req_t 8KB 8KB [ 1444.156633] ip6-frags 15KB 15KB [ 1444.157259] fib6_nodes 28KB 28KB [ 1444.157862] ip6_dst_cache 48KB 48KB [ 1444.158478] PINGv6 63KB 63KB [ 1444.159095] RAWv6 283KB 283KB [ 1444.159696] UDPLITEv6 62KB 62KB [ 1444.160311] UDPv6 62KB 62KB [ 1444.160918] tw_sock_TCPv6 15KB 15KB [ 1444.161552] request_sock_TCPv6 15KB 15KB [ 1444.162182] TCPv6 62KB 62KB [ 1444.162783] nf_conntrack 7KB 7KB [ 1444.163406] scsi_sense_cache 8KB 8KB [ 1444.164021] sd_ext_cdb 3KB 3KB [ 1444.164624] virtio_scsi_cmd 16KB 16KB [ 1444.165261] sgpool-128 59KB 59KB [ 1444.165865] sgpool-64 63KB 63KB [ 1444.166485] sgpool-32 425KB 425KB [ 1444.167107] sgpool-16 135KB 135KB [ 1444.167710] sgpool-8 108KB 108KB [ 1444.168333] io_kiocb 82KB 82KB [ 1444.168943] mqueue_inode_cache 62KB 62KB [ 1444.169573] nfs_commit_data 15KB 15KB [ 1444.170194] nfs_write_data 47KB 47KB [ 1444.170799] jbd2_inode 7KB 7KB [ 1444.171424] ext4_system_zone 7KB 7KB [ 1444.172042] ext4_io_end_vec 7KB 7KB [ 1444.172649] ext4_bio_post_read_ctx 15KB 15KB [ 1444.173324] kioctx 31KB 31KB [ 1444.173929] aio_kiocb 7KB 7KB [ 1444.174553] dio 15KB 15KB [ 1444.175172] bio-2 4KB 4KB [ 1444.175773] fasync_cache 7KB 7KB [ 1444.176391] pid_namespace 7KB 7KB [ 1444.177023] posix_timers_cache 15KB 15KB [ 1444.177639] rpc_buffers 31KB 31KB [ 1444.178262] rpc_tasks 3KB 3KB [ 1444.178866] UNIX 186KB 352KB [ 1444.179490] ip4-frags 15KB 15KB [ 1444.180111] UDP-Lite 63KB 63KB [ 1444.180720] tcp_bind_bucket 8KB 8KB [ 1444.181336] inet_peer_cache 8KB 8KB [ 1444.181941] xfrm_state 32KB 32KB [ 1444.182559] ip_fib_trie 8KB 8KB [ 1444.183180] ip_fib_alias 15KB 15KB [ 1444.183786] ip_dst_cache 97KB 124KB [ 1444.184403] PING 62KB 62KB [ 1444.185026] RAW 125KB 125KB [ 1444.185631] UDP 166KB 315KB [ 1444.186251] tw_sock_TCP 7KB 7KB [ 1444.186857] request_sock_TCP 15KB 15KB [ 1444.187476] TCP 60KB 60KB [ 1444.188096] hugetlbfs_inode_cache 30KB 30KB [ 1444.188743] bio-1 11KB 11KB [ 1444.189364] eventpoll_pwq 27KB 27KB [ 1444.189969] eventpoll_epi 59KB 59KB [ 1444.190588] inotify_inode_mark 39KB 39KB [ 1444.191217] request_queue 60KB 60KB [ 1444.191822] blkdev_ioc 18KB 18KB [ 1444.192434] bio-0 444KB 444KB [ 1444.193067] biovec-max 582KB 867KB [ 1444.193670] biovec-128 31KB 31KB [ 1444.194292] biovec-64 567KB 567KB [ 1444.194893] biovec-16 105KB 105KB [ 1444.195511] user_namespace 31KB 31KB [ 1444.196137] uid_cache 8KB 8KB [ 1444.196748] dmaengine-unmap-2 4KB 4KB [ 1444.197364] audit_buffer 7KB 7KB [ 1444.197972] skbuff_fclone_cache 90KB 90KB [ 1444.198612] skbuff_head_cache 480KB 480KB [ 1444.199243] configfs_dir_cache 8KB 8KB [ 1444.199858] file_lock_cache 66KB 66KB [ 1444.200456] file_lock_ctx 7KB 7KB [ 1444.201046] fsnotify_mark_connector 28KB 28KB [ 1444.201666] net_namespace 143KB 143KB [ 1444.202253] task_delay_info 66KB 111KB [ 1444.202818] taskstats 54KB 54KB [ 1444.203441] proc_dir_entry 472KB 472KB [ 1444.204022] pde_opener 39KB 39KB [ 1444.204586] seq_file 45KB 52KB [ 1444.205180] sigqueue 110KB 110KB [ 1444.205745] shmem_inode_cache 1322KB 1352KB [ 1444.206325] kernfs_iattrs_cache 231KB 231KB [ 1444.206907] kernfs_node_cache 5684KB 5684KB [ 1444.207488] mnt_cache 190KB 204KB [ 1444.208091] filp 1006KB 1575KB [ 1444.208664] names_cache 5635KB 6294KB [ 1444.209262] hashtab_node 274KB 274KB [ 1444.209827] ebitmap_node 1153KB 1153KB [ 1444.210406] avtab_node 4976KB 4976KB [ 1444.210974] avc_node 35KB 35KB [ 1444.211588] lsm_inode_cache 2711KB 3032KB [ 1444.212171] lsm_file_cache 165KB 228KB [ 1444.212742] key_jar 39KB 39KB [ 1444.213324] uts_namespace 15KB 15KB [ 1444.213888] nsproxy 15KB 15KB [ 1444.214489] vm_area_struct 1126KB 1352KB [ 1444.215073] fs_cache 36KB 72KB [ 1444.215641] files_cache 140KB 350KB [ 1444.216221] signal_cache 385KB 524KB [ 1444.216791] sighand_cache 296KB 360KB [ 1444.217380] task_struct 1220KB 1653KB [ 1444.217955] cred_jar 142KB 184KB [ 1444.218543] anon_vma_chain 247KB 326KB [ 1444.219131] anon_vma 223KB 294KB [ 1444.219696] pid 52KB 82KB [ 1444.220278] Acpi-Operand 195KB 229KB [ 1444.220849] Acpi-ParseExt 27KB 27KB [ 1444.221431] Acpi-Parse 237KB 253KB [ 1444.222010] Acpi-State 129KB 145KB [ 1444.222574] Acpi-Namespace 24KB 24KB [ 1444.223156] numa_policy 7KB 7KB [ 1444.223720] trace_event_file 176KB 176KB [ 1444.224298] ftrace_event_field 280KB 280KB [ 1444.224877] pool_workqueue 40KB 40KB [ 1444.225458] task_group 16KB 16KB [ 1444.226038] mm_struct 252KB 472KB [ 1444.226603] vmap_area 82KB 90KB [ 1444.227188] page->ptl 245KB 307KB [ 1444.227752] kmemleak_scan_area 115KB 115KB [ 1444.229350] kmemleak_object 135628KB 151426KB [ 1444.229928] kmalloc-8k 5008KB 5184KB [ 1444.230516] kmalloc-4k 8152KB 8256KB [ 1444.231103] kmalloc-2k 4920KB 5152KB [ 1444.231677] kmalloc-1k 2744KB 3456KB [ 1444.232295] kmalloc-512 2993KB 4944KB [ 1444.232867] kmalloc-256 1408KB 1408KB [ 1444.233448] kmalloc-192 560KB 560KB [ 1444.234036] kmalloc-128 520KB 552KB [ 1444.234621] kmalloc-96 432KB 684KB [ 1444.235229] kmalloc-64 989KB 1404KB [ 1444.235806] kmalloc-32 757KB 864KB [ 1444.236385] kmalloc-16 372KB 372KB [ 1444.236961] kmalloc-8 318KB 338KB [ 1444.237543] kmem_cache_node 47KB 47KB [ 1444.238123] kmem_cache 75KB 75KB [ 1444.238689] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,global_oom,task_memcg=/syz0,task=syz-executor.0,pid=9326,uid=0 [ 1444.240592] Out of memory (oom_kill_allocating_task): Killed process 9326 (syz-executor.0) total-vm:93808kB, anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1444.242798] syz-executor.0: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 1444.244266] CPU: 1 PID: 9326 Comm: syz-executor.0 Not tainted 5.10.237 #1 [ 1444.244999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.245880] Call Trace: [ 1444.246166] dump_stack+0x107/0x167 [ 1444.246557] warn_alloc.cold+0x95/0x18a [ 1444.246986] ? zone_watermark_ok_safe+0x260/0x260 [ 1444.247504] ? oom_kill_process+0xd5/0x4c0 [ 1444.247962] ? wait_for_completion_io+0x270/0x270 [ 1444.248485] __alloc_pages_slowpath.constprop.0+0x1c3d/0x2170 [ 1444.249127] ? lock_acquire+0x137/0x470 [ 1444.249554] ? warn_alloc+0x190/0x190 [ 1444.249973] __alloc_pages_nodemask+0x51d/0x600 [ 1444.250470] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1444.251046] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1444.251686] ? policy_node+0xab/0x140 [ 1444.252098] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 1444.252614] alloc_pages_current+0x187/0x280 [ 1444.253090] ? __sanitizer_cov_trace_cmp4+0x4/0x20 [ 1444.253615] relay_open_buf.part.0+0x2a5/0xc00 [ 1444.254110] relay_open+0x531/0xa10 [ 1444.254506] do_blk_trace_setup+0x4cf/0xc10 [ 1444.254969] ? _copy_from_user+0xfb/0x1b0 [ 1444.255413] __blk_trace_setup+0xca/0x180 [ 1444.255855] ? do_blk_trace_setup+0xc10/0xc10 [ 1444.256346] blk_trace_ioctl+0x155/0x290 [ 1444.256786] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 1444.257309] ? do_vfs_ioctl+0x283/0x10d0 [ 1444.257741] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1444.258304] ? generic_block_fiemap+0x60/0x60 [ 1444.258781] ? lock_downgrade+0x6d0/0x6d0 [ 1444.259233] blkdev_ioctl+0xc1/0x710 [ 1444.259632] ? blkdev_common_ioctl+0x1930/0x1930 [ 1444.260139] ? selinux_file_ioctl+0xb6/0x270 [ 1444.260612] block_ioctl+0xf9/0x140 [ 1444.261004] ? blkdev_read_iter+0x1c0/0x1c0 [ 1444.261466] __x64_sys_ioctl+0x19a/0x210 [ 1444.261906] do_syscall_64+0x33/0x40 [ 1444.262304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1444.262854] RIP: 0033:0x7f863fbb4b19 [ 1444.263258] Code: Unable to access opcode bytes at RIP 0x7f863fbb4aef. [ 1444.263954] RSP: 002b:00007f863d109188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.264769] RAX: ffffffffffffffda RBX: 00007f863fcc8020 RCX: 00007f863fbb4b19 [ 1444.265529] RDX: 0000000020001b80 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1444.266293] RBP: 00007f863fc0ef6d R08: 0000000000000000 R09: 0000000000000000 [ 1444.267052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.267812] R13: 00007ffc7cd1c79f R14: 00007f863d109300 R15: 0000000000022000 [ 1444.268596] Mem-Info: [ 1444.268880] active_anon:35 inactive_anon:7985 isolated_anon:0 [ 1444.268880] active_file:45 inactive_file:3 isolated_file:1 [ 1444.268880] unevictable:0 dirty:0 writeback:0 [ 1444.268880] slab_reclaimable:7764 slab_unreclaimable:59340 [ 1444.268880] mapped:8711 shmem:83 pagetables:368 bounce:0 [ 1444.268880] free:2507 free_pcp:177 free_cma:0 [ 1444.272220] Node 0 active_anon:140kB inactive_anon:31940kB active_file:180kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:34844kB dirty:0kB writeback:0kB shmem:332kB writeback_tmp:0kB kernel_stack:2976kB all_unreclaimable? yes [ 1444.274809] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.277764] lowmem_reserve[]: 0 1616 1616 1616 [ 1444.278319] Node 0 DMA32 free:3540kB min:7164kB low:8816kB high:10468kB reserved_highatomic:0KB active_anon:140kB inactive_anon:31940kB active_file:180kB inactive_file:12kB unevictable:0kB writepending:0kB present:2080640kB managed:1660448kB mlocked:0kB pagetables:1472kB bounce:0kB free_pcp:708kB local_pcp:708kB free_cma:0kB [ 1444.281552] lowmem_reserve[]: 0 0 0 0 [ 1444.282021] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 1444.283548] Node 0 DMA32: 402*4kB (ME) 102*8kB (UME) 46*16kB (UME) 4*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3288kB [ 1444.285122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1444.286090] 131 total pagecache pages [ 1444.286520] 0 pages in swap cache [ 1444.286910] Swap cache stats: add 0, delete 0, find 0/0 [ 1444.287527] Free swap = 0kB [ 1444.287868] Total swap = 0kB [ 1444.288224] 524158 pages RAM [ 1444.288567] 0 pages HighMem/MovableOnly [ 1444.289034] 105069 pages reserved VM DIAGNOSIS: 16:35:16 Registers: info registers vcpu 0 RAX=0000000080010050 RBX=ffff88800f3e0000 RCX=ffffffff81f485d4 RDX=00000000000001f7 RSI=ffffffff81f485e2 RDI=0000000000000007 RBP=00000000000101f7 RSP=ffff88806ce09d70 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffff88800f3e0008 R13=ffff88800f3e0180 R14=0000000000000001 R15=ffff88800f3e4338 RIP=ffffffff81f485e6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5b7d2878c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7a5d6da000 CR3=000000002b104000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6c65732d6461657268742f636f72702f XMM01=65746165726373662f727474612f666c XMM02=00000000000000000000000000000000 XMM03=0000000000000000000000ff000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f727474612f666c65732d6461657268 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=ffff88800be8d830 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff84ff9160 RDI=ffff88800be8d830 RBP=ffffffff84ff9160 RSP=ffff88800c2cf380 R8 =0000000000000001 R9 =ffffea00011a3207 R10=fffffffffffffff2 R11=0000000000000001 R12=ffff88800be8cec0 R13=ffff88800be8d808 R14=00000000ffffffff R15=ffff88800be8d830 RIP=ffffffff83e78afe RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f42dc6826c6 CR3=00000000180de000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=7272652d67706762696c2f756e672d78 XMM02=00302e6f732e726f7272652d67706762 XMM03=696c2f756e672d78756e696c2d34365f XMM04=00000000000000000000000000000000 XMM05=00007f42dcedf43000007f42dcedef20 XMM06=00007f42dc9de00000007f42dcedf940 XMM07=00007f42dc9dea2000007f42dc9de510 XMM08=00007f42dcf0b9e800007f42dcede510 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000