d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.044076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1248.044893] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:14:45 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0096616) [ 1248.223297] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:14:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x660c) 13:14:59 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:14:59 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:14:59 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0185879) 13:14:59 executing program 2: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) r1 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, r1}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000002c0)) clone3(&(0x7f0000000280)={0x9b00, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x5}, &(0x7f0000000900)=""/4096, 0x1000, &(0x7f0000001e00)=""/4096, &(0x7f0000000240)=[r2, r3, r1], 0x3, {r5}}, 0x58) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000000)={0x7fffffff, 0xffffffff, 0x2, 0x40, 0x850}) io_submit(r7, 0x1, &(0x7f00000008c0)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x2000, r0, &(0x7f0000000040)='\x00', 0x1}]) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000540)) 13:14:59 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:59 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 13:14:59 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1261.932551] FAULT_INJECTION: forcing a failure. [ 1261.932551] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.935272] CPU: 1 PID: 8741 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1261.936649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1261.938285] Call Trace: [ 1261.938806] dump_stack+0x107/0x167 [ 1261.939544] should_fail.cold+0x5/0xa [ 1261.940357] ? create_object.isra.0+0x3a/0xa20 [ 1261.941299] should_failslab+0x5/0x20 [ 1261.942089] kmem_cache_alloc+0x5b/0x310 [ 1261.942903] ? mark_held_locks+0x9e/0xe0 [ 1261.943743] create_object.isra.0+0x3a/0xa20 [ 1261.944662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1261.945723] kmem_cache_alloc_bulk+0x168/0x320 [ 1261.946679] io_submit_sqes+0x6f76/0x85c0 [ 1261.947566] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1261.948621] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1261.949596] ? lock_downgrade+0x6d0/0x6d0 [ 1261.950407] ? find_held_lock+0x2c/0x110 [ 1261.951216] ? io_submit_sqes+0x85c0/0x85c0 [ 1261.952102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1261.953071] ? wait_for_completion_io+0x270/0x270 [ 1261.954034] ? rcu_read_lock_any_held+0x75/0xa0 [ 1261.954951] ? vfs_write+0x354/0xa70 [ 1261.955687] ? fput_many+0x2f/0x1a0 [ 1261.956423] ? ksys_write+0x1a9/0x260 [ 1261.957211] ? __ia32_sys_read+0xb0/0xb0 [ 1261.958031] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1261.959221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1261.960283] do_syscall_64+0x33/0x40 [ 1261.961193] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1261.962224] RIP: 0033:0x7f24549c7b19 [ 1261.963009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1261.966828] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1261.968470] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1261.969972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1261.971596] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1261.973129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1261.974724] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:14:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 13:14:59 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0189436) 13:14:59 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:14:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6612) 13:14:59 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:00 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 1262.262181] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1262.277364] FAT-fs (loop0): Unrecognized mount option "roDir" or missing value 13:15:00 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc020660b) 13:15:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6628) [ 1262.409350] FAULT_INJECTION: forcing a failure. [ 1262.409350] name failslab, interval 1, probability 0, space 0, times 0 13:15:00 executing program 0: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40001, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000140)=ANY=[]) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x80000001) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_init1(0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file2\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40814) openat(r1, &(0x7f0000000140)='./file0\x00', 0x400840, 0x100) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000200000000000000000090000000000000800000000001a00140017000000000000000000000000000000000008007d00ffffffff08006400", @ANYRESOCT], 0x40}}, 0x804) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x34000821) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00', 0x2) dup3(r2, r3, 0x80000) [ 1262.412407] CPU: 1 PID: 8774 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1262.413938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.415915] Call Trace: [ 1262.416479] dump_stack+0x107/0x167 [ 1262.417229] should_fail.cold+0x5/0xa [ 1262.418007] should_failslab+0x5/0x20 [ 1262.418786] kmem_cache_alloc_bulk+0x4b/0x320 [ 1262.419795] io_submit_sqes+0x6f76/0x85c0 [ 1262.421007] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1262.422273] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1262.423435] ? lock_downgrade+0x6d0/0x6d0 [ 1262.424444] ? find_held_lock+0x2c/0x110 [ 1262.425561] ? io_submit_sqes+0x85c0/0x85c0 [ 1262.426826] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1262.427990] ? wait_for_completion_io+0x270/0x270 [ 1262.429161] ? rcu_read_lock_any_held+0x75/0xa0 [ 1262.430277] ? vfs_write+0x354/0xa70 [ 1262.431185] ? fput_many+0x2f/0x1a0 [ 1262.432155] ? ksys_write+0x1a9/0x260 [ 1262.433111] ? __ia32_sys_read+0xb0/0xb0 [ 1262.433944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1262.435011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1262.436069] do_syscall_64+0x33/0x40 [ 1262.436835] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1262.438016] RIP: 0033:0x7f24549c7b19 [ 1262.438907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1262.443089] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1262.444785] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1262.446450] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1262.448178] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1262.449697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1262.451495] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:15:00 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:15:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:00 executing program 2: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1ca746d6ce7393006880000000", @ANYRES16=r0, @ANYBLOB="030700000000000000003200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x2540, 0x17, 0x20, 0x70bd26, 0x25dfdbfd, {0x5}, [@nested={0x14, 0x11, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64}, @typed={0x4, 0x3}]}, @nested={0xb6, 0x83, 0x0, 0x1, [@generic="41299c970bc855a3d17af9b5a42e692d12e30ac9d9cc59cd69b67ea7b4082af0118e3c601ed25ccd477cf837c220e68161d50fdacd803cad2d89dbafb47365b2ff56ae894be75fb693bf9c3bc1948ac442492c271d2dfb46914163c03576dfcc5c9c4c1803fb48aa4f60b3bd28fe1d5a2f79dd5ab8cb6f8e0593420d3a0181918840f1f9b90237b468d8ef9dcd476fb599f6cfab1c5d9144d901578d41de", @typed={0x8, 0x40, 0x0, 0x0, @uid=r1}, @typed={0x8, 0xe, 0x0, 0x0, @u32=0x80000000}, @typed={0x4, 0x41}]}, @generic="adb1ff45814c8693955332037068c5a92b65647590473bbb7f20c2ee723c90cd313877a22cfa97082e6474f6e758909e38172de0b61f5c7be2bd8536f1d5f1e4b8ec43367e9f9486c6b30ce65096b67d34c32cda96eec5e99efc2d418b531f1eb03f8aee4c24986c04b42bc72ca12147ff54d01d8f0cb8473db42599fc601d2c83e8f8fefecaddbf0676658ceb77056cd8c93a75cd3321083d94f694761c", @nested={0x11e, 0x1b, 0x0, 0x1, [@generic="f0d1a23b937349b0a66686b2ba7f7abf2c8aac5abfc323dbdd4a95e05106fbd114acbee844ca11e72952071bd80f362d218669c7fc7234e5d232f6ab27e68a618ecf8491325219e4c326eecb33455f4fdb35f73c97ac157f5229ee2b88f2ef6bd2287b0e239bb56ae586b1b34be039b7a75ea451ad3aed35e3a88ae3dab45a7131a027a2105b7f4751b821bf9289e6aac1fd84c1dad242204beefbf2291b4bd205b295cb047b26b52282edeb6051572f9c2cb28f4f199dd1340f71a11998cad7993775d58df5eaddcb18e9bba3345a57fd412657c6756982e30099", @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0xbcf}, @generic="1e51cbc5a09d3d6e56d339c925392f6fb06ddefd28fd0ef3ef92adcfe77ac0516ded6d"]}, @nested={0x79, 0x31, 0x0, 0x1, [@generic="5f7b1042e86b16a22f62d4a47fc533b5c97701fdf3c56e1224ef64291e3fca66bf225f79c1ce7dbaf59ae890d6a429dc8c857e7559c9716439999bfdeb362f09fd1fa60ef5fc3fef45463eccac18d9d0501c0b8d97f0010eb8ba1b006d287029bfa263c13433ea9b213524ee538b48ac8be3de5cb7"]}, @nested={0x85, 0x62, 0x0, 0x1, [@generic="b57a6b376f098080b4835ba005f25cbbb57e12617b4b2d21395bb94ad5c74306c56c8c0ac6b0f2ea08a9503f55d1c58fdda24938025d15b84f99cc7364405fc0bf79e557a821c1f1ae9d499543bf61e38cb999e18b10c5acebb6bbcd763d6f7c052a8b8a92ef3f3e7e51005c10d2b4dd52f81b9d00a8d9ea84", @typed={0x8, 0x71, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x118c, 0x1d, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}, @generic="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", @generic="e7e3ec76399d0f70a55197668afac7a683a5c00f54617eaf8e9bc91efd2509246562eb748b5ccb15cd2da916c3c91078f806b5690b64c80612d9529dffeab9c5bc51f97615e0ad7f131e56f0a1e0c9aadfc9caae65222564686ca1ddbcad4ce4cd1e7f984dc0304c3e3d188524523c9dc121a08184e60c6cf6c1f75038e6975c672c6f8b91ddfd90e7f428b7fdce9364fb3945684a4a55346b1667f8c67447538c9eb39954b68761d4267d6a5be798ebbe4d8f53a8ac442f59dfd1b376f8c6e6ed621cdf4471154c9803166f7a72b5ac435b8715d15cd1", @typed={0x8, 0x2d, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="f6c200606dcc7ba439afef68d92a4f5273ff2529d83525be7803d9161b0475a1a0a090ffc67e4292fc84feda260327f60585a354a06d8b3048691384eea92e490f15fbfbd19fb0ea99c435860016e2ab5da00f978d31d606e7a3e8fb84f9a8fcd4dc4cba54", @typed={0x27, 0x2d, 0x0, 0x0, @binary="b467d94d7e033660adf2c5cef4764fd65cf3a2b75ee414a0cc437dbdd792cd63d82896"}, @typed={0x8, 0x7e, 0x0, 0x0, @u32=0x7}]}, @generic="91560c97147fa5ea68560764904e7dc6c3f11f7868f88593b2183ff238a976ae268435e17485041b0cb60720acf488bb2e77acd3a2e2fdc7554d3eb80280d35999250dc352b3a21da6f4d17ea9d73de1fdcd466e2fbeb239405378efcc973fae5e5c2507e0bb4442a19d9bfaeb2eb661f3451c9bbcf2c6fddbd2a3c99905e3bad33da63d76a49e78d58e71bdbfe16f0e50f17003d990f437efe435b64461014fdc16fc8d94db84d2c59d1ba9186b331d1ed7d75d459b8537f4a571c0dd31abc330a7cbbc03b0a17de6bdf6ebf83e9e43d5e4c4bc3acc2d91d129cbefebd718dcb2c1d17efe8274b2414ae30646cd4f8bd3184233fa74dfc641e4d8acb7a7095fca2fc2501957b995ad494028dce28b4bd05b0571b93ae40d570933c411dd334be443896d389945c4d0cb9d6445744738cfc605b9c780f1fadc040640074450f0e79e033eb19f72e4bb7d043c8796e5ce93df8d570da7e70d340dec97f2f02aca80b0679a25b61f8660bdbdd4d76482fefbedb0cdb425eb9e22735011f3b115a4c40f24610cd23e5e01f2421d3b4fb227165b527899478d822f0710d387603fb7658574a9131cd7d0cc7cab9aad076262bda892a0c743caecabf0ec6e1c18915df553fd96d549749b52f81a13607dc2aa8aaeea5db888af7ba3e9e4edf17de2f3e4426ff404a4dfb17f7b5715ff00d313ad5272bc18c2b8fbb2572c8e64e7dde71804ee481b9e5ddb4a3b8dd58094f4c4b44e956380f0ecde250e48b7209c12aeff373452f0bc7044bb49ce01b8882c09a8d7e540cb1dade59014485a3bd741aa11f75db2937be8833688d1f484abbc863c22d7ae78332e6534427a1d1df29d77259f76a2d7b3914f643b727de670b7eebba028d093aa49d29e9fb0f57d4e12a98230cf2453b840f8552a94fd057b6c441c70e3c7430a9994ac40ab449e0ea84c4c231ea52b3c6433760086b9aac4423c85acf3a468c5561723446b7832ecb5c0bfe2af735b0c856c8946ebd89cd37984a212eeba889c47506ef6c1b419443895e831ec60015701850a14a7a4cf608c33e455454985f9dccf95b5329b760150af2aa9e006979c957e98ce0044f99805fbbfef6134e3a0d55180bcfb6b062c58246b7f0a9914216dd29c1cf940f6bfe0e793c3f36f1e1d4d426e8738b9d9d064dfcb7a56e4c340d0ef2f731a8f288b6214c3532b5726724229680e35899b8d0a87b6fe73f00632c8dbaf746a5700a83e6dd22a112fdcbcc0e9599700835a19bc9b31450e616ad96f1a9d3c03f569c486e26f88ea97a444b21cfc5b6a9c41566b54e220af9467b5ef5412b17c32db84dd3b2bda7b2c4d134a9841639779aad58fc3eded46185a884cb6d4e11842dcb4eab1ad6fb0639847aba8e0d958de8ab1773d94c773fb8cc6fb4843b013fd04cb6b4ef03ba986a88fd9308c1ae72e050e18f2b859ff59665cc9a84b4150dfa3d8630d58bc4aa8496288406e853c1d5d8bf6fb4ebc86377d583c27499bd05be9c9d6e2d355ddc322c49d10bc810aeabed8b2c42a03b8f813fecfcdbdc59c38baace412313d366ea77c3b83465c027f7605727b18b19b47f5834e8d64f6e3b61e8f51bfd54b62f3e1f211eee9f72c8bf313573da4077c01eb4c017c322898b80b872365731786d97f18beff2ee6963fcdab6f97dacc3a7e128dc8e9a5ce4fef47fedda777b9ce27c7951b23968ccf992578fb02dba17c52dfdf63aed4b4e17dea61c44b6315bddac3a45beb5685d69690ef5d6de17d94031cd83f00d274d75d59f6f694ae778fb706255ba789eef5b20cac18b8710fe1d5c20cc2503113d392f2474b9e9eabfd681fbc73ececb7b982cc589822ef0830a6b4cfcf11875a5dd8f0d610990d3d770ed3c4a9ab1e0b4fe9a0225ebf14bfb6df1a2349a7256325d94b4b0c97196f4c3df1f0cd6583ef6112390a5c0ebb1144ce0a3cfad35147a0fc177b01316b7ae67fe8cad5ce4a6062eae276b4bd3ee0e576154ec5ad0be338224ad3fbea0198769b1f398f6f036ae271897066eedfcafc4a194f07ee734975bfca30bf32eb062461f155b631f7db58eb7d528593a6eaaad4599071cb9800e3cf4263e5ce2cedd0590fa0c8bc45d4373b97a7fdf590717728b332bef8275a7a405b17d1cdf5cc143947cef53b5b3c1118b4c54bd8b45d0bf66df6796d580521d136e9e84392ed3c2ee80ca504b4c98d7d68820b388be5c457f06c7348ce05f99636b60a4692a06cc8ed6077afebdf38e78a6814a460813903d5cf0dec5c310854b50b704ffbbe455e6ef454d6c10d912be8643dc4f019c9b399ba9819a7d3ce04eb9c17b4cb05b98d30937d69598d64fe870e764feef1b263d825f21e691abc4bb3b95887131ca3073ab25f812e15cef7fbfd9825edb9908a9aef064c359fa29c1e6d82982c1639a3c654d34e4a75c8ecc43dabd8e4864d19e53fe21b28db91767ace115bdf08de8bc76a7e5bc3c48cd7e399a18ad5a9efbca6111cfae4de8d43c3ba0c700d164bf6407232eddebe9947ebcaafac9a304a27c610b89b0aab2c5816916dc3928385d38c881910f9279f464931ecc4e50f401b0d4cbb79b8954677df2ccd6e4e49bf87fb4b58c9cda49b8a859424ebc327a388a12c604924c23d92de80fcc31bf0384029307696db51e41400cdc4e25fdc93076b314586ea959f84733302dc70ed81e9700da785d060559a5d83bf07bdfbab6e5dffa404c3b76654d597a7848d6500862781d0102ab9045c6d12786d46c9fbbe2b845a84e454ef19430794b2943af6827a6754893c96b2dca67b7c3ea970e443dfc0282495eb71e067c66e1752ca0635e4ba0d2c7b8ac673ec2e8c503bc47ff4da8d17893ffce6d7abde84a2234c440ff535802065c65017b329a9ec3b096165464761a536547d6477abfd9ab2be913b7c7d41af766296a9aa9c2414ae3d58de63fd54b111ddf7e1aa2f0019b1b5684fbcd608004ef0d0de1fdc225ee0c67173baba447f2348e5f6a2576219b8d860eb579768bc8635dbf2582a59b12127e6a636a39dce9bfc231afee91156cf9b0b7b141036f94f771308067e6b8dc134457255e355758acaf68c5167ca51a729c499ced4af90e4fb9ff1bde93b0806c769d555356e2c42320db967de61742b8b2769b3805a1b92767fd77d81cc85cb5eed903d1381fb5d0b9a9d78be30474463fe14d65d2982b2fae9f9efde165d09042ede5bd6d9764737d67a2d45b59f6cdfccbaa73a0f469f0df3e2d44303715cb3d7defefc82b5bf08636e8536c2d50274ac27ba1996ac1bff4042a12383e221ffd8767a5f98698b07d81178bbf7041c8dc81f49e25918769db4da7b4bbad6c2a1720e60d9d0eddfdc3494992b4d2f752cbcb1e6eca7233ebd8fd1c15103fc4a03ff27fb0f327267b28ef183c5eeec34a6fa722f50b396f63b426c4ceaaef6660fb719c7cf8aef8e96eff234d3edbad681bc40beadad231a25557c2175538e784bb165c52f1dd453228e7d72b9ad57f83f079305cbcb497e26470e872cc1c150be93929bf80644b031faf20a7f5d3c724c475e9de598515cb2a6f82137c5ed43f0d15b147b61ed39194fbe909663a3c3098a55602be703304b94448da5b2fc68689df83e01bff49a8e2636ea69f598ac533552465385be4c71e409ea01746b45e6b78ce7e33e2b978de0a8080f3ad6ac2735bd31888b14f4527bc440040c33c99c81a3ad616c98145d7460b8ffeedd2207b06744e1f936b42ff3e8be42188839d69203f94792dd77bc21077cbeecb6bbdb3f7ba43dbfa8d4fe5b388ea8d99c298c855e708302c474ed1cec9c4d0360acce5f74efd0d0d8df5f740ece5631ce8047f576fb022dd06bff1bf7d4838f0c66d93608fc2deba30a2e14e6a8cb6bce7edee53d36a29a6746a14145f89882915c5c3aa7a3d1f155bcc4390071760d1f71b8be9d41f35b221b533ff85feb896d170789a02fc40b46e8d80a0ca8cc9f696b2ddedf8acf582a363d04fb23ef1add8790d25179991d516a1966a3b7b6eec1f69ae37365c74fe3cae60e5cc71a49b8cf43fb8ee91165f1268186cf871e6c44dada0690930bffd24ccbcca809f5a37812955629ddbca70ba5083f49a3bb714a90fae6ae63c697b93e179e781e80171afce6fd4d1d8ff4adddb7ffc22affa00db59352bada3da74ab0ac0fd3f486acf629f1acce40c99b786229c798385623c5011eddbf4dbfbeafb513f30d3a1c86a6fb3df9db63a2256c8efbd0dc49d77fd90f650131182e9f5356982098ab96b89f747951148dea3990a2890e8e2fa68ee9a0147502772dc080ebabb66ed45e30e3a02ef97c4aee17754770cf606db37a02b8c86c4ecf4d985f6876567dc5552397a872c0e3ab5619d7507d4c8c28e4b06b9c1b236d4980dece82640c712315f3610e3ef88158fe19ab9570df2f948d088ca8a19e0f0a4bfe9e0a75401766eac2304d653067bc7b0f2f1ee00f594ebcf20ce0b08e952a9cb0429acc3f2ab299541d9ec64d2c01e985e32a2221887a93eb5c00b472e5305cbb8b3bbd6008d165d54d35eb50844266529b9d2c714fd800b97692ab945930ac62b0d5d6898097263345cdb18521a146f673dea8fbb14f52a4c07d8d40f223f5809c28af034d9b358e3bb54ee1a56ed7d77451b2d0ae408533e12cfad8c19890afae7dbf75aadb33063bb7008864d34706a0df60b985c5062cb02b95a4f47f78bf83756368a3e3fdbfe0dceed1697cbaf1a28d7d5dfe493024a2768eb0f78645bd5f7992c24424ab750cc7d6c2c63e3ad69a92bc657de730346419cddb3975b32035fed5683e1b1efa1f933241ced41692e7771481e9e305542d5d2b45bb3715a5456d22dc3248689a7a9cb201082e47ed1a5c006ff7e0a05b4bb7823ab3f451cc4fca397fe9a3c34bbba0fc425cf6964de10dc18ce7273ea9b0283c7ce48f42399e6669d47b457b79cc0ce8d47215d8b808b8151f2c3c0871c440b35fe9e83800348a7d211a32666da0a67ada5e8117a35d5427712e4c3c4343ce0708bbe3162287216185c534ed7c5dd2d8c9188b340811d74557ae01fef9075995c0d52491f7bbb3d36df4a14cad27ed24710896a4e44d7e463fb27b63d7ce46dd20ea981c0e473aae15099501d0991cc7a23ee2c0d560e88821f2eab39416213cd93af4ffbac245492a39dc1814d492134a26288d2968a6ce36d6f19520b3e80081101b6d75fa5ecd91463f079cfda01d0ff01250ecf6c3b9af0416f9d43695bf204b880d15707f6871930cd3026989b00392b10efd62bfa9691376ab50f45c3f0c4da7f53557564ed8f2d2e96ef71559a339609e71577f76c3233738875a7d9a7eff0ec61a52d4f73fd2c690260f8b8de061d36d1b2a56ac059bad1dc36e54195f0bbb3da3de1ab4304393228a782f1f8c4b2235b1bfb392b15ec5ee630e086732f9c5eee4dee860c5efd43544c6b8dfb7611c1a04d664af84bd46450c2ab52e1694fe16410dfc8293dbe8099e8c1d27828ec16f9060f90b5d568ec8e2fc93f4893ace916e531f5e33fd26f0ee4b16a9a0ac82fb9f9a22ffceef3f08c83f6a3707c99ee7109ecb0e721ad4b176fca1ba6afdcb0c0f0378bbccdb7763aa138b51159636cfb0668986fdd4af8c069b0d58865e855ea7a82de4e659c340381c3665ea7945d243fc3828e8843171cbe4279d0de06339dcac6cd737bcf82617cc225b15db4e05e4df7a5ba80c8cd2b2240d7ea3ac46fce0765344ee1f7321dbde91c540d4b3a0bce664d695a95ff9d8636a977655a1081eb1a0a79c57823dd2b3", @generic="1b8d5bd4", @typed={0xc, 0x39, 0x0, 0x0, @u64=0x7fff}]}, 0x2540}, 0x1, 0x0, 0x0, 0x44040004}, 0x40) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x8001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) [ 1262.549475] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 13:15:00 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1262.665701] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1262.812192] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:15:16 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:15:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x10001) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x3648}}}, 0x0) 13:15:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:16 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc020662a) 13:15:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40046629) 13:15:16 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 13:15:16 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:16 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:16 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc028660f) 13:15:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x800, 0x0) chdir(&(0x7f0000000280)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x30103) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000480)) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000100), &(0x7f0000000340)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x12, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1f, 0x0, 0x0, 0x0, {0x204}}, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0045878, 0x0) [ 1278.690316] FAULT_INJECTION: forcing a failure. [ 1278.690316] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.693357] CPU: 0 PID: 8819 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1278.694905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1278.696735] Call Trace: [ 1278.697317] dump_stack+0x107/0x167 [ 1278.698121] should_fail.cold+0x5/0xa [ 1278.698958] ? create_object.isra.0+0x3a/0xa20 [ 1278.700008] should_failslab+0x5/0x20 [ 1278.700883] kmem_cache_alloc+0x5b/0x310 [ 1278.701801] ? mark_held_locks+0x9e/0xe0 [ 1278.702721] create_object.isra.0+0x3a/0xa20 [ 1278.703710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1278.704856] kmem_cache_alloc_bulk+0x168/0x320 [ 1278.705889] io_submit_sqes+0x6f76/0x85c0 [ 1278.706844] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1278.707918] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1278.708910] ? lock_downgrade+0x6d0/0x6d0 [ 1278.709754] ? find_held_lock+0x2c/0x110 [ 1278.710574] ? io_submit_sqes+0x85c0/0x85c0 [ 1278.711455] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1278.712430] ? wait_for_completion_io+0x270/0x270 [ 1278.713402] ? rcu_read_lock_any_held+0x75/0xa0 [ 1278.714336] ? vfs_write+0x354/0xa70 [ 1278.715085] ? fput_many+0x2f/0x1a0 [ 1278.715817] ? ksys_write+0x1a9/0x260 [ 1278.716592] ? __ia32_sys_read+0xb0/0xb0 [ 1278.717408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1278.718459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1278.719501] do_syscall_64+0x33/0x40 [ 1278.720247] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1278.721288] RIP: 0033:0x7f24549c7b19 [ 1278.722036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1278.725869] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1278.727576] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1278.729182] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1278.730781] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1278.732394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1278.733995] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:15:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40049409) 13:15:16 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1278.841107] FAT-fs (loop0): Unrecognized mount option "roDir" or missing value 13:15:16 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1278.866546] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:15:16 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0406618) 13:15:16 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 13:15:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) open_by_handle_at(r3, &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0xb2, 0x8000}, 0x40, 0x2}}, 0x200002) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000f00000000000000"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) unshare(0x48020200) [ 1279.102589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1279.109352] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1279.112504] kauditd_printk_skb: 4 callbacks suppressed [ 1279.112523] audit: type=1400 audit(1706620516.944:52): avc: denied { associate } for pid=8836 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=99 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1279.162149] FAULT_INJECTION: forcing a failure. [ 1279.162149] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.165176] CPU: 0 PID: 8852 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1279.166562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.168257] Call Trace: [ 1279.168806] dump_stack+0x107/0x167 [ 1279.169562] should_fail.cold+0x5/0xa [ 1279.170343] ? create_object.isra.0+0x3a/0xa20 [ 1279.171283] should_failslab+0x5/0x20 [ 1279.172058] kmem_cache_alloc+0x5b/0x310 [ 1279.172900] ? mark_held_locks+0x9e/0xe0 [ 1279.173724] create_object.isra.0+0x3a/0xa20 [ 1279.174617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.175649] kmem_cache_alloc_bulk+0x168/0x320 [ 1279.176591] io_submit_sqes+0x6f76/0x85c0 [ 1279.177458] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1279.178459] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1279.179434] ? lock_downgrade+0x6d0/0x6d0 [ 1279.180268] ? find_held_lock+0x2c/0x110 [ 1279.181112] ? io_submit_sqes+0x85c0/0x85c0 [ 1279.181985] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1279.182958] ? wait_for_completion_io+0x270/0x270 [ 1279.183929] ? rcu_read_lock_any_held+0x75/0xa0 [ 1279.184870] ? vfs_write+0x354/0xa70 [ 1279.185679] ? fput_many+0x2f/0x1a0 [ 1279.186418] ? ksys_write+0x1a9/0x260 [ 1279.187188] ? __ia32_sys_read+0xb0/0xb0 [ 1279.188017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1279.189092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1279.190130] do_syscall_64+0x33/0x40 [ 1279.190877] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1279.191907] RIP: 0033:0x7f24549c7b19 [ 1279.192669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1279.196433] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1279.197959] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1279.199391] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1279.200848] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.202283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1279.203728] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1279.219609] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1279.378857] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 13:15:30 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40086602) 13:15:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000300)={0x7, {{0xa, 0x4e21, 0x4, @private0, 0x447}}, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x6}}}, 0x108) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0xfff, 0x4) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048002}, 0x24004000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="11000000018000000500000025fb7be238000000ff07000000000000c0e7226808000000"]}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @mcast1, 0x7}, 0x1c) 13:15:30 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 13:15:30 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0406619) 13:15:30 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 13:15:30 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:30 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1292.377213] FAULT_INJECTION: forcing a failure. [ 1292.377213] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.380168] CPU: 1 PID: 8876 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1292.381836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.383565] Call Trace: [ 1292.384123] dump_stack+0x107/0x167 [ 1292.384911] should_fail.cold+0x5/0xa [ 1292.385807] should_failslab+0x5/0x20 [ 1292.386629] kmem_cache_alloc_bulk+0x4b/0x320 [ 1292.387705] io_submit_sqes+0x6f76/0x85c0 [ 1292.388602] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1292.389633] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1292.390648] ? lock_downgrade+0x6d0/0x6d0 [ 1292.391505] ? find_held_lock+0x2c/0x110 [ 1292.392478] ? io_submit_sqes+0x85c0/0x85c0 [ 1292.393582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1292.394644] ? wait_for_completion_io+0x270/0x270 [ 1292.395741] ? rcu_read_lock_any_held+0x75/0xa0 [ 1292.396846] ? vfs_write+0x354/0xa70 [ 1292.397658] ? fput_many+0x2f/0x1a0 [ 1292.398425] ? ksys_write+0x1a9/0x260 [ 1292.399246] ? __ia32_sys_read+0xb0/0xb0 [ 1292.400112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.401256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.402361] do_syscall_64+0x33/0x40 [ 1292.403162] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1292.404243] RIP: 0033:0x7f24549c7b19 [ 1292.405048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.408922] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1292.410553] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1292.412060] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1292.413609] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.415109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1292.416637] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1292.486241] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1292.507377] FAULT_INJECTION: forcing a failure. [ 1292.507377] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.510584] CPU: 1 PID: 8889 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1292.512153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.514077] Call Trace: [ 1292.514684] dump_stack+0x107/0x167 [ 1292.515530] should_fail.cold+0x5/0xa [ 1292.516403] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1292.517620] should_failslab+0x5/0x20 [ 1292.518508] kmem_cache_alloc_trace+0x55/0x320 [ 1292.519572] ? lock_acquire+0x197/0x470 [ 1292.520509] io_uring_alloc_task_context+0x99/0x6a0 [ 1292.521671] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1292.522801] ? find_held_lock+0x2c/0x110 [ 1292.523753] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1292.525023] __io_uring_add_tctx_node+0x2c6/0x520 [ 1292.526282] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1292.527552] __do_sys_io_uring_enter+0x14de/0x1920 [ 1292.528711] ? lock_downgrade+0x6d0/0x6d0 [ 1292.529672] ? find_held_lock+0x2c/0x110 [ 1292.530634] ? io_submit_sqes+0x85c0/0x85c0 [ 1292.531659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1292.531935] FAT-fs (loop2): Unrecognized mount option "roDir" or missing value [ 1292.532805] ? wait_for_completion_io+0x270/0x270 [ 1292.532830] ? rcu_read_lock_any_held+0x75/0xa0 [ 1292.532858] ? vfs_write+0x354/0xa70 [ 1292.537218] ? fput_many+0x2f/0x1a0 [ 1292.538083] ? ksys_write+0x1a9/0x260 [ 1292.538988] ? __ia32_sys_read+0xb0/0xb0 [ 1292.539956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.541215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.542448] do_syscall_64+0x33/0x40 [ 1292.543332] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1292.544554] RIP: 0033:0x7f94eea4db19 [ 1292.545318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.549044] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1292.550582] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1292.552048] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1292.553524] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.555008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.556449] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:15:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40086604) 13:15:30 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:30 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:15:30 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0506617) [ 1292.747995] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1292.776281] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 13:15:30 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x58, [@private]}, @lsrr={0x83, 0x3, 0x8f}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/422], 0x1ba) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @val={0x1, 0x1, 0xa25, 0x5, 0x7c, 0xe}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x1c, 0x3a, 0x64, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@end]}}, @redirect={0x5, 0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x1, 0x1, 0x800, 0x67, 0xa81, 0xf4, 0x6, 0x9, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast}, "cf5a40763164"}}}, 0x44) syz_emit_ethernet(0x26, &(0x7f0000000000)={@empty, @multicast, @val={@val={0x9100, 0x7, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "3ae9ca6efeda1a52"}}}}, &(0x7f0000000040)={0x1, 0x4, [0xe00, 0x1dc, 0x43b, 0x368]}) 13:15:30 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 13:15:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40086607) 13:15:30 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 13:15:30 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc080661a) 13:15:30 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:15:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fallocate(r0, 0x10, 0x3f, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x107142, 0x0) sendfile(r5, r3, 0x0, 0x7ffffff9) fallocate(r2, 0x0, 0x0, 0x8000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fallocate(r7, 0x0, 0x10001, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x2}) readlinkat(r6, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)=""/237, 0xed) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000700)={"c210284bfdf0caddab5a6daa7d4c93b2", 0x0, 0x0, {0x80, 0x1f}, {0x7fff, 0x3f}, 0x4, [0x5, 0x2, 0x5, 0x4, 0x1, 0x100, 0x8, 0x1, 0x40, 0x5, 0xfffffffffffffff9, 0x9, 0x4fd, 0x5aa2, 0x10001, 0x5]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x0, 0x8000, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) pwritev(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0, 0x4000000) [ 1293.001506] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:15:30 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff00000000000000000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001d40)='net/nfsfs\x00') unlinkat(r1, &(0x7f0000001e80)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x7ef3, 0x70, @private1, @local, 0x20, 0x8000, 0x1ff}}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth1_virt_wifi\x00'}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x210200, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x364, 0x17, 0x10, 0x70bd27, 0x25dfdbfb, {0xd}, [@generic="cbad1335a24282c88f96d3d80a068370973183941d12a0d752234597af72f2e42778d1036318878eb0010e97a462c4302b4900cf9539f2a06c4a9702c853f5f051ed3a8cf2e43ca0405389604748c339f2a9947c9632e657b4dd66959bc4a82d5341048091ce82ac7f66102b52704ab320cc6df3eb1af6589b7b7e", @nested={0x1b9, 0x18, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @u32=0x101}, @generic="25c378517f5120ade8b335aa51ee2e2ce5c38828cbd56eb464d7d3eb096b0b55a05fbc43dd8593736a212dbaedf74d270158ebed6cade6b31f3fd3923abe7d5ff40b2b8fcb45bc17b7d299bfb209f0995691f16b6d02b128ed12e9933c5a4d9d4f88b308728ce4d705c8fa45fac7fdf53aaec4bddb114baa24a49e750cd5025fcdb75cce2759336c82e4be78e91bd50b87e0df4dcb1f92f0b5dc9f22b37de2ec0a507671478a2708063122c06d3753dfe08ce5daa805dd56de5fa22357bfe9fd667c445f5cc8ef7ded76972dd4", @typed={0xbd, 0x55, 0x0, 0x0, @binary="c199136ce544d2d4fe97e20f295aa2888bfdcee717142d461fd36fe383fbd51ed5042336d1667e351b0fb5a0e1ca829b7f8206f0a77b3d8b1bbf9df8d60bac9c571b25d3c02794393ff7ecd281baa565b31bfc390e9c3cb1abfa21e5e0e3dace8f493f223be3350d4cb5a11206f011deb2fee1c398878481ae212ddc83731d64d0e609d4e034779d22c0fd956f576db63646a1c0de1c3e78fdb0ec3b5d690242dbdd81fb72454e692c5ff3c746baa3dde4f1e9377dcd2244e5"}, @typed={0x8, 0x55, 0x0, 0x0, @u32=0x1e}, @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x4, 0x21}]}, @nested={0x101, 0x91, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @fd}, @generic="e1acefaf6e57e848729a22048aa696042ae1e3debf949429f74766eae067223671c1a97076df11bf1658ad9619af426f0eb94a1c78fd68f2335f6c854340e5b86e01a17868da2e48d78235ff1398deed5fc35ac56cd49bbd4f977a39cfb53598c077282767a5b103f9d750f594a39955519e8da97e41cc7faacd234a66ac47faffa17efd315bd09a7b38f7020c1a3b254a8bd20423bb4589224f0ccc34bd9d34408e72ced0d4247096ca78489a46a65519cba1aef9d9e2b1762ca7b5ddc12d6f7545cbd2681ed020d0eb75e936a248e873bc953e076c9d297b5b602619", @typed={0x8, 0x27, 0x0, 0x0, @u32=0x18}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x24, 0x0, 0x0, @pid}]}, @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x90}, 0x800) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x2}, [{0x2, 0x1}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x0, 0xee00}, {0x2, 0x8}, {0x2, 0x7}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x1, r4}], {0x10, 0x4}, {0x20, 0x7}}, 0x64, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x8800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) [ 1293.173449] FAULT_INJECTION: forcing a failure. [ 1293.173449] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.176165] CPU: 0 PID: 8933 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1293.177628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.179370] Call Trace: [ 1293.179925] dump_stack+0x107/0x167 [ 1293.180706] should_fail.cold+0x5/0xa [ 1293.181511] ? create_object.isra.0+0x3a/0xa20 [ 1293.182467] should_failslab+0x5/0x20 [ 1293.183264] kmem_cache_alloc+0x5b/0x310 [ 1293.184115] create_object.isra.0+0x3a/0xa20 [ 1293.185056] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.186022] kmem_cache_alloc_trace+0x151/0x320 [ 1293.186863] io_uring_alloc_task_context+0x99/0x6a0 [ 1293.187742] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1293.188646] ? find_held_lock+0x2c/0x110 [ 1293.189354] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1293.190211] __io_uring_add_tctx_node+0x2c6/0x520 [ 1293.191055] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1293.191981] __do_sys_io_uring_enter+0x14de/0x1920 [ 1293.192854] ? lock_downgrade+0x6d0/0x6d0 [ 1293.193592] ? find_held_lock+0x2c/0x110 [ 1293.194309] ? io_submit_sqes+0x85c0/0x85c0 [ 1293.195088] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1293.195922] ? wait_for_completion_io+0x270/0x270 [ 1293.196777] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.197591] ? vfs_write+0x354/0xa70 [ 1293.198244] ? fput_many+0x2f/0x1a0 [ 1293.198877] ? ksys_write+0x1a9/0x260 [ 1293.199536] ? __ia32_sys_read+0xb0/0xb0 [ 1293.200245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.201163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.202068] do_syscall_64+0x33/0x40 [ 1293.202714] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1293.203606] RIP: 0033:0x7f94eea4db19 [ 1293.204256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.207466] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1293.208824] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1293.210063] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1293.211297] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.212545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.213786] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1293.225675] device veth0_vlan entered promiscuous mode [ 1293.229283] FAULT_INJECTION: forcing a failure. [ 1293.229283] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.232083] CPU: 0 PID: 8924 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1293.233278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.234688] Call Trace: [ 1293.235140] dump_stack+0x107/0x167 [ 1293.235759] should_fail.cold+0x5/0xa [ 1293.236411] ? create_object.isra.0+0x3a/0xa20 [ 1293.237220] should_failslab+0x5/0x20 [ 1293.237876] kmem_cache_alloc+0x5b/0x310 [ 1293.238578] create_object.isra.0+0x3a/0xa20 [ 1293.239329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.240194] kmem_cache_alloc_bulk+0x168/0x320 [ 1293.240979] io_submit_sqes+0x6f76/0x85c0 [ 1293.241708] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1293.242556] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1293.243374] ? lock_downgrade+0x6d0/0x6d0 [ 1293.244073] ? find_held_lock+0x2c/0x110 [ 1293.244780] ? io_submit_sqes+0x85c0/0x85c0 [ 1293.245529] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1293.246345] ? wait_for_completion_io+0x270/0x270 [ 1293.247160] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.247948] ? vfs_write+0x354/0xa70 [ 1293.248593] ? fput_many+0x2f/0x1a0 [ 1293.249210] ? ksys_write+0x1a9/0x260 [ 1293.249860] ? __ia32_sys_read+0xb0/0xb0 [ 1293.250553] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.251446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.252318] do_syscall_64+0x33/0x40 [ 1293.252958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1293.253826] RIP: 0033:0x7f24549c7b19 [ 1293.254456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.257603] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1293.258889] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1293.260092] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1293.261298] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.262500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.263705] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:15:45 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 13:15:45 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 13:15:45 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:15:45 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0c0583b) 13:15:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6609) 13:15:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x17, &(0x7f0000000080)={@remote, @empty}, 0x4d) setsockopt$inet_mreqn(r1, 0x0, 0x17, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'bond0\x00'}) 13:15:45 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:15:45 executing program 0: syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f27e5f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x0, 0xe}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) [ 1307.359495] FAULT_INJECTION: forcing a failure. [ 1307.359495] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.362216] CPU: 0 PID: 8953 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1307.363527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.365151] Call Trace: [ 1307.365717] dump_stack+0x107/0x167 [ 1307.366426] should_fail.cold+0x5/0xa [ 1307.367164] ? create_object.isra.0+0x3a/0xa20 [ 1307.368040] should_failslab+0x5/0x20 [ 1307.368777] kmem_cache_alloc+0x5b/0x310 [ 1307.369542] ? mark_held_locks+0x9e/0xe0 [ 1307.370286] create_object.isra.0+0x3a/0xa20 [ 1307.371089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1307.372039] kmem_cache_alloc_bulk+0x168/0x320 [ 1307.372920] io_submit_sqes+0x6f76/0x85c0 [ 1307.373719] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1307.374667] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1307.375587] ? lock_downgrade+0x6d0/0x6d0 [ 1307.376374] ? find_held_lock+0x2c/0x110 [ 1307.377160] ? io_submit_sqes+0x85c0/0x85c0 [ 1307.377974] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1307.378860] ? wait_for_completion_io+0x270/0x270 [ 1307.379749] ? rcu_read_lock_any_held+0x75/0xa0 [ 1307.380600] ? vfs_write+0x354/0xa70 [ 1307.381293] ? fput_many+0x2f/0x1a0 [ 1307.381960] ? ksys_write+0x1a9/0x260 [ 1307.382658] ? __ia32_sys_read+0xb0/0xb0 [ 1307.383407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1307.384363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1307.385330] do_syscall_64+0x33/0x40 [ 1307.386010] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1307.386949] RIP: 0033:0x7f24549c7b19 [ 1307.387634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.390998] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1307.392379] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1307.393689] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1307.394984] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.396276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.397587] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1307.480560] FAULT_INJECTION: forcing a failure. [ 1307.480560] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.483396] CPU: 1 PID: 8964 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1307.484823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.486527] Call Trace: [ 1307.487077] dump_stack+0x107/0x167 [ 1307.487837] should_fail.cold+0x5/0xa [ 1307.488626] ? create_object.isra.0+0x3a/0xa20 [ 1307.489684] should_failslab+0x5/0x20 [ 1307.490482] kmem_cache_alloc+0x5b/0x310 [ 1307.491355] create_object.isra.0+0x3a/0xa20 [ 1307.492354] kmemleak_alloc_percpu+0xa0/0x100 [ 1307.493304] pcpu_alloc+0x4e2/0x1240 [ 1307.494089] __percpu_counter_init+0x10d/0x2d0 [ 1307.495023] io_uring_alloc_task_context+0xcc/0x6a0 [ 1307.496049] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1307.497073] ? find_held_lock+0x2c/0x110 [ 1307.497906] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1307.498894] __io_uring_add_tctx_node+0x2c6/0x520 [ 1307.499892] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1307.500991] __do_sys_io_uring_enter+0x14de/0x1920 [ 1307.502141] ? lock_downgrade+0x6d0/0x6d0 [ 1307.503105] ? find_held_lock+0x2c/0x110 [ 1307.504064] ? io_submit_sqes+0x85c0/0x85c0 [ 1307.505065] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1307.506184] ? wait_for_completion_io+0x270/0x270 [ 1307.507285] ? rcu_read_lock_any_held+0x75/0xa0 [ 1307.508364] ? vfs_write+0x354/0xa70 [ 1307.509205] ? fput_many+0x2f/0x1a0 [ 1307.510027] ? ksys_write+0x1a9/0x260 [ 1307.510949] ? __ia32_sys_read+0xb0/0xb0 [ 1307.511856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1307.513112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1307.514284] do_syscall_64+0x33/0x40 [ 1307.515155] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1307.516330] RIP: 0033:0x7f94eea4db19 [ 1307.517208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1307.521466] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1307.523175] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1307.524770] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1307.526468] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1307.527926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.529535] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1307.590167] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40087602) 13:16:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:05 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x0, 0x1, 0x9, 0x8}, {0x5, 0x4, 0x6, 0x6}, {0x81, 0x5, 0x14, 0x3}, {0x3, 0x3, 0x40, 0xa}, {0x2, 0x3f, 0x8, 0xffd}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/kcm\x00') dup2(r0, 0xffffffffffffffff) accept4(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000280)=0x80, 0x800) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r6, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fba0da3344bc9163688567feda8dba320d292f4ebefe64e99", "220c0000002d52004bde09505bf1c35930ac1d9268624c1420b156a2ac400377"}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, r5, 0x3, r6, 0x0) creat(&(0x7f0000000380)='./file1\x00', 0x19) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0xff, 0x3, 0x4, 0xbf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x80, 0x7, 0x8, 0x3, 0xff, 0x9, 0x0, 0x0, 0x7, 0x0, 0x5}, r5, 0x10, r0, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f00000000c0)=""/31, &(0x7f0000000100)=0x1f) fallocate(r1, 0x40, 0x0, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x102, 0x82) 13:16:05 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 13:16:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/78, 0x4e, 0x12040, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r0, r1/1000+10000}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_cmd={0x22, 0x1, 0x2124, 0x1, 0x1e, 0x5, 0x6, 0x5, 0x0, 0x44, 0x7, 0x4e, 0x8, 0x1f, 0xaf, 0x6, [0x9, 0x8001]}}) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 13:16:05 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:16:05 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/58, 0x3a}], 0x5, &(0x7f0000000380)=""/18, 0x12}, 0x0, 0x40000121, 0x0, {0x2, r7}}, 0x4) 13:16:05 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) [ 1327.324909] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1327.354296] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1327.374553] FAULT_INJECTION: forcing a failure. [ 1327.374553] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.376173] CPU: 0 PID: 8984 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1327.377119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.378241] Call Trace: [ 1327.378601] dump_stack+0x107/0x167 [ 1327.379110] should_fail.cold+0x5/0xa [ 1327.379629] ? create_object.isra.0+0x3a/0xa20 [ 1327.380261] should_failslab+0x5/0x20 [ 1327.380781] kmem_cache_alloc+0x5b/0x310 [ 1327.381355] ? mark_held_locks+0x9e/0xe0 [ 1327.381922] create_object.isra.0+0x3a/0xa20 [ 1327.382530] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1327.383183] kmem_cache_alloc_bulk+0x168/0x320 [ 1327.383818] io_submit_sqes+0x6f76/0x85c0 [ 1327.384401] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1327.385117] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1327.385801] ? lock_downgrade+0x6d0/0x6d0 [ 1327.386383] ? find_held_lock+0x2c/0x110 [ 1327.386960] ? io_submit_sqes+0x85c0/0x85c0 [ 1327.387576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1327.388261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.389022] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1327.389787] ? trace_hardirqs_on+0x5b/0x180 [ 1327.390393] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1327.391174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.391910] do_syscall_64+0x33/0x40 [ 1327.392443] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.393191] RIP: 0033:0x7f24549c7b19 [ 1327.393722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.396338] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1327.397430] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1327.398419] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1327.399400] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.400390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.401382] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1327.405472] FAULT_INJECTION: forcing a failure. [ 1327.405472] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.407083] CPU: 0 PID: 8993 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1327.408019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.409186] Call Trace: [ 1327.409546] dump_stack+0x107/0x167 [ 1327.410052] should_fail.cold+0x5/0xa [ 1327.410569] ? create_object.isra.0+0x3a/0xa20 [ 1327.411185] should_failslab+0x5/0x20 [ 1327.411701] kmem_cache_alloc+0x5b/0x310 [ 1327.412260] create_object.isra.0+0x3a/0xa20 [ 1327.412862] kmemleak_alloc_percpu+0xa0/0x100 [ 1327.413442] pcpu_alloc+0x4e2/0x1240 [ 1327.413957] __percpu_counter_init+0x10d/0x2d0 [ 1327.414581] io_uring_alloc_task_context+0xcc/0x6a0 [ 1327.415261] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1327.415926] ? find_held_lock+0x2c/0x110 [ 1327.416479] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1327.417157] __io_uring_add_tctx_node+0x2c6/0x520 [ 1327.417817] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1327.418538] __do_sys_io_uring_enter+0x14de/0x1920 [ 1327.419210] ? lock_downgrade+0x6d0/0x6d0 [ 1327.419778] ? find_held_lock+0x2c/0x110 [ 1327.420331] ? io_submit_sqes+0x85c0/0x85c0 [ 1327.420935] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1327.421596] ? wait_for_completion_io+0x270/0x270 [ 1327.422247] ? rcu_read_lock_any_held+0x75/0xa0 [ 1327.422889] ? vfs_write+0x354/0xa70 [ 1327.423398] ? fput_many+0x2f/0x1a0 [ 1327.423867] ? ksys_write+0x1a9/0x260 [ 1327.424378] ? __ia32_sys_read+0xb0/0xb0 [ 1327.424943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.425660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.426375] do_syscall_64+0x33/0x40 [ 1327.426881] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.427574] RIP: 0033:0x7f94eea4db19 [ 1327.428079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.430583] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1327.431621] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1327.432578] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1327.433562] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.434532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.435498] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:16:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x400c6615) [ 1327.458335] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/78, 0x4e, 0x12040, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r0, r1/1000+10000}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_cmd={0x22, 0x1, 0x2124, 0x1, 0x1e, 0x5, 0x6, 0x5, 0x0, 0x44, 0x7, 0x4e, 0x8, 0x1f, 0xaf, 0x6, [0x9, 0x8001]}}) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 13:16:05 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x3015c0, 0x0) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x40000, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r3, r2, 0x0, 0x2) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0x3, 0x5, 0x2, 0x1, 0x6}) pipe2(&(0x7f0000000100), 0x4000) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x100, 0x0, 0x0, 0xf3cb, 0x3, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:16:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:05 executing program 2: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6e2, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x7fffdf004000, 0x0, 0x4022812, r0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) fcntl$dupfd(r0, 0x406, r0) bind(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x2}, 0x80) 13:16:05 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 13:16:05 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 13:16:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40106614) 13:16:05 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) 13:16:05 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x4010, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:16:05 executing program 0: flock(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x7fffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r4 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r0, 0x3, {0x0, r9}, 0x7, 0x0, 0x0, {0x0, 0x0, r10}}, 0xffffffff) [ 1327.815459] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:05 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffff8161}}, './file0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) close(0xffffffffffffffff) [ 1327.833620] FAULT_INJECTION: forcing a failure. [ 1327.833620] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.835263] CPU: 0 PID: 9026 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1327.836011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.836916] Call Trace: [ 1327.837239] dump_stack+0x107/0x167 [ 1327.837637] should_fail.cold+0x5/0xa [ 1327.838053] ? io_uring_alloc_task_context+0x99/0x6a0 [ 1327.838616] should_failslab+0x5/0x20 [ 1327.839036] kmem_cache_alloc_trace+0x55/0x320 [ 1327.839547] ? lock_acquire+0x197/0x470 [ 1327.839986] io_uring_alloc_task_context+0x99/0x6a0 [ 1327.840535] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1327.841079] ? find_held_lock+0x2c/0x110 [ 1327.841525] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1327.842060] __io_uring_add_tctx_node+0x2c6/0x520 [ 1327.842597] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1327.843170] __do_sys_io_uring_enter+0x14de/0x1920 [ 1327.843693] ? lock_downgrade+0x6d0/0x6d0 [ 1327.844142] ? find_held_lock+0x2c/0x110 [ 1327.844575] ? io_submit_sqes+0x85c0/0x85c0 [ 1327.845072] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1327.845600] ? wait_for_completion_io+0x270/0x270 [ 1327.846122] ? rcu_read_lock_any_held+0x75/0xa0 [ 1327.846611] ? vfs_write+0x354/0xa70 [ 1327.847006] ? fput_many+0x2f/0x1a0 [ 1327.847398] ? ksys_write+0x1a9/0x260 [ 1327.847808] ? __ia32_sys_read+0xb0/0xb0 [ 1327.848248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.848798] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.849354] do_syscall_64+0x33/0x40 [ 1327.849751] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.850294] RIP: 0033:0x7fd021856b19 [ 1327.850703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.852642] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1327.853472] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1327.854255] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1327.855043] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.855835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.856632] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1327.868417] FAULT_INJECTION: forcing a failure. [ 1327.868417] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.869711] CPU: 0 PID: 9028 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1327.870431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.871344] Call Trace: [ 1327.871625] dump_stack+0x107/0x167 [ 1327.872019] should_fail.cold+0x5/0xa [ 1327.872431] ? io_wq_create+0xeb/0xc00 [ 1327.872870] should_failslab+0x5/0x20 [ 1327.873285] __kmalloc+0x72/0x390 [ 1327.873660] io_wq_create+0xeb/0xc00 [ 1327.874064] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1327.874615] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1327.875141] ? io_apoll_task_func+0x2d0/0x2d0 [ 1327.875625] ? __io_req_find_next+0x300/0x300 [ 1327.876108] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1327.876638] __io_uring_add_tctx_node+0x2c6/0x520 [ 1327.877155] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1327.877734] __do_sys_io_uring_enter+0x14de/0x1920 [ 1327.878252] ? lock_downgrade+0x6d0/0x6d0 [ 1327.878717] ? find_held_lock+0x2c/0x110 [ 1327.879168] ? io_submit_sqes+0x85c0/0x85c0 [ 1327.879649] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1327.880189] ? wait_for_completion_io+0x270/0x270 [ 1327.880721] ? rcu_read_lock_any_held+0x75/0xa0 [ 1327.881229] ? vfs_write+0x354/0xa70 [ 1327.881649] ? fput_many+0x2f/0x1a0 [ 1327.882040] ? ksys_write+0x1a9/0x260 [ 1327.882465] ? __ia32_sys_read+0xb0/0xb0 [ 1327.882895] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.883476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.884026] do_syscall_64+0x33/0x40 [ 1327.884445] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.884992] RIP: 0033:0x7f94eea4db19 [ 1327.885411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.887450] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1327.888295] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1327.889090] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1327.889885] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.890674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.891473] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:16:05 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1327.903291] FAULT_INJECTION: forcing a failure. [ 1327.903291] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.904912] CPU: 0 PID: 9029 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1327.905684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.906625] Call Trace: [ 1327.906922] dump_stack+0x107/0x167 [ 1327.907339] should_fail.cold+0x5/0xa [ 1327.907752] ? create_object.isra.0+0x3a/0xa20 [ 1327.908256] should_failslab+0x5/0x20 [ 1327.908664] kmem_cache_alloc+0x5b/0x310 [ 1327.909106] ? mark_held_locks+0x9e/0xe0 [ 1327.909548] create_object.isra.0+0x3a/0xa20 [ 1327.910016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1327.910577] kmem_cache_alloc_bulk+0x168/0x320 [ 1327.911066] io_submit_sqes+0x6f76/0x85c0 [ 1327.911521] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1327.912063] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1327.912591] ? lock_downgrade+0x6d0/0x6d0 [ 1327.913045] ? find_held_lock+0x2c/0x110 [ 1327.913498] ? io_submit_sqes+0x85c0/0x85c0 [ 1327.913979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1327.914502] ? wait_for_completion_io+0x270/0x270 [ 1327.915021] ? rcu_read_lock_any_held+0x75/0xa0 [ 1327.915539] ? vfs_write+0x354/0xa70 [ 1327.915970] ? fput_many+0x2f/0x1a0 [ 1327.916381] ? ksys_write+0x1a9/0x260 [ 1327.916798] ? __ia32_sys_read+0xb0/0xb0 [ 1327.917268] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.917848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.918424] do_syscall_64+0x33/0x40 [ 1327.918831] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1327.919400] RIP: 0033:0x7f24549c7b19 [ 1327.919816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1327.921865] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1327.922709] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1327.923493] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1327.924281] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.925076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.925864] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:16:05 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 13:16:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x401c5820) 13:16:05 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 1328.116544] FAULT_INJECTION: forcing a failure. [ 1328.116544] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.118277] CPU: 0 PID: 9045 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1328.119044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.119958] Call Trace: [ 1328.120255] dump_stack+0x107/0x167 [ 1328.120663] should_fail.cold+0x5/0xa [ 1328.121107] ? create_object.isra.0+0x3a/0xa20 [ 1328.121614] should_failslab+0x5/0x20 [ 1328.122038] kmem_cache_alloc+0x5b/0x310 [ 1328.122485] ? mark_held_locks+0x9e/0xe0 [ 1328.122935] create_object.isra.0+0x3a/0xa20 [ 1328.123425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1328.123982] kmem_cache_alloc_bulk+0x168/0x320 [ 1328.124479] io_submit_sqes+0x6f76/0x85c0 [ 1328.124951] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1328.125488] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1328.126093] ? lock_downgrade+0x6d0/0x6d0 [ 1328.126532] ? find_held_lock+0x2c/0x110 [ 1328.126974] ? io_submit_sqes+0x85c0/0x85c0 [ 1328.127467] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1328.128018] ? wait_for_completion_io+0x270/0x270 [ 1328.128553] ? rcu_read_lock_any_held+0x75/0xa0 [ 1328.129076] ? vfs_write+0x354/0xa70 [ 1328.129504] ? fput_many+0x2f/0x1a0 [ 1328.129916] ? ksys_write+0x1a9/0x260 [ 1328.130341] ? __ia32_sys_read+0xb0/0xb0 [ 1328.130796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1328.131378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1328.131954] do_syscall_64+0x33/0x40 [ 1328.132366] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1328.132939] RIP: 0033:0x7f24549c7b19 [ 1328.133355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.135396] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1328.136244] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1328.137007] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1328.137804] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.138572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.139379] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1328.165521] FAULT_INJECTION: forcing a failure. [ 1328.165521] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.168132] CPU: 1 PID: 9049 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1328.169180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1328.170463] Call Trace: [ 1328.170875] dump_stack+0x107/0x167 [ 1328.171447] should_fail.cold+0x5/0xa [ 1328.172032] ? create_object.isra.0+0x3a/0xa20 [ 1328.172741] should_failslab+0x5/0x20 [ 1328.173331] kmem_cache_alloc+0x5b/0x310 [ 1328.173953] create_object.isra.0+0x3a/0xa20 [ 1328.174638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1328.175450] kmem_cache_alloc_trace+0x151/0x320 [ 1328.176215] io_uring_alloc_task_context+0x99/0x6a0 [ 1328.177030] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1328.177824] ? find_held_lock+0x2c/0x110 [ 1328.178484] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1328.179261] __io_uring_add_tctx_node+0x2c6/0x520 [ 1328.180038] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1328.180884] __do_sys_io_uring_enter+0x14de/0x1920 [ 1328.181682] ? lock_downgrade+0x6d0/0x6d0 [ 1328.182338] ? find_held_lock+0x2c/0x110 [ 1328.182989] ? io_submit_sqes+0x85c0/0x85c0 [ 1328.183664] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1328.184423] ? wait_for_completion_io+0x270/0x270 [ 1328.185194] ? rcu_read_lock_any_held+0x75/0xa0 [ 1328.185920] ? vfs_write+0x354/0xa70 [ 1328.186494] ? fput_many+0x2f/0x1a0 [ 1328.187046] ? ksys_write+0x1a9/0x260 [ 1328.187635] ? __ia32_sys_read+0xb0/0xb0 [ 1328.188260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1328.189080] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1328.189892] do_syscall_64+0x33/0x40 [ 1328.190459] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1328.191245] RIP: 0033:0x7fd021856b19 [ 1328.191819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1328.194708] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1328.195931] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1328.197104] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1328.198248] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1328.199364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.200507] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1328.206473] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:18 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 13:16:18 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6b9b, &(0x7f0000000080)={0x0, 0xffff, 0x1, 0x3, 0x298, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x5, 0x4, 0x2, 0x200, 0x16, 0x1, {0x1}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:16:18 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 13:16:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl(r0, 0x3, &(0x7f0000000140)) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x3, 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33373631313835303700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c7b2a4502ed64a6eb421652eb677bbba010040000c00000000000000d6f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003800000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010500)="ff010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d6f4655fd6f4655fd6f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000030000000", 0x40, 0x1800}, {&(0x7f0000010f00)="20000000681d5748681d574800000000d6f4655f00"/32, 0x20, 0x1880}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000500000000200000004000000520000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1c00}, {&(0x7f0000011100)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000600000000200000004000000620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x2000}, {&(0x7f0000011200)="c0410000002c0000d6f4655fd6f4655fd6f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000040000000", 0x40, 0x3c00}, {&(0x7f0000011300)="20000000000000000000000000000000d6f4655f000000000000000000000000000002ea00"/64, 0x40, 0x3c80}, {&(0x7f0000011400)="ed4100003c000000d7f4655fd7f4655fd7f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000097bbe33d00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4}, {&(0x7f0000011500)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000070000000000000000000000000000000000000000000000000000000000000000000000000000000ba8b7ff700000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xa0, 0x4400}, {&(0x7f0000011600)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3337363131383530372f66696c65302f66696c6530000000000000000000000000000000000000000000008cbe886300000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xa0, 0x4800}, {&(0x7f0000011700)="ed8100000a000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d33368e00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x4c00}, {&(0x7f0000011800)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800010000000af30100040000000000000000000000090000008000000000000000000000000000000000000000000000000000000000000000000000000000000072b2bc0c00000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000", 0xc0, 0x4fe0}, {&(0x7f0000011900)="ed81000064000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c0ac393e100000000000000000000000000000000000000000000000020000000681d5748681d5748681d5748d7f4655f681d57480000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x5400}, {&(0x7f0000011a00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x57c0}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0xc000}, {&(0x7f0000011c00)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x10000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x10400}, {&(0x7f00000000c0)="00000000000400"/32, 0x20, 0x10800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x10c00}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x11000}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x11400}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x11800}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0x11c00}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0x12000}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0x12400}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0x12800}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x14000}, {&(0x7f0000012800)="0200"/32, 0x20, 0x14400}, {&(0x7f0000012900)="0300"/32, 0x20, 0x2014800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0x14c00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0x15000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x15400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x19400}, {&(0x7f0000013300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1c000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="718994424057dd7bcf057b5dd4d3c358522369a9d40b98a5a4683755d9eedf165d844871b7251d98f9edad1ac151ddb957130777eab62e1e31dfc8d4b03bd3467714a16c52feb0a8f62e5df4461612c0a62e26d2cc09959df5d50c0bd3a9e1d040757632c72b94f77a4f1f0c54155ed7ce1300"]) 13:16:18 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 13:16:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x4020940d) 13:16:18 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:18 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x7f, 0x101) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x2502, 0x0) write$binfmt_elf64(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300000002000000000000000000000040000000000000003300000000000000070000000100380000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000232fb6560197b1fa9d00"/719], 0x478) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setns(r0, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x2c, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x48020200) [ 1340.365098] EXT4-fs (loop0): Unrecognized mount option "q‰”B@WÝ{Ï{]ÔÓÃXR#i©Ô ˜¥¤h7UÙîß]„Hq·%˜ùí­ÁQݹWwê¶.1ßÈÔ°;ÓFw¡lRþ°¨ö.]ôFÀ¦.&ÒÌ •õÕ Ó©áÐ@uv2Ç+”÷zO T^×Î" or missing value [ 1340.407518] FAULT_INJECTION: forcing a failure. [ 1340.407518] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.408059] FAULT_INJECTION: forcing a failure. [ 1340.408059] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.410188] CPU: 0 PID: 9077 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1340.412836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1340.414701] Call Trace: [ 1340.415303] dump_stack+0x107/0x167 [ 1340.416134] should_fail.cold+0x5/0xa [ 1340.416998] ? create_object.isra.0+0x3a/0xa20 [ 1340.418059] should_failslab+0x5/0x20 [ 1340.418916] kmem_cache_alloc+0x5b/0x310 [ 1340.419833] create_object.isra.0+0x3a/0xa20 [ 1340.420825] kmemleak_alloc_percpu+0xa0/0x100 [ 1340.421844] pcpu_alloc+0x4e2/0x1240 [ 1340.422698] __percpu_counter_init+0x10d/0x2d0 [ 1340.423727] io_uring_alloc_task_context+0xcc/0x6a0 [ 1340.424845] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1340.425976] ? find_held_lock+0x2c/0x110 [ 1340.426898] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1340.427991] __io_uring_add_tctx_node+0x2c6/0x520 [ 1340.429093] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1340.430291] __do_sys_io_uring_enter+0x14de/0x1920 [ 1340.431400] ? lock_downgrade+0x6d0/0x6d0 [ 1340.432332] ? find_held_lock+0x2c/0x110 [ 1340.433263] ? io_submit_sqes+0x85c0/0x85c0 [ 1340.434244] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1340.435290] ? wait_for_completion_io+0x270/0x270 [ 1340.436259] ? rcu_read_lock_any_held+0x75/0xa0 [ 1340.437209] ? vfs_write+0x354/0xa70 [ 1340.437960] ? fput_many+0x2f/0x1a0 [ 1340.438690] ? ksys_write+0x1a9/0x260 [ 1340.439455] ? __ia32_sys_read+0xb0/0xb0 [ 1340.440275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1340.441335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1340.442379] do_syscall_64+0x33/0x40 [ 1340.443128] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1340.444175] RIP: 0033:0x7fd021856b19 [ 1340.444942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1340.448719] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1340.450301] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1340.451762] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1340.453234] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.454687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.456138] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1340.457641] CPU: 1 PID: 9074 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1340.458773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1340.460015] Call Trace: [ 1340.460425] dump_stack+0x107/0x167 [ 1340.461014] should_fail.cold+0x5/0xa [ 1340.461644] should_failslab+0x5/0x20 [ 1340.462259] kmem_cache_alloc_bulk+0x4b/0x320 [ 1340.463002] io_submit_sqes+0x6f76/0x85c0 [ 1340.463833] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1340.464590] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1340.465364] ? lock_downgrade+0x6d0/0x6d0 [ 1340.466016] ? find_held_lock+0x2c/0x110 [ 1340.466647] ? io_submit_sqes+0x85c0/0x85c0 [ 1340.467310] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1340.468044] ? wait_for_completion_io+0x270/0x270 [ 1340.468874] ? rcu_read_lock_any_held+0x75/0xa0 [ 1340.469602] ? vfs_write+0x354/0xa70 [ 1340.470176] ? fput_many+0x2f/0x1a0 [ 1340.470732] ? ksys_write+0x1a9/0x260 [ 1340.471317] ? __ia32_sys_read+0xb0/0xb0 [ 1340.471946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1340.472550] FAULT_INJECTION: forcing a failure. [ 1340.472550] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.472770] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1340.472789] do_syscall_64+0x33/0x40 [ 1340.472801] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1340.472811] RIP: 0033:0x7f24549c7b19 [ 1340.472826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1340.472833] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1340.472848] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1340.472855] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1340.472871] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.485321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1340.486467] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1340.487639] CPU: 0 PID: 9078 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1340.489154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1340.491009] Call Trace: [ 1340.491578] dump_stack+0x107/0x167 [ 1340.492349] should_fail.cold+0x5/0xa [ 1340.493153] ? create_object.isra.0+0x3a/0xa20 [ 1340.494127] should_failslab+0x5/0x20 [ 1340.494943] kmem_cache_alloc+0x5b/0x310 [ 1340.495779] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1340.496865] create_object.isra.0+0x3a/0xa20 [ 1340.497811] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1340.498903] __kmalloc+0x16e/0x390 [ 1340.499648] io_wq_create+0xeb/0xc00 [ 1340.500430] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1340.501559] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1340.502607] ? io_apoll_task_func+0x2d0/0x2d0 [ 1340.503559] ? __io_req_find_next+0x300/0x300 [ 1340.504491] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1340.505502] __io_uring_add_tctx_node+0x2c6/0x520 [ 1340.506529] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1340.507624] __do_sys_io_uring_enter+0x14de/0x1920 [ 1340.508656] ? lock_downgrade+0x6d0/0x6d0 [ 1340.509558] ? find_held_lock+0x2c/0x110 [ 1340.510434] ? io_submit_sqes+0x85c0/0x85c0 [ 1340.511351] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1340.512344] ? wait_for_completion_io+0x270/0x270 [ 1340.513388] ? rcu_read_lock_any_held+0x75/0xa0 [ 1340.514392] ? vfs_write+0x354/0xa70 [ 1340.515206] ? fput_many+0x2f/0x1a0 [ 1340.515939] ? ksys_write+0x1a9/0x260 [ 1340.516767] ? __ia32_sys_read+0xb0/0xb0 [ 1340.517677] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1340.518817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1340.519954] do_syscall_64+0x33/0x40 [ 1340.520722] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1340.521863] RIP: 0033:0x7f94eea4db19 [ 1340.522676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1340.526642] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1340.528322] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1340.529842] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1340.531396] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1340.532891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.534466] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:16:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 13:16:18 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1340.636186] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a1"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:33 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40286608) 13:16:33 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,versi', @ANYRESHEX=0x0, @ANYBLOB="6572f3696f6e3d3970323030", @ANYRESDEC, @ANYBLOB]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x6}) io_setup(0x3, &(0x7f0000000000)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0) 13:16:33 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) dup2(r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r10, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000100)="c10210fb3eb6214f1f04e6d48aa9b747b73de6c92b186821dfb8a82701452cdbd6e99dad1e2f9ac174f3da7c138c71eb0e54fdd36d7b8deb8f1b7d39c7603006c69e2753fe5b487210c5a8f01c91f84674cd1595", 0x54, 0x20000000, 0x1}, 0x21e2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000015, 0x10, r2, 0x10000000) syz_io_uring_submit(r3, r11, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 13:16:33 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 13:16:33 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 13:16:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) recvmmsg(r1, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1ff, @mcast2, 0x80000001}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x401}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 13:16:33 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) [ 1355.576093] FAULT_INJECTION: forcing a failure. [ 1355.576093] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.578478] CPU: 0 PID: 9112 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1355.579747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1355.581324] Call Trace: [ 1355.581824] dump_stack+0x107/0x167 [ 1355.582518] should_fail.cold+0x5/0xa [ 1355.583235] ? create_object.isra.0+0x3a/0xa20 [ 1355.584047] should_failslab+0x5/0x20 [ 1355.584755] kmem_cache_alloc+0x5b/0x310 [ 1355.585489] ? mark_held_locks+0x9e/0xe0 [ 1355.586213] create_object.isra.0+0x3a/0xa20 [ 1355.587030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1355.588001] kmem_cache_alloc_bulk+0x168/0x320 [ 1355.588868] io_submit_sqes+0x6f76/0x85c0 [ 1355.589675] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1355.590550] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1355.591502] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1355.592343] FAULT_INJECTION: forcing a failure. [ 1355.592343] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.594373] ? lock_downgrade+0x6d0/0x6d0 [ 1355.595115] ? find_held_lock+0x2c/0x110 [ 1355.595855] ? io_submit_sqes+0x85c0/0x85c0 [ 1355.596658] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1355.597532] ? wait_for_completion_io+0x270/0x270 [ 1355.598442] ? rcu_read_lock_any_held+0x75/0xa0 [ 1355.599275] ? vfs_write+0x354/0xa70 [ 1355.599975] ? fput_many+0x2f/0x1a0 [ 1355.600635] ? ksys_write+0x1a9/0x260 [ 1355.601344] ? __ia32_sys_read+0xb0/0xb0 [ 1355.602076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1355.603012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1355.603916] do_syscall_64+0x33/0x40 [ 1355.604564] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1355.605468] RIP: 0033:0x7f94eea4db19 [ 1355.606121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.609343] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1355.610689] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1355.611944] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1355.613193] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.614451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.615700] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1355.617008] CPU: 1 PID: 9122 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1355.618163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1355.619496] Call Trace: [ 1355.619933] dump_stack+0x107/0x167 [ 1355.620517] should_fail.cold+0x5/0xa [ 1355.621131] ? create_object.isra.0+0x3a/0xa20 [ 1355.621875] should_failslab+0x5/0x20 [ 1355.622476] kmem_cache_alloc+0x5b/0x310 [ 1355.623145] create_object.isra.0+0x3a/0xa20 [ 1355.623906] kmemleak_alloc_percpu+0xa0/0x100 [ 1355.624687] pcpu_alloc+0x4e2/0x1240 [ 1355.625302] __percpu_counter_init+0x10d/0x2d0 [ 1355.626046] io_uring_alloc_task_context+0xcc/0x6a0 [ 1355.626848] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1355.627629] ? find_held_lock+0x2c/0x110 [ 1355.628282] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1355.629062] __io_uring_add_tctx_node+0x2c6/0x520 [ 1355.629833] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1355.630705] __do_sys_io_uring_enter+0x14de/0x1920 [ 1355.631482] ? lock_downgrade+0x6d0/0x6d0 [ 1355.632160] ? find_held_lock+0x2c/0x110 [ 1355.632808] ? io_submit_sqes+0x85c0/0x85c0 [ 1355.633513] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1355.634282] ? wait_for_completion_io+0x270/0x270 [ 1355.635058] ? rcu_read_lock_any_held+0x75/0xa0 [ 1355.635798] ? vfs_write+0x354/0xa70 [ 1355.636395] ? fput_many+0x2f/0x1a0 [ 1355.636975] ? ksys_write+0x1a9/0x260 [ 1355.637592] ? __ia32_sys_read+0xb0/0xb0 [ 1355.638239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1355.639106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1355.639933] do_syscall_64+0x33/0x40 [ 1355.640524] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1355.641359] RIP: 0033:0x7fd021856b19 [ 1355.641976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.644926] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1355.646163] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1355.647295] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1355.648425] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.649576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.650719] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:16:33 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="200400006100000094050000000002000400000000000000ffffff7f000000000600000000000000"], &(0x7f0000000180), 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x80, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0xffffdffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x800, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1355.697402] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 1355.704083] FAULT_INJECTION: forcing a failure. [ 1355.704083] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.706409] CPU: 0 PID: 9118 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1355.707613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1355.709107] Call Trace: [ 1355.709558] dump_stack+0x107/0x167 [ 1355.710154] should_fail.cold+0x5/0xa [ 1355.710776] ? create_object.isra.0+0x3a/0xa20 [ 1355.711512] should_failslab+0x5/0x20 [ 1355.712129] kmem_cache_alloc+0x5b/0x310 [ 1355.712789] ? mark_held_locks+0x9e/0xe0 [ 1355.713462] create_object.isra.0+0x3a/0xa20 [ 1355.714179] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1355.715024] kmem_cache_alloc_bulk+0x168/0x320 [ 1355.715814] io_submit_sqes+0x6f76/0x85c0 [ 1355.716541] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1355.717388] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1355.718213] ? lock_downgrade+0x6d0/0x6d0 [ 1355.718905] ? find_held_lock+0x2c/0x110 [ 1355.719581] ? io_submit_sqes+0x85c0/0x85c0 [ 1355.720307] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1355.721129] ? wait_for_completion_io+0x270/0x270 [ 1355.721955] ? rcu_read_lock_any_held+0x75/0xa0 [ 1355.722729] ? vfs_write+0x354/0xa70 [ 1355.723349] ? fput_many+0x2f/0x1a0 [ 1355.723967] ? ksys_write+0x1a9/0x260 [ 1355.724602] ? __ia32_sys_read+0xb0/0xb0 [ 1355.725297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1355.726180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1355.727044] do_syscall_64+0x33/0x40 [ 1355.727658] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1355.728509] RIP: 0033:0x7f24549c7b19 [ 1355.729134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1355.732222] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1355.733496] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1355.734694] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1355.735885] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.737065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.738270] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1355.741183] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:33 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40305828) 13:16:33 executing program 6: setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = inotify_init() mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) dup2(0xffffffffffffffff, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000000000000001a2f66696c653000"]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000540)=0x1, 0x80000001) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) pidfd_getfd(r4, r5, 0x0) r6 = dup(r3) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f0000000000)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 13:16:33 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 13:16:33 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:33 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,versi', @ANYRESHEX=0x0, @ANYBLOB="6572f3696f6e3d3970323030", @ANYRESDEC, @ANYBLOB]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x6}) io_setup(0x3, &(0x7f0000000000)=0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file1\x00', 0x0) 13:16:33 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40305829) 13:16:33 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) 13:16:33 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 13:16:33 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x100000000) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) finit_module(r0, &(0x7f0000000000)='\x00', 0x1) 13:16:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x2, 0x0) [ 1356.129578] FAULT_INJECTION: forcing a failure. [ 1356.129578] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.131049] CPU: 0 PID: 9143 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1356.131890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.132894] Call Trace: [ 1356.133220] dump_stack+0x107/0x167 [ 1356.133673] should_fail.cold+0x5/0xa [ 1356.134141] ? create_object.isra.0+0x3a/0xa20 [ 1356.134704] should_failslab+0x5/0x20 [ 1356.135157] kmem_cache_alloc+0x5b/0x310 [ 1356.135655] ? mark_held_locks+0x9e/0xe0 [ 1356.136142] create_object.isra.0+0x3a/0xa20 [ 1356.136675] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1356.137279] kmem_cache_alloc_bulk+0x168/0x320 [ 1356.137837] io_submit_sqes+0x6f76/0x85c0 [ 1356.138339] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1356.138929] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1356.139528] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1356.140127] ? lock_downgrade+0x6d0/0x6d0 [ 1356.140651] ? find_held_lock+0x2c/0x110 [ 1356.141149] ? io_submit_sqes+0x85c0/0x85c0 [ 1356.141711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1356.142308] ? wait_for_completion_io+0x270/0x270 [ 1356.142922] ? rcu_read_lock_any_held+0x75/0xa0 [ 1356.143505] ? vfs_write+0x354/0xa70 [ 1356.143956] ? fput_many+0x2f/0x1a0 [ 1356.144412] ? ksys_write+0x1a9/0x260 [ 1356.144887] ? __ia32_sys_read+0xb0/0xb0 [ 1356.145404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.146058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.146691] do_syscall_64+0x33/0x40 [ 1356.147139] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1356.147775] RIP: 0033:0x7f94eea4db19 [ 1356.148238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.150529] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1356.151478] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1356.152312] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1356.153182] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.154044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.154941] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1356.219343] FAULT_INJECTION: forcing a failure. [ 1356.219343] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.221574] CPU: 1 PID: 9153 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1356.222630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.223898] Call Trace: [ 1356.224309] dump_stack+0x107/0x167 [ 1356.224871] should_fail.cold+0x5/0xa [ 1356.225483] ? create_object.isra.0+0x3a/0xa20 [ 1356.226193] should_failslab+0x5/0x20 [ 1356.226784] kmem_cache_alloc+0x5b/0x310 [ 1356.227410] create_object.isra.0+0x3a/0xa20 [ 1356.228088] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1356.228884] kmem_cache_alloc_bulk+0x168/0x320 [ 1356.229609] io_submit_sqes+0x6f76/0x85c0 [ 1356.230294] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1356.231077] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1356.231858] ? lock_downgrade+0x6d0/0x6d0 [ 1356.232523] ? find_held_lock+0x2c/0x110 [ 1356.233170] ? io_submit_sqes+0x85c0/0x85c0 [ 1356.233870] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1356.234649] ? wait_for_completion_io+0x270/0x270 [ 1356.235423] ? rcu_read_lock_any_held+0x75/0xa0 [ 1356.236168] ? vfs_write+0x354/0xa70 [ 1356.236760] ? fput_many+0x2f/0x1a0 [ 1356.237352] ? ksys_write+0x1a9/0x260 [ 1356.237958] ? __ia32_sys_read+0xb0/0xb0 [ 1356.238604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.239437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.240259] do_syscall_64+0x33/0x40 [ 1356.240837] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1356.241674] RIP: 0033:0x7f24549c7b19 [ 1356.242262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.245192] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1356.246406] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1356.247538] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1356.248675] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.249842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.250977] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1356.294323] FAULT_INJECTION: forcing a failure. [ 1356.294323] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.296603] CPU: 1 PID: 9159 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1356.297669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.298951] Call Trace: [ 1356.299357] dump_stack+0x107/0x167 [ 1356.299922] should_fail.cold+0x5/0xa [ 1356.300511] ? io_wq_create+0xeb/0xc00 [ 1356.301122] should_failslab+0x5/0x20 [ 1356.301719] __kmalloc+0x72/0x390 [ 1356.302258] io_wq_create+0xeb/0xc00 [ 1356.302835] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1356.303645] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1356.304421] ? io_apoll_task_func+0x2d0/0x2d0 [ 1356.305132] ? __io_req_find_next+0x300/0x300 [ 1356.305854] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1356.306600] __io_uring_add_tctx_node+0x2c6/0x520 [ 1356.307343] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1356.308156] __do_sys_io_uring_enter+0x14de/0x1920 [ 1356.308913] ? lock_downgrade+0x6d0/0x6d0 [ 1356.309563] ? find_held_lock+0x2c/0x110 [ 1356.310202] ? io_submit_sqes+0x85c0/0x85c0 [ 1356.310872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1356.311614] ? wait_for_completion_io+0x270/0x270 [ 1356.312362] ? rcu_read_lock_any_held+0x75/0xa0 [ 1356.313075] ? vfs_write+0x354/0xa70 [ 1356.313663] ? fput_many+0x2f/0x1a0 [ 1356.314230] ? ksys_write+0x1a9/0x260 [ 1356.314821] ? __ia32_sys_read+0xb0/0xb0 [ 1356.315452] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.316259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.317054] do_syscall_64+0x33/0x40 [ 1356.317645] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1356.318439] RIP: 0033:0x7fd021856b19 [ 1356.319016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1356.321868] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1356.323041] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1356.324143] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1356.325246] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.326357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.327470] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1356.376558] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:47 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000001840)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = dup(0xffffffffffffffff) dup(r1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0x0, @unused=[0x3, 0x0, 0x4, 0xb4], @name="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"}) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x14200, 0x2e) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 13:16:47 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x10000000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:16:47 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 13:16:47 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 13:16:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x235, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa0, 0x8, 0x5, 0x2, 0x0, 0x100000001, 0x4000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfed, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x10004, 0x0, 0x0, 0x1, 0x2, 0x2, 0x9, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r2, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) 13:16:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x4030582a) 13:16:47 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:47 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1369.689415] FAULT_INJECTION: forcing a failure. [ 1369.689415] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.692267] CPU: 0 PID: 9182 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1369.693674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1369.695361] Call Trace: [ 1369.695898] dump_stack+0x107/0x167 [ 1369.696647] should_fail.cold+0x5/0xa [ 1369.697426] should_failslab+0x5/0x20 [ 1369.698243] kmem_cache_alloc_bulk+0x4b/0x320 [ 1369.699162] io_submit_sqes+0x6f76/0x85c0 [ 1369.700026] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1369.701041] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1369.702047] ? lock_downgrade+0x6d0/0x6d0 [ 1369.702889] ? find_held_lock+0x2c/0x110 [ 1369.703723] ? io_submit_sqes+0x85c0/0x85c0 [ 1369.704608] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1369.705596] ? vfs_write+0x7dc/0xa70 [ 1369.706355] ? wait_for_completion_io+0x270/0x270 [ 1369.707339] ? rcu_read_lock_any_held+0x75/0xa0 [ 1369.708284] ? vfs_write+0x354/0xa70 [ 1369.709045] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1369.709977] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1369.711071] ? ksys_write+0x1a9/0x260 [ 1369.711843] ? __ia32_sys_read+0xb0/0xb0 [ 1369.712671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1369.713750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1369.714800] do_syscall_64+0x33/0x40 [ 1369.715552] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1369.716585] RIP: 0033:0x7f24549c7b19 [ 1369.717342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1369.721068] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1369.722606] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1369.724042] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1369.725501] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.726940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1369.728386] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1369.736156] FAULT_INJECTION: forcing a failure. [ 1369.736156] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.738564] FAULT_INJECTION: forcing a failure. [ 1369.738564] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.738601] CPU: 1 PID: 9195 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1369.738613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1369.738619] Call Trace: [ 1369.738646] dump_stack+0x107/0x167 [ 1369.738673] should_fail.cold+0x5/0xa [ 1369.738695] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1369.738720] should_failslab+0x5/0x20 [ 1369.738741] kmem_cache_alloc_trace+0x55/0x320 [ 1369.738758] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1369.738783] __io_uring_add_tctx_node+0x15c/0x520 [ 1369.738804] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1369.738838] __do_sys_io_uring_enter+0x14de/0x1920 [ 1369.738865] ? lock_downgrade+0x6d0/0x6d0 [ 1369.738883] ? find_held_lock+0x2c/0x110 [ 1369.738909] ? io_submit_sqes+0x85c0/0x85c0 [ 1369.738938] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1369.738964] ? wait_for_completion_io+0x270/0x270 [ 1369.738988] ? rcu_read_lock_any_held+0x75/0xa0 [ 1369.739007] ? vfs_write+0x354/0xa70 [ 1369.739031] ? fput_many+0x2f/0x1a0 [ 1369.739053] ? ksys_write+0x1a9/0x260 [ 1369.739074] ? __ia32_sys_read+0xb0/0xb0 [ 1369.739102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1369.764593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1369.765677] do_syscall_64+0x33/0x40 [ 1369.766442] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1369.767489] RIP: 0033:0x7f94eea4db19 [ 1369.768260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1369.772034] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1369.773608] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1369.775075] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1369.776549] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.778027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.779485] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1369.781055] CPU: 0 PID: 9192 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1369.782471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1369.784163] Call Trace: [ 1369.784702] dump_stack+0x107/0x167 [ 1369.785470] should_fail.cold+0x5/0xa [ 1369.786260] ? create_object.isra.0+0x3a/0xa20 [ 1369.787187] should_failslab+0x5/0x20 [ 1369.787976] kmem_cache_alloc+0x5b/0x310 [ 1369.788796] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 1369.789876] create_object.isra.0+0x3a/0xa20 [ 1369.790775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1369.791816] __kmalloc+0x16e/0x390 [ 1369.792541] io_wq_create+0xeb/0xc00 [ 1369.793420] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1369.794517] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1369.795522] ? io_apoll_task_func+0x2d0/0x2d0 [ 1369.796432] ? __io_req_find_next+0x300/0x300 [ 1369.797357] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1369.798348] __io_uring_add_tctx_node+0x2c6/0x520 [ 1369.799325] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1369.800396] __do_sys_io_uring_enter+0x14de/0x1920 [ 1369.801401] ? lock_downgrade+0x6d0/0x6d0 [ 1369.802248] ? find_held_lock+0x2c/0x110 [ 1369.803082] ? io_submit_sqes+0x85c0/0x85c0 [ 1369.803970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1369.804965] ? wait_for_completion_io+0x270/0x270 [ 1369.805968] ? rcu_read_lock_any_held+0x75/0xa0 [ 1369.806913] ? vfs_write+0x354/0xa70 [ 1369.807670] ? fput_many+0x2f/0x1a0 [ 1369.808412] ? ksys_write+0x1a9/0x260 [ 1369.809159] ? __ia32_sys_read+0xb0/0xb0 [ 1369.810003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1369.811074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1369.812126] do_syscall_64+0x33/0x40 [ 1369.812886] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1369.813936] RIP: 0033:0x7fd021856b19 [ 1369.814687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1369.818440] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1369.819984] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1369.821430] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1369.822892] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.824330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.825789] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:16:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x4030582b) 13:16:47 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1369.956513] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:16:47 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) getdents64(r2, &(0x7f0000000080)=""/4096, 0x1000) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:16:47 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) 13:16:47 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 13:16:47 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:16:47 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mq_open(&(0x7f0000000000)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x3, 0x100, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x2) socket$inet(0x2, 0x80000, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'wg2\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000140)) r3 = dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000800000002e2f66696c653000"]) accept4$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c, 0x800) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$DVD_READ_STRUCT(r4, 0x5310, &(0x7f0000000440)=@manufact={0x4, 0x0, 0x800, "00bc95e1d7c7526002994560cca3cb55b66678e5eaea2741345629a1cec02f007569e0842af897601b10179ce9c733b49449827210b73d70a774f7e48cea1c35a571cf104a8db9faf6c7f7a86647a7a3a4a1740d6e9722cbf84f0d9ec33b9bab22d97351d38686158264793722ee3b2516645cf01a1a9ae08aa9192b0aa2d521be5340caa28d3e9aca95d6c911bf19b56b60b59d718961708152c187c5ec50437a3df5039deb78aa1ff0d0c1dce7ff26bb1fbbd65861e3bd8db8c3eabd654b68db5d517f3cad2b86c70d81f32e2a06e473b6ca25df162c2c9c07bc413dca11294ad0405edf9d6960235bf04a490a886388edae8fe3dc39031f5cf8d64613ce9bd37486c957324e5f11cb734692496a2ea9f4a345751bc9c2fe871e70c7b6611549350cde91af83ff7b1c57a2b3fa51cb7019e32b4a56fc4a3f0f78c41e923aed5cb89ab79fb2b1d7d2264638ec688486438cb5bfcda5bd3336c0eca5c4eb49ec0284e9b1356de8e47797300221dae6b2dc5998e5616720ffc947ec2810b3c85b606781abf15f61154565f58d2492cc6a2c56dffa9ba7ab98278ed6ee13653b779b893d8494c76cebde9bc51ed405e27e8daf3d6a9c0e3a09f155d92887781b7e1d1bdca9c0618f5ed7e0c97917b349b694a3d9005f9a672cd522aee5946b70b962128c7702b069399bf489ddb076c5ea02fe2b9030823c4247a6d22cd8c59b4290c56d47ccfa5167f94e9bf5e66bf4fb99c0585598f1113e111eb23cff6482c3060b77f79a77f71e9a6d8fdf8a7311ef5c2eaf7b102e638b3cd28644c29855f14b30e9c0631ead0c314870a30615de4c1bda467575f75edaf7569a77ba047b8443d96d8c862006bfcc7c21b848904100527b69d39c5caf1c3aa038fec350da5c1cbcdec3def9c83b0fe0e3d5f044685ca4e3da91622fcf098a3d4a827740c771dcfc67298754a2a1601e363c35ba09e0191097ac1cb793653beb39885a70b00457010111f12223bc6d6b8dfc16c29e31e27a0bf6c35b421907f10cd41cedd40709d56d7b8e9e3531c1acebc0a5ad21dc1a18affe006320ea8b5d7c4fca00ba4028f802c97ca82c5b321867ae14d8ec57614c9bc5a8b0b7df20bc38585a32d3cf58ea3f9402c478d84c9312e1660648f67ad131560dc6a4932657afcda99b9d5cbf9c8d8e19798f86e62c1dcf4e4bfcdedefac0cd9d9d21cc692a1eb6b7d5b1b2c1a1a49ea7c3566fa56a9d2cc025332479e61fe3a750e20446ebece96faaa58a355e59fb83205c2b389243ecf8141c4a75ffe7281adb43074b88a501682b32c5153f9b79441306a130d17536eafbc70bfe91bb34cf4488d8624cc4fa287fa60b6502c2cc1a049b0afc6bee5a6240238d5ef0e762791121ed045a939dafdf1dfe996325fd552570887ffc7f3066e857015ee8cf082339375cc0989afe26e125bd66579d44c56c4ffe86507b5155ac7f47ef66629ed7b6b11db00c40ef262f5609733ef55b27370e8fbfea36500ba3e9687232eb9f2f6af04dfbfa79a64cd7bfab080648330776ff4088b0345f436f869f5aea2dbd1155bcd62cb858f694ea8e8ca34c418dc7ee051a1a041f0521abd04a7319f73d8fb902688e58a69c9043e8392ff1ddb95a9f6f7c72d5ca765c809901b9e4da6929e6ab98fdbed606854e05677b5fc04b46c7e77550bb2cac1747774d9f5bb41071a2edfdf7ca48303b65800ae56b1d4254d504555484040c8a6a7ff987cfd65e29c921d6aa356ab1ab3c9c3f493cb3c55b414d31cde83084e2183bc2e173f5872c252ffbc5c97ff6712d5934fdc512575dc5db977bf7d5d0b92fc13fcdfd04bafb59d28aeac0d8d5c105b1d648f07753c1fb731f883d0957b1c56138847f34b9b669511580ccbe523de0abf33ee0ae793d659cb2fae7bb1e546eb3d9c4b805499627618b9d0400ff60fdafaf975cb3a9663eb1efef94676dce8042f0d93f11e93d7fcd25d7535c7a37f57b2835b2aefa0108924efba0390da2d939630b6047eb7fff3395d421a27412fadd589e4673f4e3b86d92c51b8d2451812ce4623b2c5de86894519f6e72e381c8fa39ef43f95bd4c812936794f709556e89f9f1044fc59237da4b40406d74b630f4b558e0ca5a7e85f45968ee2162c5c787123f3165cea19f4998ba73ea99af14de50017ced399b32c65fcc3b0069f2393958c5b8fae29ce59e3de43ff2fe4f603b264190ca1ebf9763cef6d81b3b16e59210c72f53f064e3e877791cdbb836cfc3fa9ca97c8adf27f1d012fffc243a95e10adb0de9d1b375c15d4b94e6e1ff7a2b1a3162fccab6e526e8db185555acdf449e15f9fb8b60185c61fc2f838e9c258ab52ece9a38214b0e8d100da3681e215eee5a2052de65f2568d49744786e56185416a53934f627f3fbb460880e5e399993743cc048549a08f9a4a1e11210fdf0ed031a3c8f44cee83af55bf74948f51126d53e6808915d630a0ec0e31884c3ea8b9eacfbda96501b44c200bb7caf55032ae99324af341291df2183ef4a6b0cb2f0272007dac9589149953e61f01e027627dacb58d5edc892fbe29146b3bce72431ec4e2fb4fb7a03af2c2e94c7d68cf59c2f618eff3e7e06d0e03608ac678b325dc4c7bf5af32b215b65fa9a1bed17292a56e9131a8af0e22b79a91f66e5294c9dfd0ee6546978e0d3d5420649f10c1b9f917351cf824887011a8b4ed165b5db68d8f8d4dbd87d337e49f05873553fe5d0e34638851a273618f59ce5fe148ca149cce089a8f4301a5507404939cf4993b4afa6f9d2a76c40adcbf4607e0e293483194f7756ac3fa8f7e2eb28be0a251d0e70f428d06731a135a02b239ab8a0a79472002e08291a7242c41251cd36185a1b31a32ba3da99897886dc37fc9c4d2a8d1"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6a51, &(0x7f0000000d80)={0x0, 0x78bc, 0x10, 0x0, 0x80}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000340)) dup3(r0, r0, 0x0) [ 1370.214994] FAULT_INJECTION: forcing a failure. [ 1370.214994] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.217493] CPU: 1 PID: 9206 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1370.218905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.220622] Call Trace: [ 1370.221180] dump_stack+0x107/0x167 [ 1370.221946] should_fail.cold+0x5/0xa [ 1370.222733] ? create_object.isra.0+0x3a/0xa20 [ 1370.223663] should_failslab+0x5/0x20 [ 1370.224447] kmem_cache_alloc+0x5b/0x310 [ 1370.225276] ? mark_held_locks+0x9e/0xe0 [ 1370.226118] create_object.isra.0+0x3a/0xa20 [ 1370.227034] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.228075] kmem_cache_alloc_bulk+0x168/0x320 [ 1370.229013] io_submit_sqes+0x6f76/0x85c0 [ 1370.229883] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1370.230894] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1370.231920] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1370.232906] ? lock_downgrade+0x6d0/0x6d0 [ 1370.233757] ? find_held_lock+0x2c/0x110 [ 1370.234598] ? io_submit_sqes+0x85c0/0x85c0 [ 1370.235487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1370.236171] FAULT_INJECTION: forcing a failure. [ 1370.236171] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.236482] ? wait_for_completion_io+0x270/0x270 [ 1370.236505] ? rcu_read_lock_any_held+0x75/0xa0 [ 1370.236531] ? vfs_write+0x354/0xa70 [ 1370.241392] ? fput_many+0x2f/0x1a0 [ 1370.242157] ? ksys_write+0x1a9/0x260 [ 1370.242938] ? __ia32_sys_read+0xb0/0xb0 [ 1370.243774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.244857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.245930] do_syscall_64+0x33/0x40 [ 1370.246692] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1370.247740] RIP: 0033:0x7fd021856b19 [ 1370.248503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.252289] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1370.253861] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1370.255326] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1370.256793] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.258268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.259725] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 [ 1370.261226] CPU: 0 PID: 9211 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1370.262750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.264354] Call Trace: [ 1370.264875] dump_stack+0x107/0x167 [ 1370.265602] should_fail.cold+0x5/0xa [ 1370.266346] ? create_object.isra.0+0x3a/0xa20 [ 1370.267239] should_failslab+0x5/0x20 [ 1370.267988] kmem_cache_alloc+0x5b/0x310 [ 1370.268791] create_object.isra.0+0x3a/0xa20 [ 1370.269662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.270666] kmem_cache_alloc_bulk+0x168/0x320 [ 1370.271565] io_submit_sqes+0x6f76/0x85c0 [ 1370.272413] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1370.273383] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1370.274350] ? lock_downgrade+0x6d0/0x6d0 [ 1370.275163] ? find_held_lock+0x2c/0x110 [ 1370.275966] ? io_submit_sqes+0x85c0/0x85c0 [ 1370.276827] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1370.277778] ? wait_for_completion_io+0x270/0x270 [ 1370.278721] ? rcu_read_lock_any_held+0x75/0xa0 [ 1370.279631] ? vfs_write+0x354/0xa70 [ 1370.280355] ? fput_many+0x2f/0x1a0 [ 1370.281069] ? ksys_write+0x1a9/0x260 [ 1370.281830] ? __ia32_sys_read+0xb0/0xb0 [ 1370.282634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.283655] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.284673] do_syscall_64+0x33/0x40 [ 1370.285394] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1370.286401] RIP: 0033:0x7f24549c7b19 [ 1370.287126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.290701] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1370.292179] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1370.293580] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1370.294964] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.296345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.297729] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1370.311156] FAULT_INJECTION: forcing a failure. [ 1370.311156] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.314057] CPU: 0 PID: 9218 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1370.315353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1370.316965] Call Trace: [ 1370.317471] dump_stack+0x107/0x167 [ 1370.318181] should_fail.cold+0x5/0xa [ 1370.318905] ? create_object.isra.0+0x3a/0xa20 [ 1370.319780] should_failslab+0x5/0x20 [ 1370.320501] kmem_cache_alloc+0x5b/0x310 [ 1370.321295] create_object.isra.0+0x3a/0xa20 [ 1370.322147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1370.323130] kmem_cache_alloc_trace+0x151/0x320 [ 1370.324009] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1370.324941] __io_uring_add_tctx_node+0x15c/0x520 [ 1370.325872] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1370.326894] __do_sys_io_uring_enter+0x14de/0x1920 [ 1370.327830] ? lock_downgrade+0x6d0/0x6d0 [ 1370.328629] ? find_held_lock+0x2c/0x110 [ 1370.329403] ? io_submit_sqes+0x85c0/0x85c0 [ 1370.330252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1370.331174] ? wait_for_completion_io+0x270/0x270 [ 1370.332106] ? rcu_read_lock_any_held+0x75/0xa0 [ 1370.332992] ? vfs_write+0x354/0xa70 [ 1370.333719] ? fput_many+0x2f/0x1a0 [ 1370.334410] ? ksys_write+0x1a9/0x260 [ 1370.335143] ? __ia32_sys_read+0xb0/0xb0 [ 1370.335914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1370.336919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1370.338097] do_syscall_64+0x33/0x40 [ 1370.338820] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1370.339803] RIP: 0033:0x7f94eea4db19 [ 1370.340517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1370.344030] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1370.345498] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1370.346865] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1370.348219] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.349589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1370.350930] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:16:48 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x6, 0x1, 0x7, 0x80000000, 0x78, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf020, 0x20, 0x1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) [ 1370.461760] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1370.543189] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1370.613489] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. 13:17:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:17:00 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x7}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, r7, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x16}, 0xa) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x100, 0x0, {0x3}}, 0x6f86) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x3ff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:17:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x40305839) 13:17:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000001140)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fba0da3344bc9163688567feda8dba320d292f4ebefe64e99", "220c0000002d52004bde09505bf1c35930ac1d9268624c1420b156a2ac400377"}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) signalfd(r1, &(0x7f0000000940)={[0x3]}, 0x8) r4 = fsmount(0xffffffffffffffff, 0x0, 0x82) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000001c0)="e6032e55e5d3afe85b219b49f6f5090d454e80f05340561b4f78f2f73b4635f2e028acd3fe358265b68cc0e80baa6685af88b20a96c70b7982990bb9104f729b40b088ffc7b5d59405e364dc2bed3c5120ee70b23ee96ee9e55d3335b9d3eb316ee9dafd1a82621867111460bf08fc4f79382c0750ceda114e9f4a1346274f85ad8f63719bd9c4f8618b7c7b25c30583f20b7bb9b8fe4505c1b643803e35f8465b5e9de4464e2ecc41328a319217ab1ebfac3d96128a203cc66dc24f9a4a625914b2cbe8991ef00848846f3e25782704d4d18191322a89511a2560f05d101d0820b34c933852937f550803ad19fcda92e58a0ceaf6", 0xf5}, {&(0x7f00000002c0)="58273cbbe5408c27a7a801bc1094d82d1686aba7c735525253125cee4cef4142fc4aa25546b54087ab0439df2c14dd2a55af1a7f09a030a4d203ba2349c5bf75ad04e857f9c509c20006e6592e6b2fe4f6ed1208bbb5ff918f559190ac2326e7cc2c7db03a31eebc23d86d6170c541b47a99aa9d60c4cfc412ea6f86f965e9fe5abc2e721337fb938f11ce00b1e31aa67cb649f0bc507aa732142efff267c67038a553abe087d605", 0xa8}, {&(0x7f0000000380)="3dbd6d4a9d5bf6acc7299b6285230843a0350a4f26699bb21e37697e1f384747e2863e85aed4475ad2fb757e1c9ea17bc5b705355dd667602f284498f5b2b22e1c126c8019adbef982927bf9920cde2322766f11471bcf665cdec1e7826504a4b767783a49c7167f0c1aa5beb7713401f9bc02f4d42711fef4522db46c5085ee663f37cf1013b339", 0x88}, {&(0x7f0000000440)="3d69787d60360117f87a", 0xa}, {&(0x7f0000000480)="e72df6340b850777248ae2444b34f8f9ba58e9248db5b72513d7499758748e1e8e3284aae595beab76635b0c8209687573a6433f330ba4", 0x1c}, {&(0x7f00000004c0)="c6e0902c6d90e5e396b7b0edbebd6ebb7bcaa08a1ba4391d7abdab1c421c65c7bd5c9d3f8870593f2febba58ba13f5b4c8fbcc539c827e981cd8f7f4c255c6262b572ffb8e2b669b14ccd16ffd065e229822b7377dfc722733b8f758644e97b06150d34d1e5ba1f94afa2bab0112179e7cfe96e853e385f32ec78b012d6be61b577142d0f03e37b88ac155f0a9c26971a53b527aa600f87489e0a72fa29ab64287", 0xa1}, {&(0x7f0000000580)="8a6519577dfed2693c1d9b17ad0b3d599650236c7931883dd1172190c889e93574a397eecb135d1dc410998894974e82488850e307881a9592f26ed6b48a9c7270b3dffae511cb35b77436a7b077adde1f36e5c385d7fdf8f2acf865a49e08ccabbdbb29e6cbea384483f6d57ff1354046ec9986133a89b3a7e206337af178a573739dff273cbeb1029b4bd0f7a1538b51902b0e3fc07b10e94bc019dbafc7f8d14cbcb087d9fccf6123c58c67e0d1c9a52c8c2a6bd9", 0xb6}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="140000000800007d0982315e8e000100", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="b0cc7e7507f6e808d01470b8a609b988bd1d5ffe595718beede06920a7404669cd6f7fc25e8b39d2", @ANYBLOB="00000001240000000000000001000000010000002920542e054703a12905941f635349a3d4f1ab68620d1702ec12191be4eb8386b7a7661338a5995b3e0858210dc922b67a318474fd4b8cccbbc25c32e9f3c3941773f5ab8f5ff1bf3f", @ANYBLOB="96e59d44e6264be5d68dd7fe5b23d325549dd66fa9644248d225e4e849204134cc3ce0fce02c8b0a24dab08436b9a0d7a717618687dc816e2af1400cd19fdf762756eaf4927bab854e82e9ae4121a8de43db501778e531ef47b18956f20820c535fd70399416411e83a140ea826c86b696913ab3f15f8fef1d1e723f23a7adc0b7ec7693611cc82f48314eb4a536b65428bb64e30eff17ac3474c240d8a1ba08afa85628", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0006ccde71a7d7ff0002"], 0xb0, 0x40}, 0x8000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x10001, 0x0) 13:17:00 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) 13:17:00 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 13:17:00 executing program 0: prctl$PR_PAC_RESET_KEYS(0x36, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000040)="eb58906d6b66732e66617400028020000402000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x8000, &(0x7f0000000080)=ANY=[]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x6000, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, 'caif0\x00'}}, {@cache_none}, {@cache_none}, {@msize={'msize', 0x3d, 0xfffffffffffffffc}}, {@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, 'caif0\x00'}}, {@version_u}, {@mmap}, {@noextend}, {@debug={'debug', 0x3d, 0x3}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@permit_directio}, {@seclabel}, {@fowner_lt={'fowner<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'caif0\x00'}}]}}) connect(0xffffffffffffffff, &(0x7f0000000140)=@nfc={0x27, 0x1, 0x0, 0x1}, 0x80) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)={0x2, 'caif0\x00', {0x80}, 0xc000}) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) 13:17:00 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) [ 1383.214597] FAULT_INJECTION: forcing a failure. [ 1383.214597] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.218090] CPU: 0 PID: 9265 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1383.219488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.221176] Call Trace: [ 1383.221742] dump_stack+0x107/0x167 [ 1383.222489] should_fail.cold+0x5/0xa [ 1383.223270] ? create_object.isra.0+0x3a/0xa20 [ 1383.224206] should_failslab+0x5/0x20 [ 1383.224979] kmem_cache_alloc+0x5b/0x310 [ 1383.225811] ? io_wq_create+0x114/0xc00 [ 1383.226627] create_object.isra.0+0x3a/0xa20 [ 1383.227520] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1383.228550] kmem_cache_alloc_node_trace+0x16d/0x340 [ 1383.229581] io_wq_create+0x6ef/0xc00 [ 1383.230397] io_uring_alloc_task_context+0x1f1/0x6a0 [ 1383.231460] ? io_register_rsrc_update+0x9b0/0x9b0 [ 1383.232470] ? io_apoll_task_func+0x2d0/0x2d0 [ 1383.233372] ? __io_req_find_next+0x300/0x300 [ 1383.234298] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1383.235276] __io_uring_add_tctx_node+0x2c6/0x520 [ 1383.236248] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1383.237327] __do_sys_io_uring_enter+0x14de/0x1920 [ 1383.238334] ? lock_downgrade+0x6d0/0x6d0 [ 1383.239170] ? find_held_lock+0x2c/0x110 [ 1383.239995] ? io_submit_sqes+0x85c0/0x85c0 [ 1383.240875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1383.241871] ? wait_for_completion_io+0x270/0x270 [ 1383.242860] ? rcu_read_lock_any_held+0x75/0xa0 [ 1383.243800] ? vfs_write+0x354/0xa70 [ 1383.244553] ? fput_many+0x2f/0x1a0 [ 1383.245287] ? ksys_write+0x1a9/0x260 [ 1383.246061] ? __ia32_sys_read+0xb0/0xb0 [ 1383.246882] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.247937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1383.248981] do_syscall_64+0x33/0x40 [ 1383.249750] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1383.250780] RIP: 0033:0x7fd021856b19 [ 1383.251534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.255249] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1383.256783] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1383.258235] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1383.259673] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.261106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.262548] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1383.267529] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1383.268462] FAULT_INJECTION: forcing a failure. [ 1383.268462] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.272516] CPU: 0 PID: 9268 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1383.273913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.275593] Call Trace: [ 1383.276144] dump_stack+0x107/0x167 [ 1383.276897] should_fail.cold+0x5/0xa [ 1383.277690] ? xas_alloc+0x336/0x440 [ 1383.278443] should_failslab+0x5/0x20 13:17:01 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6609) 13:17:01 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x2000000000}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:17:01 executing program 2: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="da"}]}]}, 0x28}}, 0x0) r4 = openat2(r3, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={0x52ac0, 0x107, 0x14}, 0x18) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r3, &(0x7f0000000140)=""/255, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffff4200210e0000000000000000000000e040cac5c991afcea73411063b303c039fb72b511f35e564112833de4dbff617f75d3bc439ba73ce04c8f93985bc923bbf8ad2a6e0bb28c124dbe1afd29ba763e5a1cd38b8e8"], 0x14}}, 0x4010) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x100) unshare(0x48020200) [ 1383.279206] kmem_cache_alloc+0x5b/0x310 [ 1383.280252] ? stack_trace_consume_entry+0x160/0x160 [ 1383.281281] xas_alloc+0x336/0x440 [ 1383.282041] xas_create+0x34a/0x10d0 [ 1383.282812] ? kernel_text_address+0xf2/0x120 [ 1383.283718] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1383.284782] xas_store+0x8c/0x1c40 [ 1383.285514] __xa_store+0x164/0x2d0 [ 1383.286257] ? xa_delete_node+0x280/0x280 [ 1383.287103] ? trace_hardirqs_on+0x5b/0x180 [ 1383.287982] xa_store+0x31/0x50 [ 1383.288656] __io_uring_add_tctx_node+0x1cf/0x520 [ 1383.289637] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1383.290709] __do_sys_io_uring_enter+0x14de/0x1920 [ 1383.291706] ? lock_downgrade+0x6d0/0x6d0 [ 1383.292543] ? find_held_lock+0x2c/0x110 [ 1383.293382] ? io_submit_sqes+0x85c0/0x85c0 [ 1383.294281] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1383.295263] ? wait_for_completion_io+0x270/0x270 [ 1383.296337] ? rcu_read_lock_any_held+0x75/0xa0 [ 1383.297277] ? vfs_write+0x354/0xa70 [ 1383.298043] ? fput_many+0x2f/0x1a0 [ 1383.298780] ? ksys_write+0x1a9/0x260 [ 1383.299555] ? __ia32_sys_read+0xb0/0xb0 [ 1383.300383] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.301439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1383.302504] do_syscall_64+0x33/0x40 [ 1383.303255] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1383.304293] RIP: 0033:0x7f94eea4db19 [ 1383.305048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.308787] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1383.310368] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1383.311825] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1383.313274] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.314745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.316218] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1383.329574] FAULT_INJECTION: forcing a failure. [ 1383.329574] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.332293] CPU: 1 PID: 9259 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1383.333710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.335398] Call Trace: [ 1383.335946] dump_stack+0x107/0x167 [ 1383.336703] should_fail.cold+0x5/0xa [ 1383.337489] ? create_object.isra.0+0x3a/0xa20 [ 1383.338466] should_failslab+0x5/0x20 [ 1383.339246] kmem_cache_alloc+0x5b/0x310 [ 1383.340085] ? mark_held_locks+0x9e/0xe0 [ 1383.341078] create_object.isra.0+0x3a/0xa20 [ 1383.341998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1383.343228] kmem_cache_alloc_bulk+0x168/0x320 [ 1383.344178] io_submit_sqes+0x6f76/0x85c0 [ 1383.345209] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1383.346259] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1383.347245] ? lock_downgrade+0x6d0/0x6d0 [ 1383.348088] ? find_held_lock+0x2c/0x110 [ 1383.348920] ? io_submit_sqes+0x85c0/0x85c0 [ 1383.349810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1383.350789] ? wait_for_completion_io+0x270/0x270 [ 1383.351768] ? rcu_read_lock_any_held+0x75/0xa0 [ 1383.352708] ? vfs_write+0x354/0xa70 [ 1383.353467] ? fput_many+0x2f/0x1a0 [ 1383.354221] ? ksys_write+0x1a9/0x260 [ 1383.355005] ? __ia32_sys_read+0xb0/0xb0 [ 1383.355848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.356925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1383.358015] do_syscall_64+0x33/0x40 [ 1383.358783] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1383.359830] RIP: 0033:0x7f24549c7b19 [ 1383.360599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.364387] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1383.365956] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1383.367414] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1383.368874] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.370341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.371802] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1383.424239] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:17:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:17:01 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 13:17:01 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 13:17:01 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 13:17:01 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000080)={{r0}, "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1383.772651] FAULT_INJECTION: forcing a failure. [ 1383.772651] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.776070] CPU: 1 PID: 9288 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1383.777558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.779337] Call Trace: [ 1383.779868] dump_stack+0x107/0x167 [ 1383.780916] should_fail.cold+0x5/0xa [ 1383.781909] ? create_object.isra.0+0x3a/0xa20 [ 1383.783001] should_failslab+0x5/0x20 [ 1383.783906] kmem_cache_alloc+0x5b/0x310 [ 1383.784875] ? mark_held_locks+0x9e/0xe0 [ 1383.785856] create_object.isra.0+0x3a/0xa20 [ 1383.786906] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1383.788119] kmem_cache_alloc_bulk+0x168/0x320 [ 1383.789213] io_submit_sqes+0x6f76/0x85c0 [ 1383.790260] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1383.791311] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1383.792293] ? lock_downgrade+0x6d0/0x6d0 [ 1383.793133] ? find_held_lock+0x2c/0x110 [ 1383.793963] ? io_submit_sqes+0x85c0/0x85c0 [ 1383.794838] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1383.795814] ? wait_for_completion_io+0x270/0x270 [ 1383.796785] ? rcu_read_lock_any_held+0x75/0xa0 [ 1383.797739] ? vfs_write+0x354/0xa70 [ 1383.798488] ? fput_many+0x2f/0x1a0 [ 1383.799222] ? ksys_write+0x1a9/0x260 [ 1383.799985] ? __ia32_sys_read+0xb0/0xb0 [ 1383.800801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.801858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1383.802899] do_syscall_64+0x33/0x40 [ 1383.803645] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1383.804678] RIP: 0033:0x7f24549c7b19 [ 1383.805442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.809234] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1383.810828] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1383.812291] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1383.813751] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.815212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.816670] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1383.835160] FAULT_INJECTION: forcing a failure. [ 1383.835160] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.837570] CPU: 1 PID: 9293 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1383.838968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.840665] Call Trace: [ 1383.841202] dump_stack+0x107/0x167 [ 1383.841974] should_fail.cold+0x5/0xa [ 1383.842762] ? __io_uring_add_tctx_node+0x15c/0x520 [ 1383.843778] should_failslab+0x5/0x20 [ 1383.844568] kmem_cache_alloc_trace+0x55/0x320 [ 1383.845493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.846690] __io_uring_add_tctx_node+0x15c/0x520 [ 1383.847750] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1383.848962] __do_sys_io_uring_enter+0x14de/0x1920 [ 1383.850048] ? io_submit_sqes+0x85c0/0x85c0 [ 1383.851013] ? recalibrate_cpu_khz+0x10/0x10 [ 1383.851934] ? ktime_get+0x158/0x1f0 [ 1383.852765] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1383.853794] ? clockevents_program_event+0x131/0x360 [ 1383.854838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.855960] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1383.857193] ? trace_hardirqs_on+0x5b/0x180 [ 1383.858091] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1383.859197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1383.860244] do_syscall_64+0x33/0x40 [ 1383.860996] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1383.862041] RIP: 0033:0x7fd021856b19 [ 1383.862798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.866594] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1383.868145] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1383.869594] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1383.871059] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.872510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.873962] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1383.881349] FAULT_INJECTION: forcing a failure. [ 1383.881349] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.884215] CPU: 1 PID: 9290 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1383.885618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1383.887289] Call Trace: [ 1383.887830] dump_stack+0x107/0x167 [ 1383.888568] should_fail.cold+0x5/0xa [ 1383.889339] ? create_object.isra.0+0x3a/0xa20 [ 1383.890275] should_failslab+0x5/0x20 [ 1383.891056] kmem_cache_alloc+0x5b/0x310 [ 1383.891876] ? mark_held_locks+0x9e/0xe0 [ 1383.892696] create_object.isra.0+0x3a/0xa20 [ 1383.893588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1383.894619] kmem_cache_alloc_bulk+0x168/0x320 [ 1383.895551] io_submit_sqes+0x6f76/0x85c0 [ 1383.896408] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1383.897418] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1383.898393] ? lock_downgrade+0x6d0/0x6d0 [ 1383.899230] ? find_held_lock+0x2c/0x110 [ 1383.900055] ? io_submit_sqes+0x85c0/0x85c0 [ 1383.900930] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1383.901926] ? wait_for_completion_io+0x270/0x270 [ 1383.902890] ? rcu_read_lock_any_held+0x75/0xa0 [ 1383.903829] ? vfs_write+0x354/0xa70 [ 1383.904585] ? fput_many+0x2f/0x1a0 [ 1383.905322] ? ksys_write+0x1a9/0x260 [ 1383.906098] ? __ia32_sys_read+0xb0/0xb0 [ 1383.906922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1383.907972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1383.909024] do_syscall_64+0x33/0x40 [ 1383.909792] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1383.910830] RIP: 0033:0x7f94eea4db19 [ 1383.911586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1383.915319] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1383.916848] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1383.918285] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1383.919729] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1383.921170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1383.922624] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1384.047278] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:17:15 executing program 0: r0 = open_tree(0xffffffffffffffff, 0x0, 0x80980) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x13) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8ec8d000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x47502, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x1, 0x1cf}) r2 = socket$inet(0x2, 0xa, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001900)=[0xffffffffffffffff], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8914, &(0x7f00000001c0)={'ip6erspan0\x00', {0x2, 0x0, @empty}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="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"], 0x2af) write$tun(0xffffffffffffffff, &(0x7f0000001e00)={@val={0x0, 0xfbfb}, @void, @ipv6=@tcp={0x0, 0x6, "32a9d4", 0x10ec, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x42}, {[@hopopts={0x8, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1f}]}, @routing={0x0, 0x6, 0x0, 0x81, 0x0, [@dev={0xfe, 0x80, '\x00', 0x43}, @rand_addr=' \x01\x00', @local]}, @hopopts={0x4b, 0x8, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x81}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0x800, [0x8, 0xd3, 0x3, 0x5, 0xd2, 0x1ff]}}, @pad1]}], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x13, 0x80, 0x6, 0x0, 0x3a8a, {[@sack={0x5, 0x6, [0x8]}, @fastopen={0x22, 0x4, "eda9"}, @mptcp=@add_addr={0x1e, 0xe, 0x0, 0xe, 0x9, @loopback, 0x3, "4194b8a0"}, @md5sig={0x13, 0x12, "611ad2a132c47069175bb498dbbe32ec"}, @fastopen={0x22, 0xb, "9c1483d9c563554348"}]}}, {"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"}}}}}, 0x1118) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x3, @desc1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r5, r4, "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", "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 13:17:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x80086601) 13:17:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000300)="227a0baad2758838eb229dc3bc1ebce5a5267e3366af37e1578b700841c4908db99afc", 0x23, 0xf000}], 0x0, &(0x7f00000003c0)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0}, &(0x7f0000002d00)=0xc) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0xfa, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000340)="84406583e62ca0fbab76666023b76b4f1b43202ca9395337e1f38a202c8ffb708a88fd95400390b1792d7b5487c9d995d818e2ef1e687d5be53be6adcdf9dc0e310e7369f67d254febd4e4b70a05", 0x4e, 0x5}, {&(0x7f0000000540)="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", 0x1000, 0x400}, {&(0x7f00000001c0)="8b147dfbcb", 0x5, 0x401}, {&(0x7f00000002c0)="dca2d6bd0e6c2d98e7892d83ad0ef34a7049bd821b95bf18992e5263dd06e6c32ac79956b387539ad5ae950733dc8cf0357b0724b644f877ec77d16eeb5a", 0x3e, 0xdb6}, {&(0x7f0000001540)="0f556ed352cf034ff910be64e7f0b2db206891778148e514014c2bdaa1b2b940eeb28564aa84bc25b5c7fcb206bb63d7998e056ebe55c2891e6824601d4109871748a185f86237696829c5564d884ae0235a6e08d0d2c99e7d76b172b7", 0x5d, 0x400}], 0x10, &(0x7f0000002d40)={[{@overriderock}, {@sbsector={'sbsector', 0x3d, 0x5}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r0}}, {@audit}, {@audit}, {@obj_type={'obj_type', 0x3d, 'utf8=0'}}, {@obj_role={'obj_role', 0x3d, 'cp874'}}, {@measure}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000080)="c5eafa91fb0dc97e4043", 0xa, 0xfff}, {&(0x7f0000000240)="fe76aeccb9c204f659acd8f920bdc58b19232acfde5a96ebcf663c2be754d9bc62d288c96c5c1dc9ba591e7ac5896fe71bead99c8aefe8967717e74e5efe8602857158a32c4c263dcec428381400413d40cf89650818a2f7261519f0e49850b62e812798627285118326e8abc6f6a7c4ad20b5a0f0", 0x75, 0x4}, {&(0x7f00000004c0)="91c3856c7b4984dfc3a542b7a69a4a3c5c2840cc4314592fddfe8bc306a3aaa65aaaff040dd7af630d77d5198c0b9fdd3a8c5fd7c40bc9288fde49a75afb59c3360816582b2978a4359a9f590fedd4ea0af24bdb9631ea07674204429206d3efde6c46435cc92323ac7b8de442fa9c68", 0x70, 0x8000}], 0x804000, &(0x7f0000000440)={[{@utf8}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}, {@utf8no}], [{@smackfsdef={'smackfsdef', 0x3d, '#**\''}}, {@subj_type={'subj_type', 0x3d, '/'}}, {@context={'context', 0x3d, 'user_u'}}]}) 13:17:15 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 13:17:15 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 13:17:15 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 13:17:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:17:15 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x10000, 0x2d) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) recvfrom(r2, &(0x7f0000000240)=""/208, 0xd0, 0x160, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @private=0xa010100}, 0x0, 0x1, 0x3, 0x1}}, 0x80) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x8}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000303050000000000000000000c007f00000000000000fffd000003030800034000000008"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xc890}, 0x40a0814) [ 1397.534462] FAULT_INJECTION: forcing a failure. [ 1397.534462] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.537055] CPU: 0 PID: 9324 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1397.538438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.540107] Call Trace: [ 1397.540643] dump_stack+0x107/0x167 [ 1397.541168] FAULT_INJECTION: forcing a failure. [ 1397.541168] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.541386] should_fail.cold+0x5/0xa [ 1397.544382] ? create_object.isra.0+0x3a/0xa20 [ 1397.545316] should_failslab+0x5/0x20 [ 1397.546097] kmem_cache_alloc+0x5b/0x310 [ 1397.546919] ? mark_held_locks+0x9e/0xe0 [ 1397.547750] create_object.isra.0+0x3a/0xa20 [ 1397.548641] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1397.549672] kmem_cache_alloc_bulk+0x168/0x320 [ 1397.550605] io_submit_sqes+0x6f76/0x85c0 [ 1397.551467] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1397.552480] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1397.553463] ? lock_downgrade+0x6d0/0x6d0 [ 1397.554320] ? find_held_lock+0x2c/0x110 [ 1397.555147] ? io_submit_sqes+0x85c0/0x85c0 [ 1397.556030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1397.557014] ? wait_for_completion_io+0x270/0x270 [ 1397.558000] ? rcu_read_lock_any_held+0x75/0xa0 [ 1397.558941] ? vfs_write+0x354/0xa70 [ 1397.559701] ? fput_many+0x2f/0x1a0 [ 1397.560438] ? ksys_write+0x1a9/0x260 [ 1397.561228] ? __ia32_sys_read+0xb0/0xb0 [ 1397.562097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1397.563164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.564223] do_syscall_64+0x33/0x40 [ 1397.564979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1397.566026] RIP: 0033:0x7f24549c7b19 [ 1397.566784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.570514] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1397.572119] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1397.573563] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1397.575023] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.576457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.577912] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1397.579365] CPU: 1 PID: 9331 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1397.580899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.582796] Call Trace: [ 1397.583319] dump_stack+0x107/0x167 [ 1397.584071] should_fail.cold+0x5/0xa [ 1397.584833] ? xas_alloc+0x336/0x440 [ 1397.585593] should_failslab+0x5/0x20 [ 1397.586359] kmem_cache_alloc+0x5b/0x310 [ 1397.587219] xas_alloc+0x336/0x440 [ 1397.588054] xas_create+0x34a/0x10d0 [ 1397.588946] ? kernel_text_address+0xf2/0x120 [ 1397.590019] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1397.591210] xas_store+0x8c/0x1c40 [ 1397.592078] __xa_store+0x164/0x2d0 [ 1397.592912] ? xa_delete_node+0x280/0x280 [ 1397.593910] ? trace_hardirqs_on+0x5b/0x180 [ 1397.594937] xa_store+0x31/0x50 [ 1397.595613] __io_uring_add_tctx_node+0x1cf/0x520 [ 1397.596701] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1397.597797] __do_sys_io_uring_enter+0x14de/0x1920 [ 1397.598794] ? lock_downgrade+0x6d0/0x6d0 [ 1397.599627] ? find_held_lock+0x2c/0x110 [ 1397.600450] ? io_submit_sqes+0x85c0/0x85c0 [ 1397.601330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1397.602326] ? wait_for_completion_io+0x270/0x270 [ 1397.603301] ? rcu_read_lock_any_held+0x75/0xa0 [ 1397.604238] ? vfs_write+0x354/0xa70 [ 1397.604995] ? fput_many+0x2f/0x1a0 [ 1397.605730] ? ksys_write+0x1a9/0x260 [ 1397.606522] ? __ia32_sys_read+0xb0/0xb0 [ 1397.607349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1397.608404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.609448] do_syscall_64+0x33/0x40 [ 1397.610211] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1397.611252] RIP: 0033:0x7f94eea4db19 [ 1397.612001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.615839] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1397.617384] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1397.618857] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1397.620294] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.621733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.623180] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1397.638435] FAULT_INJECTION: forcing a failure. [ 1397.638435] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.641209] CPU: 1 PID: 9320 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1397.642725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.644438] Call Trace: [ 1397.644985] dump_stack+0x107/0x167 [ 1397.645735] should_fail.cold+0x5/0xa [ 1397.646527] should_failslab+0x5/0x20 [ 1397.647320] kmem_cache_alloc_bulk+0x4b/0x320 [ 1397.648245] io_submit_sqes+0x6f76/0x85c0 [ 1397.649124] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1397.650136] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1397.651109] ? lock_downgrade+0x6d0/0x6d0 [ 1397.651941] ? find_held_lock+0x2c/0x110 [ 1397.652765] ? io_submit_sqes+0x85c0/0x85c0 [ 1397.653642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1397.654642] ? wait_for_completion_io+0x270/0x270 [ 1397.655630] ? rcu_read_lock_any_held+0x75/0xa0 [ 1397.656583] ? vfs_write+0x354/0xa70 [ 1397.657347] ? fput_many+0x2f/0x1a0 [ 1397.658090] ? ksys_write+0x1a9/0x260 [ 1397.658850] ? __ia32_sys_read+0xb0/0xb0 [ 1397.659670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1397.660720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.661758] do_syscall_64+0x33/0x40 [ 1397.662511] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1397.663530] RIP: 0033:0x7fd021856b19 [ 1397.664275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.667982] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1397.669509] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1397.670953] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1397.672388] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.673830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.675264] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 13:17:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x80086603) 13:17:15 executing program 2: syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000300)="227a0baad2758838eb229dc3bc1ebce5a5267e3366af37e1578b700841c4908db99afc", 0x23, 0xf000}], 0x0, &(0x7f00000003c0)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002cc0)={0x0, 0x0}, &(0x7f0000002d00)=0xc) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0xfa, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000340)="84406583e62ca0fbab76666023b76b4f1b43202ca9395337e1f38a202c8ffb708a88fd95400390b1792d7b5487c9d995d818e2ef1e687d5be53be6adcdf9dc0e310e7369f67d254febd4e4b70a05", 0x4e, 0x5}, {&(0x7f0000000540)="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", 0x1000, 0x400}, {&(0x7f00000001c0)="8b147dfbcb", 0x5, 0x401}, {&(0x7f00000002c0)="dca2d6bd0e6c2d98e7892d83ad0ef34a7049bd821b95bf18992e5263dd06e6c32ac79956b387539ad5ae950733dc8cf0357b0724b644f877ec77d16eeb5a", 0x3e, 0xdb6}, {&(0x7f0000001540)="0f556ed352cf034ff910be64e7f0b2db206891778148e514014c2bdaa1b2b940eeb28564aa84bc25b5c7fcb206bb63d7998e056ebe55c2891e6824601d4109871748a185f86237696829c5564d884ae0235a6e08d0d2c99e7d76b172b7", 0x5d, 0x400}], 0x10, &(0x7f0000002d40)={[{@overriderock}, {@sbsector={'sbsector', 0x3d, 0x5}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r0}}, {@audit}, {@audit}, {@obj_type={'obj_type', 0x3d, 'utf8=0'}}, {@obj_role={'obj_role', 0x3d, 'cp874'}}, {@measure}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000080)="c5eafa91fb0dc97e4043", 0xa, 0xfff}, {&(0x7f0000000240)="fe76aeccb9c204f659acd8f920bdc58b19232acfde5a96ebcf663c2be754d9bc62d288c96c5c1dc9ba591e7ac5896fe71bead99c8aefe8967717e74e5efe8602857158a32c4c263dcec428381400413d40cf89650818a2f7261519f0e49850b62e812798627285118326e8abc6f6a7c4ad20b5a0f0", 0x75, 0x4}, {&(0x7f00000004c0)="91c3856c7b4984dfc3a542b7a69a4a3c5c2840cc4314592fddfe8bc306a3aaa65aaaff040dd7af630d77d5198c0b9fdd3a8c5fd7c40bc9288fde49a75afb59c3360816582b2978a4359a9f590fedd4ea0af24bdb9631ea07674204429206d3efde6c46435cc92323ac7b8de442fa9c68", 0x70, 0x8000}], 0x804000, &(0x7f0000000440)={[{@utf8}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@utf8}, {@utf8no}], [{@smackfsdef={'smackfsdef', 0x3d, '#**\''}}, {@subj_type={'subj_type', 0x3d, '/'}}, {@context={'context', 0x3d, 'user_u'}}]}) 13:17:15 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:17:15 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) [ 1397.885395] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1398.012073] FAULT_INJECTION: forcing a failure. [ 1398.012073] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.014447] CPU: 1 PID: 9352 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1398.015824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1398.017523] Call Trace: [ 1398.018088] dump_stack+0x107/0x167 [ 1398.018843] should_fail.cold+0x5/0xa [ 1398.019625] ? create_object.isra.0+0x3a/0xa20 [ 1398.020563] should_failslab+0x5/0x20 [ 1398.021337] kmem_cache_alloc+0x5b/0x310 [ 1398.022169] ? mark_held_locks+0x9e/0xe0 [ 1398.022986] create_object.isra.0+0x3a/0xa20 [ 1398.023874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1398.024904] kmem_cache_alloc_bulk+0x168/0x320 [ 1398.025853] io_submit_sqes+0x6f76/0x85c0 [ 1398.026724] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1398.027740] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1398.028721] ? lock_downgrade+0x6d0/0x6d0 [ 1398.029569] ? find_held_lock+0x2c/0x110 [ 1398.030411] ? io_submit_sqes+0x85c0/0x85c0 [ 1398.031298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1398.032286] ? wait_for_completion_io+0x270/0x270 [ 1398.033264] ? rcu_read_lock_any_held+0x75/0xa0 [ 1398.034209] ? vfs_write+0x354/0xa70 [ 1398.034968] ? fput_many+0x2f/0x1a0 [ 1398.035704] ? ksys_write+0x1a9/0x260 [ 1398.036476] ? __ia32_sys_read+0xb0/0xb0 [ 1398.037307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1398.038424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1398.039471] do_syscall_64+0x33/0x40 [ 1398.040218] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1398.041250] RIP: 0033:0x7f24549c7b19 [ 1398.042020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1398.045730] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1398.047261] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1398.048702] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1398.050133] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1398.051555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1398.052981] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:17:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x80087601) 13:17:29 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) 13:17:29 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:17:29 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 13:17:29 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:17:29 executing program 2: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)={0x2, 0x0, @a}, 0x48, r0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r3) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r5) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r6) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r4) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:17:29 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 13:17:29 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="beb8db47", @ANYRES16=r0, @ANYBLOB="080028bd7000fcdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x14000004) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7fffffff, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x49010}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x884, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf650, 0x74}}}}, [@NL80211_ATTR_NAN_FUNC={0x304, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2d4, 0xe, 0x0, 0x1, [{0x95, 0x0, "f57a783a51400ba646fee2a72e308071eefc8e8cdf2c4a034fd3d915ee65187242f24d51648fe24f0638aa8e6aa877089fdb67aecd03bd7f5239014aaef8513da639e36190f9430671ebb6debe14420f3b07c1b51273635270eb4134dd77bf3cbf10e2f5ee482776dbdd34ee7d7f02d60b3de995e530b536dcb803370bb28d108711af0e4abcdbb2a40bbe066c05bbfb85"}, {0x97, 0x0, "9b050617ada33ea4e2cb2673c597638cd6a76e6b367eb67c94f6a161b7deb9b59f69dc1cc717633d6c9c215be66652d90c3ace9f4ecb2c8e9b5721a88d755aaabb60f9140a646a7dfb77f7c619ef8988ee32f06f15750ac8bfe3bb71eccc26dd86484d4d50c5cef058622011849a32366104e648c7e016564ac72aa888c0b91e6a9710405a91dbc0a4ec550e5741d1e0e0f0bd"}, {0xe0, 0x0, "5aba0021791000be195fd6761c1300f9517c075e0502c7cc22fa80f3e26cdd01fa82ba86bf26b035b3a77818fc02afb359bf33c553e19443ad3569052f2e9f1fb37aaba6312bbcda66df7f79d8ed9ff14501fb09b1b6516be370b9d666b496c7a8017f8261285f21fc5006c2d5e44bf305416eeff5cdb4ee7169b2c7c7502822a7f31b77f0126353536f7010f62044d9587c58c9a61db4975e91adccf3cb13bad34c0ec2db32a942300ee1a314c10ba9608bf2078149313d9e5898a3bb66460d38dd49813050ec95795949cc4afd96cc689858b815114f6b1846da53"}, {0x38, 0x0, "47d4364beb2bc6cebc32160782a6e88841e5daab9b804e01053a8a128bd680608a868ba4d377d75300dd781cc0edeaf3a96ebcdc"}, {0x86, 0x0, "db0c24d2d5532dfb861c2f2d7cb27995ed883b6e35d193f0fd33c11167bbdbfaa65abf2a332f2448bcc251330ede47fc08421b1e94b891f56df9f896bb9e2a6c182a08429516fae4dc63b77eb90feb35aabb2015ade8054f3a62e4f121a2276e3bbda194f88d03414930a408411841e255f4fba4c8e85e6703fe6dde5a8bc92f4ca5"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "bdd126ee84f4"}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6a}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3a4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x394, 0xe, 0x0, 0x1, [{0xe6, 0x0, "34114240aae9725005463caefa1a45ef7d08d1f75751a07b2d5c650a4470f2ee2688acceae1b5b88028cb867e1cf2bd2f2c32eb54d0c0bb66163deb660deb46951c47f98be9885f47a2fd253eb3b00ec9aebd71c7a5614042214eece0423651a79faef729217e709f954d5fd01e3353d083ce6930143e2667e4adc0a6c298c28fd17a76bbfd5fa899426d54a9f8637bf5047524c36069c11394bef4eaae884239bc37b63090e352a29b9c16a49a825929e66e548ac6d6bf8b1f731da8812b1659bc726a24adebfe63047ebd4fb97ef83f473cc0814d4e71822c14e36f46c3796701d"}, {0x44, 0x0, "217ce83032adf8bca08fdad3a71cd3a12d4b66258182c1576d7ffcaf0b85177eed46dff646e23f6f42eedd71ce32b16bbb8142e494469ed6ab358a40ae41d982"}, {0xc3, 0x0, "5311baf084f3f0452667306cd86ea4ff4234aeca24cef775898358f6e228319ae976e6370f3a4dc17d98442174c831d88e754d8bc21b4c62a305fae77cfa68eeac7d3f250764ed98e14ef3963b18e757d90d0707135b69e21a1d720fe231c472f7f564fa5dcfab9868f2960bf15002d0f0f94562f2806b9a08f957d01f1892eb56ec03a3b7535471d00206cbe5c8e42d8373b16828b560ca240f24e9b2c0e367844332c71283cc75ddadc2b107d36f5910b838837c81760d514479f05a3a02"}, {0xdf, 0x0, "5e587b1920f3441f7c08b2607f53f73141d68a37605e332d7cb43561cb33c656eb21c70a6a43e8a5dccbd4cb5f81e9ef08b58356c07d1f3e984e848a038ce6d1b55d63a0fe50f217ce2b00be84d45cbb6bafb6fa3f37fdff33c7439963e4a0f1a5e3454c184420f6bb1a29cdf56a591a48527af7aaf0e84a67b0772bf2d364cb949313a4b343812844e105ac5e9e6b66adb4329cb43cd6f522f37fc82705e0faca4211b7ee25d4d472c1e72450ac5eb5bfdd676931ede6113bc3a3ed0bf0e5e04dca9de5f11cfe7ae40de7970fbc067d9da6c6e788b70c0020bbc6"}, {0xbd, 0x0, "a40f49620e0775a3348ecb4f90106c30debaee8b4ad73657d8dd1d0ee0487889cbcecead13ee56b23b4988ac19100c039ed9bb8527551d6dd93d73fb09a4e59697261f36a4cb57e424ad8ebd737d99611d12c411e92a2a18ecc7a0cf624f05dd63d4be972ba89541ffe78479f63a2256ee677958773f726ffffe5daeb64175ec963e56d2cee06548665848c65bba511fee54eecb64963266d5b1600c0d64ac47f8b920ada916ac6a8c4c44becac87e9a56d541557d3634e9ec"}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x160, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x128, 0xd, 0x0, 0x1, [{0x9, 0x0, "c8c1b89a3b"}, {0xa7, 0x0, "5bd19b37e46ef00d9ee502750f5bda6c9b3263597ca7fb992c40ebec047a754cfc93144fe20ee18b3fa7357b4e471807129ff318bfc4150ef1647f811657d4f800c344f40bc9ff8a52577ee1e228a7daad0d0726aa6b0a3768d7a66bbe76cace35df981db3c357f34a8c882e210336be6bf66fba0d0e4bf8f14445c9b50aa508141201a644abe4ea87a1beabdb31ec5b21b0889bd3815fd9e210dba498f07c01181062"}, {0x6e, 0x0, "81994bbb5eee77b15edd01ae72b6c32075b731010ee1fd9bb914fa21113d40b55f580f4c3b0e31aa7dc08ef654b5fd7b10e02ac85444b811d6484ab19934f7b97540a5704d0214ecd8252d1bd5faa00f99399001e4db76a86156a69dc775e80e0ed0df5b3cd8d1267151"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xf069}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3f}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5d}]}]}, 0x884}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000400)) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r6, 0x20, 0x0, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x238, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ed8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa84}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4644534e}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c0e8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private0}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x738, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7f, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffe00}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6fc}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x66f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x15}, 0x40041) [ 1411.673334] FAULT_INJECTION: forcing a failure. [ 1411.673334] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.675256] FAULT_INJECTION: forcing a failure. [ 1411.675256] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.675911] CPU: 1 PID: 9372 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1411.678997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.680570] Call Trace: [ 1411.681075] dump_stack+0x107/0x167 [ 1411.681772] should_fail.cold+0x5/0xa [ 1411.682506] ? create_object.isra.0+0x3a/0xa20 [ 1411.683361] should_failslab+0x5/0x20 [ 1411.684068] kmem_cache_alloc+0x5b/0x310 [ 1411.684822] ? mark_held_locks+0x9e/0xe0 [ 1411.685576] create_object.isra.0+0x3a/0xa20 [ 1411.686420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.687368] kmem_cache_alloc_bulk+0x168/0x320 [ 1411.688223] io_submit_sqes+0x6f76/0x85c0 [ 1411.689020] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1411.689953] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1411.690854] ? lock_downgrade+0x6d0/0x6d0 [ 1411.691609] ? find_held_lock+0x2c/0x110 [ 1411.692364] ? io_submit_sqes+0x85c0/0x85c0 [ 1411.693162] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1411.694054] ? wait_for_completion_io+0x270/0x270 [ 1411.694942] ? rcu_read_lock_any_held+0x75/0xa0 [ 1411.695781] ? vfs_write+0x354/0xa70 [ 1411.696468] ? fput_many+0x2f/0x1a0 [ 1411.697141] ? ksys_write+0x1a9/0x260 [ 1411.697840] ? __ia32_sys_read+0xb0/0xb0 [ 1411.698611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.699570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.700514] do_syscall_64+0x33/0x40 [ 1411.701202] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1411.702151] RIP: 0033:0x7f24549c7b19 [ 1411.702837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.706202] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1411.707600] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1411.708916] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1411.710220] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.711518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.712813] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1411.714155] CPU: 0 PID: 9380 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1411.715563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.717241] Call Trace: [ 1411.717798] dump_stack+0x107/0x167 [ 1411.718551] should_fail.cold+0x5/0xa [ 1411.719340] ? create_object.isra.0+0x3a/0xa20 [ 1411.720284] should_failslab+0x5/0x20 [ 1411.721066] kmem_cache_alloc+0x5b/0x310 [ 1411.721914] ? mark_held_locks+0x9e/0xe0 [ 1411.722771] create_object.isra.0+0x3a/0xa20 [ 1411.723670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.724819] kmem_cache_alloc+0x159/0x310 [ 1411.725713] xas_alloc+0x336/0x440 [ 1411.726452] xas_create+0x34a/0x10d0 [ 1411.727240] ? kernel_text_address+0xf2/0x120 [ 1411.728175] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1411.729266] xas_store+0x8c/0x1c40 [ 1411.730047] __xa_store+0x164/0x2d0 [ 1411.730821] ? xa_delete_node+0x280/0x280 [ 1411.731667] ? trace_hardirqs_on+0x5b/0x180 [ 1411.732552] xa_store+0x31/0x50 [ 1411.733228] __io_uring_add_tctx_node+0x1cf/0x520 [ 1411.734229] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.735303] __do_sys_io_uring_enter+0x14de/0x1920 [ 1411.736302] ? lock_downgrade+0x6d0/0x6d0 [ 1411.737137] ? find_held_lock+0x2c/0x110 [ 1411.737975] ? io_submit_sqes+0x85c0/0x85c0 [ 1411.738872] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1411.739871] ? wait_for_completion_io+0x270/0x270 [ 1411.740870] ? rcu_read_lock_any_held+0x75/0xa0 [ 1411.741815] ? vfs_write+0x354/0xa70 [ 1411.742578] ? fput_many+0x2f/0x1a0 [ 1411.743311] ? ksys_write+0x1a9/0x260 [ 1411.744092] ? __ia32_sys_read+0xb0/0xb0 [ 1411.744920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.746003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.747061] do_syscall_64+0x33/0x40 [ 1411.747814] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1411.748846] RIP: 0033:0x7f94eea4db19 [ 1411.749600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.753327] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1411.754877] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1411.756321] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1411.757762] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.759221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.760675] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:17:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x800c6613) [ 1411.789233] FAULT_INJECTION: forcing a failure. [ 1411.789233] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.792634] CPU: 0 PID: 9381 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1411.794019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.795714] Call Trace: [ 1411.796255] dump_stack+0x107/0x167 [ 1411.796994] should_fail.cold+0x5/0xa [ 1411.797778] ? create_object.isra.0+0x3a/0xa20 [ 1411.798735] should_failslab+0x5/0x20 [ 1411.799508] kmem_cache_alloc+0x5b/0x310 [ 1411.800333] create_object.isra.0+0x3a/0xa20 [ 1411.801228] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.802273] kmem_cache_alloc_trace+0x151/0x320 [ 1411.803216] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1411.804190] __io_uring_add_tctx_node+0x15c/0x520 [ 1411.805161] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1411.806245] __do_sys_io_uring_enter+0x14de/0x1920 [ 1411.807240] ? lock_downgrade+0x6d0/0x6d0 [ 1411.808081] ? find_held_lock+0x2c/0x110 [ 1411.808904] ? io_submit_sqes+0x85c0/0x85c0 [ 1411.809782] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1411.810777] ? wait_for_completion_io+0x270/0x270 [ 1411.811761] ? rcu_read_lock_any_held+0x75/0xa0 [ 1411.812712] ? vfs_write+0x354/0xa70 [ 1411.813471] ? fput_many+0x2f/0x1a0 [ 1411.814227] ? ksys_write+0x1a9/0x260 [ 1411.815000] ? __ia32_sys_read+0xb0/0xb0 [ 1411.815847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.816901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.817946] do_syscall_64+0x33/0x40 [ 1411.818036] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1411.818705] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1411.818718] RIP: 0033:0x7fd021856b19 [ 1411.818736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.818746] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1411.818765] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1411.818775] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1411.818786] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.818796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1411.818806] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:17:29 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x201020, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@debug={'debug', 0x3d, 0x8}}], [{@appraise_type}, {@euid_lt}, {@fowner_eq={'fowner', 0x3d, r3}}, {@dont_appraise}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x20}}]}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:17:29 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) 13:17:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000001e80)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1b) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20900, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc3) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x505000, 0x0) recvfrom$inet6(r4, &(0x7f0000000340)=""/202, 0xca, 0x2000, &(0x7f0000000440)={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xc}, 0x9}, 0x1c) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000280), &(0x7f00000002c0)={'U+', 0x5be1}, 0x16, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x55}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) 13:17:29 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 13:17:29 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1412.160378] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1412.179255] FAULT_INJECTION: forcing a failure. [ 1412.179255] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.180809] CPU: 1 PID: 9399 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1412.181737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.182844] Call Trace: [ 1412.183198] dump_stack+0x107/0x167 [ 1412.183665] should_fail.cold+0x5/0xa [ 1412.184153] ? create_object.isra.0+0x3a/0xa20 [ 1412.184726] should_failslab+0x5/0x20 [ 1412.185213] kmem_cache_alloc+0x5b/0x310 [ 1412.185732] ? mark_held_locks+0x9e/0xe0 [ 1412.186272] create_object.isra.0+0x3a/0xa20 [ 1412.186825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.187475] kmem_cache_alloc_bulk+0x168/0x320 [ 1412.188055] io_submit_sqes+0x6f76/0x85c0 [ 1412.188599] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1412.189235] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1412.189853] ? lock_downgrade+0x6d0/0x6d0 [ 1412.190393] ? find_held_lock+0x2c/0x110 [ 1412.190922] ? io_submit_sqes+0x85c0/0x85c0 [ 1412.191490] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.192108] ? wait_for_completion_io+0x270/0x270 [ 1412.192738] ? rcu_read_lock_any_held+0x75/0xa0 [ 1412.193345] ? vfs_write+0x354/0xa70 [ 1412.193847] ? fput_many+0x2f/0x1a0 [ 1412.194343] ? ksys_write+0x1a9/0x260 [ 1412.194839] ? __ia32_sys_read+0xb0/0xb0 [ 1412.195377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.196058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.196727] do_syscall_64+0x33/0x40 [ 1412.197208] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1412.197872] RIP: 0033:0x7f24549c7b19 [ 1412.198358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.200748] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1412.201706] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1412.202660] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1412.203610] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.204569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.205521] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1412.212317] FAULT_INJECTION: forcing a failure. [ 1412.212317] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.214190] CPU: 1 PID: 9404 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1412.215086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.216117] Call Trace: [ 1412.216446] dump_stack+0x107/0x167 [ 1412.216903] should_fail.cold+0x5/0xa [ 1412.217382] ? create_object.isra.0+0x3a/0xa20 [ 1412.217956] should_failslab+0x5/0x20 [ 1412.218433] kmem_cache_alloc+0x5b/0x310 [ 1412.218934] create_object.isra.0+0x3a/0xa20 [ 1412.219473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.220102] kmem_cache_alloc+0x159/0x310 [ 1412.220621] xas_alloc+0x336/0x440 [ 1412.221064] xas_create+0x34a/0x10d0 [ 1412.221533] ? kernel_text_address+0xf2/0x120 [ 1412.222112] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.222761] xas_store+0x8c/0x1c40 [ 1412.223210] __xa_store+0x164/0x2d0 [ 1412.223662] ? xa_delete_node+0x280/0x280 [ 1412.224177] ? trace_hardirqs_on+0x5b/0x180 [ 1412.224731] xa_store+0x31/0x50 [ 1412.225143] __io_uring_add_tctx_node+0x1cf/0x520 [ 1412.225774] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1412.226461] __do_sys_io_uring_enter+0x14de/0x1920 [ 1412.227092] ? lock_downgrade+0x6d0/0x6d0 [ 1412.227618] ? find_held_lock+0x2c/0x110 [ 1412.228131] ? io_submit_sqes+0x85c0/0x85c0 [ 1412.228698] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.229325] ? wait_for_completion_io+0x270/0x270 [ 1412.229949] ? rcu_read_lock_any_held+0x75/0xa0 [ 1412.230542] ? vfs_write+0x354/0xa70 [ 1412.231043] ? fput_many+0x2f/0x1a0 [ 1412.231502] ? ksys_write+0x1a9/0x260 [ 1412.232010] ? __ia32_sys_read+0xb0/0xb0 [ 1412.232532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.233221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.233884] do_syscall_64+0x33/0x40 [ 1412.234371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1412.235240] RIP: 0033:0x7fd021856b19 [ 1412.235737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:17:30 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0x44, 0x20, 0x0, 0x0, 0x2, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x200}, 0x10000, 0x81, 0x81, 0x4, 0x5f74, 0x6, 0x8003, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, r0, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000027bd70804f04819e000500400508000045aea6542e2afeff0db5ac358547dbe5acc2c5712dccc2aae8478509202d1f699fe90020d127a2791ad690e652d7f778422656398422ffe106f2654e45d685fd5a2d12901fb8bef6445bb0da3e98df602af056c416d6e8000000000000000000000000b3c0dc752be461ba7bc4ae23d5b85da14b121a9084b02b1958894b3c140ba8073729494c7d8a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20001804) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000081c69c12f63f4cfed58bda1e5b72ad1acb705c26902b8f66d71b9f32d39c9bd1bdd885c3b51cb1afb19bbf326c107882afbb0e4aaea58d02b084cb0b8a6a97a6456af768531591714741d76220779ddd4e3666ca0a55458c5e2a2250ea13b32b90b1e49a8c2980bd77c33e84dbe32edff6343817629c729aae8459eb68a9f81476f3b845f998e46d58079dcc1b0ddc2ec58cbd77b5441d46d9adb06b1f5ea26ce8a4e5733fe6ab00c3450a82819d34a647e294ad0e438da476320b0015052f51d1d2c92fff6076", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000000000000c0005000000000000000000"], 0x34}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x8}, &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 13:17:30 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 13:17:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x8010661b) [ 1412.238105] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1412.239177] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1412.240095] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1412.241032] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.241920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.242847] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:17:30 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:17:30 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:17:30 executing program 2: syz_io_uring_setup(0x5820, &(0x7f0000000800), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000008, 0x8830, r1, 0x0) [ 1412.500161] FAULT_INJECTION: forcing a failure. [ 1412.500161] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.503028] CPU: 0 PID: 9424 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1412.504420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.506141] Call Trace: [ 1412.506684] dump_stack+0x107/0x167 [ 1412.507427] should_fail.cold+0x5/0xa [ 1412.508205] ? xas_alloc+0x336/0x440 [ 1412.508964] should_failslab+0x5/0x20 [ 1412.509733] kmem_cache_alloc+0x5b/0x310 [ 1412.510573] xas_alloc+0x336/0x440 [ 1412.511295] xas_create+0x34a/0x10d0 [ 1412.512062] ? kernel_text_address+0xf2/0x120 [ 1412.512983] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.514061] xas_store+0x8c/0x1c40 [ 1412.514803] __xa_store+0x164/0x2d0 [ 1412.515551] ? xa_delete_node+0x280/0x280 [ 1412.516403] ? trace_hardirqs_on+0x5b/0x180 [ 1412.517286] xa_store+0x31/0x50 [ 1412.517962] __io_uring_add_tctx_node+0x1cf/0x520 [ 1412.518961] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1412.520045] __do_sys_io_uring_enter+0x14de/0x1920 [ 1412.521044] ? lock_downgrade+0x6d0/0x6d0 [ 1412.521891] ? find_held_lock+0x2c/0x110 [ 1412.522728] ? io_submit_sqes+0x85c0/0x85c0 [ 1412.523615] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.524600] ? wait_for_completion_io+0x270/0x270 [ 1412.525587] ? rcu_read_lock_any_held+0x75/0xa0 [ 1412.526535] ? vfs_write+0x354/0xa70 [ 1412.527296] ? fput_many+0x2f/0x1a0 [ 1412.528039] ? ksys_write+0x1a9/0x260 [ 1412.528822] ? __ia32_sys_read+0xb0/0xb0 [ 1412.529644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.530719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.531770] do_syscall_64+0x33/0x40 [ 1412.532526] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1412.533556] RIP: 0033:0x7f94eea4db19 [ 1412.534319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.538070] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1412.539592] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1412.541041] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1412.542483] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.543933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.545366] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:17:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x801c581f) 13:17:30 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='pkcs7_test\x00', &(0x7f00000007c0)=@chain) r3 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000210102030400000000000000000d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333435363723c8081153e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r1) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) request_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='dns_resolver\x00', 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0x0) 13:17:30 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 13:17:30 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) epoll_create(0xa6ac) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000001400), &(0x7f0000001440)='./file0/file0\x00', 0x800, 0x3, &(0x7f0000001780)=[{&(0x7f0000001480)="fbd920ed8c77228129f1ae7aadf4f5776d50fd204ea5acfa9c5ab9c8d470dcf3b2ca9e761e7e9b44f134f0aa6d5f367bedca61655be938a0e991c67b149f6161e6f5a1e3ef8b4c74e1d13698eaafa8d34e6d2119e04aa13a459df6639b49781e62ab0836f580c07929ad9ebf9369517ea20e0e709a30e840b0eecb6a9d577103f2ac7d6bf2fe0986e50e4fa8a83dccb85171a50ca8cedfece49e4c9d9dcc1202a1f49c02e63488fa76e0c3fa14b71e714383deb6882044294f8b643f098450f34533348a0e696dd80c740bfb93c9ff0eaa5aec5c7c98c301124aa8b57e2fe77ff803c791ef1d", 0xe6, 0x8000}, {&(0x7f0000001580)="352278f8af5f59c615e4b548b7b4fdcc1cd752482357f6b3b1bb1b7c2f56f09a62348cc57123d9c69e7b9502b0ca3eead45d18f6481a8eb2726d6ce46fb4c604923c315a22325e53ffff7eeb0e79945875f00226928ceef395784410796ffec7034e012c36bfe0f3ede634825b4a7cae46fefc2f270643c036de2ea5140bf421da7316ede5eaeaae807608ed98e2eb5c3e2979e44bfd0a81a1b1fd5d72729584e1648f2dfc5291c2c0c5f9e88337602783a2dc2be82f831d3fe2ce6bf4f968870580a77a544290aadfb2b049f99d", 0xce, 0x1}, {&(0x7f0000001680)="267e6a6ad408929c0b8057bb0f438297f109c908030c161b6020aca62d7cfdec15aac622b63b9f8ed15d7761a4d653aa15acbeb283613161c0b3e8195022b691494edc5e43bb4d37c18cf8d51049e9a9a960df3d31ca76c2a52484dadd9e6236e569e7debad1d22ee4820e5c5a133dc9b7ee0c512ab183b08a459b5b3a7cf636a0ad9762fa0c77b43b2e4074650b4d806893dbc756fe5f4df18be5c2dd6feeb8ade2621dde95af2f4f3ff31c97fb1c7eccb23e5c9098f77984e7e7d4a5128d0b64", 0xc1, 0x2}], 0x40000, &(0x7f00000000c0)=ANY=[@ANYBLOB=',/proc/thread-self/attr/keycreate\x00,}^,,$\\,,audit,fsuuid=37a03d0c-f599-bc89-2X2b-98\a7930e,euid<', @ANYRESDEC=0xee00, @ANYBLOB="deb3e046796d3a1451358d44370c7f25abc87507ab3f89792406ff340180ffff2e1ea0762cf0508e574c2f1e6b2d27cb23af42f1e970d9d7466c033d32fe7b8cedd81357dc4fe12632731febfc4ff3079c9282ed3dfb5f4dfb009e"]) dup3(r1, r2, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 1412.651406] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1412.770204] FAULT_INJECTION: forcing a failure. [ 1412.770204] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.773152] CPU: 0 PID: 9438 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1412.774241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.775526] Call Trace: [ 1412.775923] dump_stack+0x107/0x167 [ 1412.776493] should_fail.cold+0x5/0xa [ 1412.777069] ? create_object.isra.0+0x3a/0xa20 [ 1412.777777] ? create_object.isra.0+0x3a/0xa20 [ 1412.778487] should_failslab+0x5/0x20 [ 1412.779175] kmem_cache_alloc+0x5b/0x310 [ 1412.779858] ? find_held_lock+0x2c/0x110 [ 1412.780490] create_object.isra.0+0x3a/0xa20 [ 1412.781183] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.781999] __kmalloc_node+0x1ae/0x420 [ 1412.782611] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1412.783393] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1412.784185] kmem_cache_alloc_bulk+0x182/0x320 [ 1412.784934] io_submit_sqes+0x6f76/0x85c0 [ 1412.785589] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1412.786378] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1412.787171] ? lock_downgrade+0x6d0/0x6d0 [ 1412.787798] ? find_held_lock+0x2c/0x110 [ 1412.788435] ? io_submit_sqes+0x85c0/0x85c0 [ 1412.789117] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.789857] ? wait_for_completion_io+0x270/0x270 [ 1412.790603] ? rcu_read_lock_any_held+0x75/0xa0 [ 1412.791325] ? vfs_write+0x354/0xa70 [ 1412.791913] ? fput_many+0x2f/0x1a0 [ 1412.792479] ? ksys_write+0x1a9/0x260 [ 1412.793062] ? __ia32_sys_read+0xb0/0xb0 [ 1412.793680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.794543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.795330] do_syscall_64+0x33/0x40 [ 1412.795911] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1412.796701] RIP: 0033:0x7f24549c7b19 [ 1412.797266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.800204] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1412.801442] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1412.802597] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1412.803723] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.804809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.805931] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:17:46 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 13:17:46 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e034, &(0x7f00000001c0)=ANY=[@ANYBLOB='data=ordered,uid>', @ANYRESDEC, @ANYBLOB=',func=KEXEC_INITRAMFS_CHECK<\x00']) 13:17:46 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 13:17:46 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:17:46 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14f6ffff000000020000020000000000000072dbac8135086b12cc63725d6242ceaed32818eeea2acf45385817b64c38118009ae07513220cb556883b8fa68036bf7212a0b4642000000000000000000000000ee8465c7d2fd24fed7cdb38187ff0ce0010a5be6dcec109bdc46554320509909ae27fc30c6eb3dfb31000000000000000000000000000000002950cc7724156e418ea86bc0b378ceba182a4af4c2760694b720d92897e17a043b8c5f41b542d251571f04aac376"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x10004000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f00000000c0)=0x56cb, r3, &(0x7f0000000100)=0x6aa, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x4e, 0xffffffffffff7fff, 0x3) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) 13:17:46 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0045878) 13:17:46 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 13:17:46 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000001300)=@IORING_OP_WRITEV={0x2, 0x5, 0x2004, @fd=r2, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)="25cf1946bf5c7ff840fd64a479d2f170c2e1bc5f19dbb10ea7", 0x19}, {&(0x7f0000000080)="78b35fef092feed56b68074b6a1055c09e4be1f21c70c8a26b6ca15372d65f1e37af4933acb2ed64e31a7a0c2be30e7f641786f65435d771dc0d59b29c2005859d72aa15ac35cfbab9a278226d", 0x4d}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="5fc7784e85ebbb66c7210fe7819edd34bcaf08e5cbe04fb1b68be90a0dd3bec358fa0cfdef5b", 0x26}, {&(0x7f0000001140)="732b6328dfd8561c18cff6a258622a84eb56a95dba7bb6812d3a0996ae23b07a5b2ec309411962db5403372d39fd017d16b35c", 0x33}, {&(0x7f0000001180)="c30643eb5728225871ced9983157a2c9631a08cb2a202aca5590621c5f9992dbeae8e6d4a10a631cf39e1db5d02d607cf95b888e3fa485cc8f05e2ca51b92f1d98d9b675b9003b027bbb5e6fdedc2dbf32f757cd59ccb3", 0x57}, {&(0x7f0000001200)="52af488eb7de1533e28ad3daaf5f868256984b55d8c2289b34a8dd1376060d5dcc37670b14df6390c2df0c838ad474102f8e1e9e709e8e3890cf22143b1b48c094e4ee8c3a47ddf7a005ca11b59cba3868f033cf1d8d647fc7a9f7f15cd9", 0x5e}], 0x7, 0xf, 0x1, {0x1}}, 0x10001) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001e00)={0x0, "f34b5800d68f0dda38cddaa13bb874f2"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000002e00)={r10, 0x6, 0x8001, 0x1}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1428.787546] FAULT_INJECTION: forcing a failure. [ 1428.787546] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.790475] CPU: 0 PID: 9469 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1428.791875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.793552] Call Trace: [ 1428.794101] dump_stack+0x107/0x167 [ 1428.794861] should_fail.cold+0x5/0xa [ 1428.795634] should_failslab+0x5/0x20 [ 1428.796399] kmem_cache_alloc_bulk+0x4b/0x320 [ 1428.797315] io_submit_sqes+0x6f76/0x85c0 [ 1428.798211] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1428.799228] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1428.800184] ? lock_downgrade+0x6d0/0x6d0 [ 1428.801015] ? find_held_lock+0x2c/0x110 [ 1428.801854] ? io_submit_sqes+0x85c0/0x85c0 [ 1428.802753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.803734] ? wait_for_completion_io+0x270/0x270 [ 1428.804718] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.805663] ? vfs_write+0x354/0xa70 [ 1428.806435] ? fput_many+0x2f/0x1a0 [ 1428.807172] ? ksys_write+0x1a9/0x260 [ 1428.807956] ? __ia32_sys_read+0xb0/0xb0 [ 1428.808870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.809936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.811005] do_syscall_64+0x33/0x40 [ 1428.811767] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1428.812812] RIP: 0033:0x7f24549c7b19 [ 1428.813575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.817327] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1428.818899] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1428.820351] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1428.821796] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.823263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.824711] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:17:46 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0045878) [ 1428.839507] FAULT_INJECTION: forcing a failure. [ 1428.839507] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.845198] CPU: 0 PID: 9474 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1428.846602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.848278] Call Trace: [ 1428.848816] dump_stack+0x107/0x167 [ 1428.849560] should_fail.cold+0x5/0xa [ 1428.850347] ? xas_alloc+0x336/0x440 [ 1428.851102] should_failslab+0x5/0x20 [ 1428.851892] kmem_cache_alloc+0x5b/0x310 [ 1428.852740] xas_alloc+0x336/0x440 [ 1428.853484] xas_create+0x34a/0x10d0 [ 1428.854351] ? kernel_text_address+0xf2/0x120 [ 1428.855259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.856317] xas_store+0x8c/0x1c40 [ 1428.857047] __xa_store+0x164/0x2d0 [ 1428.857789] ? xa_delete_node+0x280/0x280 [ 1428.858639] ? trace_hardirqs_on+0x5b/0x180 [ 1428.859529] xa_store+0x31/0x50 [ 1428.860194] __io_uring_add_tctx_node+0x1cf/0x520 [ 1428.861165] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1428.862249] __do_sys_io_uring_enter+0x14de/0x1920 [ 1428.863243] ? lock_downgrade+0x6d0/0x6d0 [ 1428.864070] ? find_held_lock+0x2c/0x110 [ 1428.864897] ? io_submit_sqes+0x85c0/0x85c0 [ 1428.865767] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.866756] ? wait_for_completion_io+0x270/0x270 [ 1428.867725] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.868660] ? vfs_write+0x354/0xa70 [ 1428.869413] ? fput_many+0x2f/0x1a0 [ 1428.870152] ? ksys_write+0x1a9/0x260 [ 1428.870932] ? __ia32_sys_read+0xb0/0xb0 [ 1428.871757] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.872803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.873862] do_syscall_64+0x33/0x40 13:17:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062900)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, '\x00', {}, 0x40}) ftruncate(0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)) fallocate(r3, 0x60, 0x8, 0x6) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r4, 0x0, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c0000000000cbe7103c248326409214e9c3aab062ff104f139fa6fe4e8273d227a5eb38ea075b8e0cebe5f95f38"], 0x1c}}, 0x0) [ 1428.874621] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1428.875792] RIP: 0033:0x7fd021856b19 [ 1428.876537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.880217] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1428.881738] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1428.883184] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1428.884621] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.886048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.887486] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1428.897958] FAULT_INJECTION: forcing a failure. [ 1428.897958] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.900343] CPU: 0 PID: 9478 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1428.901785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.903476] Call Trace: [ 1428.904009] dump_stack+0x107/0x167 [ 1428.904743] should_fail.cold+0x5/0xa [ 1428.905504] ? create_object.isra.0+0x3a/0xa20 [ 1428.906429] should_failslab+0x5/0x20 [ 1428.907188] kmem_cache_alloc+0x5b/0x310 [ 1428.908002] ? mark_held_locks+0x9e/0xe0 [ 1428.908816] create_object.isra.0+0x3a/0xa20 [ 1428.909696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.910723] kmem_cache_alloc+0x159/0x310 [ 1428.911556] xas_alloc+0x336/0x440 [ 1428.912268] xas_create+0x34a/0x10d0 [ 1428.913019] ? kernel_text_address+0xf2/0x120 [ 1428.913912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1428.914975] xas_store+0x8c/0x1c40 [ 1428.915697] __xa_store+0x164/0x2d0 [ 1428.916421] ? xa_delete_node+0x280/0x280 [ 1428.917250] ? trace_hardirqs_on+0x5b/0x180 [ 1428.918116] xa_store+0x31/0x50 [ 1428.918784] __io_uring_add_tctx_node+0x1cf/0x520 [ 1428.919741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1428.920793] __do_sys_io_uring_enter+0x14de/0x1920 [ 1428.921774] ? lock_downgrade+0x6d0/0x6d0 [ 1428.922602] ? find_held_lock+0x2c/0x110 [ 1428.923413] ? io_submit_sqes+0x85c0/0x85c0 [ 1428.924276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.925235] ? wait_for_completion_io+0x270/0x270 [ 1428.926211] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.927134] ? vfs_write+0x354/0xa70 [ 1428.927878] ? fput_many+0x2f/0x1a0 [ 1428.928604] ? ksys_write+0x1a9/0x260 [ 1428.929361] ? __ia32_sys_read+0xb0/0xb0 [ 1428.930180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.931224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.932259] do_syscall_64+0x33/0x40 [ 1428.933016] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1428.934041] RIP: 0033:0x7f94eea4db19 [ 1428.934806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.938498] RSP: 002b:00007f94ebf81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1428.940022] RAX: ffffffffffffffda RBX: 00007f94eeb610e0 RCX: 00007f94eea4db19 [ 1428.941446] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1428.942877] RBP: 00007f94ebf811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.944304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.945713] R13: 00007ffe628af61f R14: 00007f94ebf81300 R15: 0000000000022000 [ 1428.958510] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1429.165145] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1429.402873] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:18:02 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r6, &(0x7f0000000080)={0x80000008}, r7, 0x1, 0x0, 0x1, {0x0, r8}}, 0x101) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = dup(r9) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r10, 0x29, 0x1, 0x0, &(0x7f00000002c0)) ioctl$BLKDISCARD(r10, 0x1277, &(0x7f0000000140)=0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) 13:18:02 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x2200, 0x145) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x408000, 0x137) signalfd4(r2, &(0x7f0000000080)={[0x1]}, 0x8, 0x800) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x200980, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80241, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x75, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x460, 0x0, 0x0, 0x6, 0x9, 0x40}, 0x0, 0xffffffffffffffff, r1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x48000, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/190, 0xbe}], 0x2, 0x8000, 0x8000) 13:18:02 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 13:18:02 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 13:18:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0046686) 13:18:02 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 13:18:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 13:18:02 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1445.115906] FAULT_INJECTION: forcing a failure. [ 1445.115906] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.118007] CPU: 1 PID: 9507 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1445.119211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.120606] Call Trace: [ 1445.121057] dump_stack+0x107/0x167 [ 1445.121679] should_fail.cold+0x5/0xa [ 1445.122325] ? create_object.isra.0+0x3a/0xa20 [ 1445.123112] should_failslab+0x5/0x20 [ 1445.123758] kmem_cache_alloc+0x5b/0x310 [ 1445.124452] create_object.isra.0+0x3a/0xa20 [ 1445.125196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.126060] kmem_cache_alloc_bulk+0x168/0x320 [ 1445.126847] io_submit_sqes+0x6f76/0x85c0 [ 1445.127572] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.128415] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.129234] ? lock_downgrade+0x6d0/0x6d0 [ 1445.129928] ? find_held_lock+0x2c/0x110 [ 1445.130534] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.131269] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.132085] ? wait_for_completion_io+0x270/0x270 [ 1445.132741] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.133517] ? vfs_write+0x354/0xa70 [ 1445.134027] ? fput_many+0x2f/0x1a0 [ 1445.134650] ? ksys_write+0x1a9/0x260 [ 1445.135175] ? __ia32_sys_read+0xb0/0xb0 [ 1445.135726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.136465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.137165] do_syscall_64+0x33/0x40 [ 1445.137669] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.138369] RIP: 0033:0x7f24549c7b19 [ 1445.138908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.141354] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.142363] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1445.143331] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.144316] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.145284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.146255] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1445.164091] FAULT_INJECTION: forcing a failure. [ 1445.164091] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.166127] CPU: 1 PID: 9515 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1445.167076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.168213] Call Trace: [ 1445.168577] dump_stack+0x107/0x167 [ 1445.169076] should_fail.cold+0x5/0xa [ 1445.169599] ? create_object.isra.0+0x3a/0xa20 [ 1445.170224] should_failslab+0x5/0x20 [ 1445.170765] kmem_cache_alloc+0x5b/0x310 [ 1445.171316] ? mark_held_locks+0x9e/0xe0 [ 1445.171872] create_object.isra.0+0x3a/0xa20 [ 1445.172475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.173167] kmem_cache_alloc+0x159/0x310 [ 1445.173692] xas_alloc+0x336/0x440 [ 1445.174173] xas_create+0x34a/0x10d0 [ 1445.174655] ? kernel_text_address+0xf2/0x120 [ 1445.175280] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1445.175997] xas_store+0x8c/0x1c40 [ 1445.176455] __xa_store+0x164/0x2d0 [ 1445.177040] ? xa_delete_node+0x280/0x280 [ 1445.177618] ? trace_hardirqs_on+0x5b/0x180 [ 1445.178200] xa_store+0x31/0x50 [ 1445.178630] __io_uring_add_tctx_node+0x1cf/0x520 [ 1445.179296] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1445.179960] __do_sys_io_uring_enter+0x14de/0x1920 [ 1445.180626] ? lock_downgrade+0x6d0/0x6d0 [ 1445.181190] ? find_held_lock+0x2c/0x110 [ 1445.181744] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.182339] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.182956] ? wait_for_completion_io+0x270/0x270 [ 1445.183615] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.184253] ? vfs_write+0x354/0xa70 [ 1445.184769] ? fput_many+0x2f/0x1a0 [ 1445.185228] ? ksys_write+0x1a9/0x260 [ 1445.185755] ? __ia32_sys_read+0xb0/0xb0 [ 1445.186309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.186972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.187699] do_syscall_64+0x33/0x40 [ 1445.188169] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.188864] RIP: 0033:0x7fd021856b19 [ 1445.189334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.189529] FAULT_INJECTION: forcing a failure. [ 1445.189529] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.191835] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.191849] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1445.191856] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.191863] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.191870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.191878] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1445.205154] CPU: 0 PID: 9517 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1445.206543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.208215] Call Trace: [ 1445.208751] dump_stack+0x107/0x167 [ 1445.209495] should_fail.cold+0x5/0xa [ 1445.210447] ? xas_alloc+0x336/0x440 [ 1445.211207] should_failslab+0x5/0x20 [ 1445.212198] kmem_cache_alloc+0x5b/0x310 [ 1445.213028] xas_alloc+0x336/0x440 [ 1445.213898] xas_create+0x34a/0x10d0 [ 1445.214672] ? kernel_text_address+0xf2/0x120 [ 1445.215760] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1445.216816] xas_store+0x8c/0x1c40 [ 1445.217696] __xa_store+0x164/0x2d0 [ 1445.218454] ? xa_delete_node+0x280/0x280 [ 1445.219463] ? trace_hardirqs_on+0x5b/0x180 [ 1445.220332] xa_store+0x31/0x50 [ 1445.221132] __io_uring_add_tctx_node+0x1cf/0x520 [ 1445.222095] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1445.223384] __do_sys_io_uring_enter+0x14de/0x1920 [ 1445.224370] ? lock_downgrade+0x6d0/0x6d0 [ 1445.225368] ? find_held_lock+0x2c/0x110 [ 1445.226191] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.227250] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.228219] ? wait_for_completion_io+0x270/0x270 [ 1445.229385] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.230313] ? vfs_write+0x354/0xa70 [ 1445.231240] ? fput_many+0x2f/0x1a0 [ 1445.231973] ? ksys_write+0x1a9/0x260 [ 1445.232889] ? __ia32_sys_read+0xb0/0xb0 [ 1445.233708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.234977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.236016] do_syscall_64+0x33/0x40 [ 1445.236913] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.237933] RIP: 0033:0x7f94eea4db19 [ 1445.238829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.242465] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.244280] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1445.245690] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.247108] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.248544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.249987] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:18:03 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 13:18:03 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_setup(0x6a6a, &(0x7f0000000080)={0x0, 0xaffb, 0x1, 0x2, 0x5d, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syncfs(r3) 13:18:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0096616) 13:18:03 executing program 2: io_setup(0x5, &(0x7f0000000080)=0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup(r7) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000002c0)) io_submit(r3, 0x4, &(0x7f0000001380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000200)="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", 0xfe, 0x2, 0x0, 0x2, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f00000000c0)="1a3adfa16c221f7e40b329cd92dc8306f5bb588346a32e8a1b3975ba8acd622c5f05cacf638cdf5928c29c020f02a7bf643dc586169aab803661e289", 0x3c, 0x1f}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x77d5065cf83c5c4f, 0x2, r1, &(0x7f0000000300)="467305f95b813436581d52028034e7c686c7623226cc5d21954926cb8032256fbdfaac0a0f2c049a8471abd198c5769b19e8e599260356e480a24dab2b3524f28dc8ab38eb1b283a7a1fb09aa77f469bfe75a768c4903caaec28ac27f487260a0b077d36395e63d6c4bd89385548582090c0f1ee02b0249931b02bf25571e38e7be9ba2e167199d24eeb68edba3dd38356a89e06263548c35d5cd4c5992d846a534e7f9bfe2f91bd54498a0b47e7d93b0872d24ed4d1090f21b13fb00cf2d4f2c69417bb30415edc2850e02a6f7c9e00aec19e088cffce18077ed6771e4ba7e0ce784c806b456e97a72d15a5f958f89e253040eb8aba6d8f52c794f3e75ade7d750763cae963db654cd6adb2b3d748932966d38cbb7ed9cb5b37d531d57ad707f350c848390feb66422d8508a166008e4684f1ae299f47c75d65c27ab26e15dfa0408836faebe8a2e074e27d131bed915228d38ea7a6019b8690a6d12ab1894e3b1fc102ab6a1db4c26167f4a0298b17a491c194f48fd301b9650333ea6e139a3a3236f3664f6c638f403f149400bd32093797a1b75d6b46c56dd0b81c76a88bee4e4eae368026acdff6709c787fa681a881deb0afaa649b43fc257c231d2ac07891226a2db4bd6c39dcaaff316189730c1f5d2e06c865b9a3ef312f6ed6c1c3e261c0dba72fc985fbd603accf2afb5ff6c83c5f149005a24f4f759ac3ee632732596c5a256a5cd9b17146d4a71127715af80e588641e622087a60c9ec2892d3608b933292864d3c573b90fdf3717ce70a9a102c85fe950200edadbb6a83f0e511d579daad25566f17429fb620536eff3bfd9f2f4a1136e35ee90d833ea757330558222e0fdcdc59b8d993260511780f169d51e8ce098cb2fde92de727c6994812509bd1c1f92a587364369bf961092c831fcb5df6bd34ed06dcec6a49b8f24afbb57082bde098e666750878386311a60095b7133f722a13d48c1d64249f89b18925b7170e12812959cd357bc47c3eba816a80241a514dee1d65cf007114ef055cc64d74a0a09ab4a50cddec6d4259176b8168e710eff326e2d09c9dd953944ead76643b8ea64d5aebd95bbd819c2a6c9a04a7412b2f7a7e8bf12153c77c04ee0671b33e9ae41e0e72e8a4d0468b294195ff932032609e54bb2eb3af499a524a60561a7b72f4953d2f1693a7136321151651c004951bb4a837ac368710ffd0e3079fc78992257682b90b9cc05b873b809ad8e4deade9a737908e0a68a0dd196b5fdfe58af7b96fcedf83f2ce4e2754dfcd04ffc47108c187bd35dfe9090f40a96d0c56c549df5f1461e859ff86374a4573ce431729be7b1f760c473329c1b24cc6c297637e5c26ed753b81be8eafb72d424ab9aba7e2143a8e5c0120e9d81778ecb85ee67387b5dc2f5c7963012e46f93cf36805d10be6602276c5f96215cd4866ba2f9e67379cd31d536c151c7fd53ccf8c2613e6f341915610567fdbab5da2febc6fd5f5e89cb35b36f152b550ef100e63a0ba06009ec2fea31813a6074e0ca255db3b4ffbe69a2bbeda82d944f948139db52f0b7896e58ca5b15796778a536f82abe66ef2f4661a7e81de9838712bdb15f74ecb78477efc1ad588e9ed5b9c0c2d0b7764fa26ff72218bfeda1dc423066f0b6b898dbc70bc8d3e5d513f0d65b446dfadeac778d8ca5debff3c780e7ca70d3ba0d77fc3befd6e6b98a7de6b4f9e96fd53f3051734f809334c45a2d0c8ea18aa656c0a0e24d7a223a88528f8ca7edd1c7ba5d13a879fc4f8fb81f3059a97b81555a4a774bbb81bc7c31cf37942afac7625e569f14dd62beefd5d73bccddd1dcd6e11924b705f3bb890b4a6315e6287a43526681c9b5f8c8c1afb1966de0d7ee0892742d7b9182a366267a4554bd65bd7405aa1b443cedb8f8555001fba8d0a3dec2b4221c96ac85bb3d66e93a7bf78d944d559d281bfe76232f4c0e3255817c4d716e87080573cd1485a9c26779c8f549232e987ba67a1eb1c13132ef09ba04d3dd7034fe12d25d0d4982c67257a21ea7e5f1ecaec86503552c0725423b6754b74c89f70af8401e4fcff0d5b161b6e96cec64d017dca992fc620e25e05288374aa3d9b3ca8c20372d42a5e0d30a7cfa2a21fdcd8eea7ca7072d0d908c5ce7da28d836659f7bd7eae020ac19d72a7ee7e5e3404bcd6a3121b4dfa6739ed10f3c49fe46189685a1d5e17bf0fc0839074804cca3780c0abe1fa47406bd374a91b324c173ba2aaf860ac75f3129153966b655311dc1f0715928d3790ae9e923f3e61a94c4101d7b994d5f19b22488574bda8a523c7153f1cd6dd7833abab6234e58cbf3817eb299215663ede5163e2e1c7edb9bfb29ccbb6488f87984aac35db3d495b92d0ab855d7fb492246220d14677db9d38be9d7ba007a8aa1992757bc23050f6f6f504579137a7ccc94bc6c4a5625cba66bd068a2e05e07c347038372b12bd61460dcbfe989f2219b47b7e6b3334fad8a4639aafca4e014df2ef82149fb33a2b30db4c957ce527c1b1dd3fbd0cad2a8d55fc3e2454a97eea7a193d4480e38e56def7c2b9440fabc22c65b7d7830e46b7a5fb9581728e6aa4ba90d7aa9b3adaed56d95c5863cf897f6f38355252c597d81e52c3426ff15c2d69f8ad290cacc009fb8697d822dd56aa2b0af04d3fb66446123d8ed703a792326558f026a2422cb9376f37757ad467921e640a0de9d81bb22754b24ab51e30625745307060c15114fc976bb5f5edaaf62cee958390b27ea4fc47147a61ed050a93431caedc836307e05a870743fcba7e19ac3a34f39b74254fc877c33ef46a9c8cad701fdc6a3972a3d73d5ec6004d3a185be7d5c680a5f04bcec833a083bc362de36b1a0b8171d1dcf445c7d49a229a795914fc358a319a4afbc7d3e5b238e7340600f5335722f22dc5acc32538a57df8d52f58b316b154a3e0758c5374d6cba48a6be05af7b98452e2a45885e4639402c7c07f7a3eddf9c92fc80322d3415a5877fe04cff4531a3f774a80c11df367ef076b54178b0bf50db75c3beb3e2b501165f70140035648a79ca6e9f561bf524125db809a238ff6f1b82fe356741ba7fdf2d9b3291c2433eecaffabab62942374e998c7dcc51563f11c9e814783253ba4ca80d5c1f25ccae5fe1fcd0f36dfa12cdcc9916c842887cef69aa4de2174ee2ac40f6e1a7f5bad3d3af109d9a53249edf08f51e7c923f9253fa3f3a75587e684c590c21310db37c1f65326b35516e0984db4b191e71eaa8f796fe5ce7c453b2cefd4d62d8580278f4f52590b8d7e0232fbcaa6588f1289af3350dac805b5d9ee310d5b6b7178f8626fdf0d2c768d8b4623f69e1455d05ee7ed916ea68631558485dc6032b56a0dd516c544e94995f23797340ab1fa82a8177d9c9e2940086d802c4ceb37a6e1e9edcf71a14b960157b6c83c7a0f87bbfb443d1d18775f0679e219d076bb7510e5d04d1092b2e0f38be033442b79c0f54285b10d6f9c078ffd1b2112a4739cce11e989f4c15e9d2d50459418c08c26386f0874d52274a16945f91d026cd4983e60f6066b147846b3925334d2f94635328201ef85a7280907898e1e60f01339dd209091f498e1514cb3d51a48217592b4d87fd571b413b85fa924b5fc9034f4eefe051781b2e289fb5ee86724c872a2abd0ef0613904d76290bafa21ba7109102b560ed9117da1640ce35d506d3db1061c3c62aa27f90e8acba6eb13d02208626ac522cb46609c920abae988211ea634fb4099deaaaf62231caf8388d6862d3edaf6ec341c1d7cfbe0143af85ff02e9fa84c9625cc4152262a6e222a89772c80b0edee896a2fddaf40841a2984ab4986fda1598513266f43a4c03de371420ccdb34bacf32ce8d8f6e7e0586752a2f7e92dcc845c5e0ff89ee3fb53d9559c3e26ee00baf5dcb8433f3aa6bd59d9d8f638f301826e9c28994eeb1842ce8fb166b69204d019a3009bc2d7b7227e53cb6289ccf3c2f123c1c068df07e56f00a13d15c9ad69ea280ebf3598c85ed4768155d7cbcf59fbb60d456782523f7d53e47cd4fe80be110ec367fc016fb3ff40270348b28f403e1396c61fdc593c5981ae4b74822ba1a5055d5a6c945082363cee93e31b626c11283e34e054d9b836faf976a8ade045bf6f637742463c5c3dee6f7745c9de3be9d09c78da9ac32500bf1707ae25df3a86f883ba3ada8c9d8c1bdec4327f3fb6f573c292f2f788e1d02caff1ea644f1dadd3b7cfbe672e438e9e90ea274f2b2566e5c0f95fdefab5172add011677fac39e6107700e1a508f2b8a5e07edeb21e28c7d52b8aacd6c33b4c5812a0495f7e29b89ca37c20cee5c85761bc0baeeed25a71373899ba499d85cc58d98539855831f071da4956d38597167c304c41650eacc11622543853a988591b0054bd72c360b434a688e8cb5af5f11c747a4f51d8908938f63d094f355c30073c4e541cb9e99cc28bb815d2e0dbe60eac998fc8f82ccf640e3550edfb04b498c3d83d36cda774f40ddeadedb4bf4ce151423b7ae517eb436c6080d406e06aef78fa2abd8a75d57720085bde813924e702d23ea98796280070e85e1b5a06dae14313ef791fb0d560054adbde11102eed2e4ed3afe1db85d35dadc5dfaa72a04cbcfb52e3b5f318462bcd97409f31517497cb9531e208fefc32d9a6c3c7b0892a6eec8dbd9bb4cbc5b02093ee785c8601f1817a5ff8d05c1f91ddc923ad1cdd772e974069be0529fec6a718bfd012affcd76c6102ca1d12f0fbc9890c101af0d95f9e2d4c146c77454a16ffa3294725e97e8f85d698ad233dc8943a6df842f10788de9b9d5373c092f424b97c761a99e630d81d914bcc25b8c818a99328d0e6fae0093366669aacbb5768c1d6db426ccaf53f9532d68808494a8503d0e58afe93aea02b465bf50422c32d777b13fae3da2303221ec16bae42d91dcdeea31a53099f4af5f8c4d8ebfda6392d663fbed5c32074c9153b3133b8af0a97766280bfc558b82dd80bd7d1bc4881118ba2885897c1199835a153fde0d3d579c991aa22c2ee792889da5290399fdf82709b896e766d95df882cf2f1f5f4df98210b7b26851f98c66b39d50bd91a774fad5b9705eb1aa38af2c02d613894c496c31142c0800d3feb0d3bb12e89f0dc6e91fec8c0d1583e514b75dc42a2cff7ecc3df75a03889c8ef0400514ac6bae8631f364fa4ad1236cd6df7c4aaf82caf6d56024273726b6a5e75c33b3e00021fec2e2a3e4d1646216e421228b1cf1090bb6b5e355d6d1fb3b258938bbcaed133505ec5d6a6730efef203d6e52dfa5fcd7cacd844021f29781fdc075d2e39fbeeefadca8a28ffa22e12ed24933cfa32f727286bf356999c5dab97bdaf2640975df84c35ae621108933212eff61b3e1dc955186c0c77d092ebd623aa77ca1de82fb3fb02b69225942d23b02002520121fdfbdd76756ab1895d0eff390253f63fd0beaa313a6854d4f348a746bfa96886e056f91ffbe3c2e76c8640e5d9738d052b0535f562b7574ba371ce153aad6063979f364188f32ebde5fbecff40a1f2c262e5651f657692ba0327e7d45c70dba3830c113c13c7d24552a08b7320c2709f446e3e69b13f4adecd6c2993d52b39c98b2bfc491b18adb5736d83af8a6dfce50f34e4b3841edcfda4894a05b6c885430ba148a0b6dd2f51a99b45769678221e184af2c6712a32f8460a6aa82d16f752a482187eb0850808d6957987d14f9462f4cd036ad7be4bd831908220c5f870c59b2dddd6344211b233d98e07f318df6b944469134fe79b", 0x1000, 0x2, 0x0, 0x3}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x2, 0x5d, r1, &(0x7f0000001300)="01cb537f187bf1ea986cf98278", 0xd, 0x400, 0x0, 0x3, r8}]) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4}]) 13:18:03 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 13:18:03 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 1445.511178] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:18:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x971, &(0x7f0000000000)={0x0, 0xe322, 0x8, 0x0, 0x270, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="67446698000000000000000041f46850780238ccc2bfbf00000000"], 0x10) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0xcd9f, 0x2, &(0x7f0000000280)=[{&(0x7f0000000500)="c6fcfa0a47c099ddff555de7d77c41b43462089e3c1961aa7744b192ffaf2ad1c03ecc3325a2daae578b7bdf69e84b72d5f2647da6cd1d6f55df1c0a6c0a5411ab47cf1b90f1a7df0d94adfd98151ea598c67fe8d3a12d47c98a108b9a5ca028b634fae4428f40bab6b9a57ff97fc260e2abf4f48cd245b657c9c55539873c3ec2931bbfddee4754fcf509d53d584bbc1055503e64832c2f8e53226403e1d5948fedc6782bd07f90a2402706b15b7540b61f28fe4ee8a6736524b21089bc3849387369443b150a5df93578c5e92b19938ebeb15197", 0xd5, 0x1}, {&(0x7f00000006c0)="cb85f5f2f35c0281bea74fab0ae36ae05824ca189cd6908bac31d8bf1d590b0f5e73e73f9f4ca0c15e1b2bd1b4676b46b117badb1bc229a21ea4ef96774259497ef4778cf5e281d0661e97239caac10cd709144a172daf0dd5d94bac8b72409e7f8e95c053358f5fa665c01a93b80a1f270faf9088aa12eb0a3965929c2d9966355902f0618e24d891da25151039dac2283d2d898f6aff02802c693cb8924e60c2f0342f74935097350ff5a9bc1458b76600cba83abcb42f8c11db53d00c8410a8825e575615f490ae51", 0xca, 0x6}], 0x44002, &(0x7f00000003c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e756566636f6e746578743d73746166665f752c657569643c00f3ffffffffffffff00", @ANYRESDEC, @ANYBLOB=',rootcontext=system_u,pcr=00000000000000000031,fsname=,pcr=00000000000000000033,\x00']) socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x287707c89b52bd9a, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x7) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 13:18:03 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1445.615948] serio: Serial port tty25 [ 1445.640257] FAULT_INJECTION: forcing a failure. [ 1445.640257] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.642278] CPU: 1 PID: 9531 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1445.643261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.644508] Call Trace: [ 1445.644885] dump_stack+0x107/0x167 [ 1445.645406] should_fail.cold+0x5/0xa [ 1445.645942] ? create_object.isra.0+0x3a/0xa20 [ 1445.646596] should_failslab+0x5/0x20 [ 1445.647053] FAULT_INJECTION: forcing a failure. [ 1445.647053] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.647128] kmem_cache_alloc+0x5b/0x310 [ 1445.647142] ? mark_held_locks+0x9e/0xe0 [ 1445.647160] create_object.isra.0+0x3a/0xa20 [ 1445.650760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.651353] kmem_cache_alloc_bulk+0x168/0x320 [ 1445.651850] io_submit_sqes+0x6f76/0x85c0 [ 1445.652335] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.652867] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.653379] ? lock_downgrade+0x6d0/0x6d0 [ 1445.653850] ? find_held_lock+0x2c/0x110 [ 1445.654295] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.654798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.655318] ? vfs_write+0x344/0xa70 [ 1445.655753] ? wait_for_completion_io+0x270/0x270 [ 1445.656273] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.656871] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1445.657453] ? trace_hardirqs_on+0x5b/0x180 [ 1445.657953] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1445.658539] ? __io_uring_cancel+0x20/0x20 [ 1445.659024] do_syscall_64+0x33/0x40 [ 1445.659455] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.660060] RIP: 0033:0x7fd021856b19 [ 1445.660481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.662645] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.663528] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1445.664343] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.665162] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.665982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.666817] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 [ 1445.667675] CPU: 0 PID: 9532 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1445.669056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.670779] Call Trace: [ 1445.671304] dump_stack+0x107/0x167 [ 1445.672033] should_fail.cold+0x5/0xa [ 1445.672791] ? create_object.isra.0+0x3a/0xa20 [ 1445.673699] should_failslab+0x5/0x20 [ 1445.674464] kmem_cache_alloc+0x5b/0x310 [ 1445.675271] ? find_held_lock+0x2c/0x110 [ 1445.676082] create_object.isra.0+0x3a/0xa20 [ 1445.676958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.677963] __kmalloc_node+0x1ae/0x420 [ 1445.678768] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1445.679773] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1445.680770] kmem_cache_alloc_bulk+0x182/0x320 [ 1445.681675] io_submit_sqes+0x6f76/0x85c0 [ 1445.682540] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.683519] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.684472] ? lock_downgrade+0x6d0/0x6d0 [ 1445.685285] ? find_held_lock+0x2c/0x110 [ 1445.686091] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.686960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.687914] ? wait_for_completion_io+0x270/0x270 [ 1445.688864] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.689780] ? vfs_write+0x354/0xa70 [ 1445.690532] ? fput_many+0x2f/0x1a0 [ 1445.691250] ? ksys_write+0x1a9/0x260 [ 1445.692099] ? __ia32_sys_read+0xb0/0xb0 [ 1445.693005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.694163] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.695328] do_syscall_64+0x33/0x40 [ 1445.696159] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.697297] RIP: 0033:0x7f24549c7b19 [ 1445.698126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.702213] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.703848] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1445.705245] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.706657] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.708054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.709607] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1445.884436] FAULT_INJECTION: forcing a failure. [ 1445.884436] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.887399] CPU: 1 PID: 9539 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1445.888808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1445.890530] Call Trace: [ 1445.891081] dump_stack+0x107/0x167 [ 1445.891840] should_fail.cold+0x5/0xa [ 1445.892632] ? create_object.isra.0+0x3a/0xa20 [ 1445.893578] should_failslab+0x5/0x20 [ 1445.894266] kmem_cache_alloc+0x5b/0x310 [ 1445.895075] ? mark_held_locks+0x9e/0xe0 [ 1445.895707] create_object.isra.0+0x3a/0xa20 [ 1445.896501] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1445.897310] kmem_cache_alloc_bulk+0x168/0x320 [ 1445.898139] io_submit_sqes+0x6f76/0x85c0 [ 1445.898820] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.899714] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1445.900459] ? lock_downgrade+0x6d0/0x6d0 [ 1445.901208] ? find_held_lock+0x2c/0x110 [ 1445.901849] ? io_submit_sqes+0x85c0/0x85c0 [ 1445.902644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1445.903406] ? wait_for_completion_io+0x270/0x270 [ 1445.904279] ? rcu_read_lock_any_held+0x75/0xa0 [ 1445.904995] ? vfs_write+0x354/0xa70 [ 1445.905671] ? fput_many+0x2f/0x1a0 [ 1445.906325] ? ksys_write+0x1a9/0x260 [ 1445.906936] ? __ia32_sys_read+0xb0/0xb0 [ 1445.907666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1445.908481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1445.909412] do_syscall_64+0x33/0x40 [ 1445.910008] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1445.910950] RIP: 0033:0x7f94eea4db19 [ 1445.911537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1445.914299] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1445.915483] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1445.916585] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1445.917682] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.918810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.919911] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1446.133317] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:18:16 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 13:18:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0185879) 13:18:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)) fallocate(r0, 0x1, 0x4, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000c30018000900000007040000c4048f01000000001c0000000001000000000000690cf8ca0425dc759f7708000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) 13:18:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:18:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f00000005c0)={0x0, 0x4000, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000080)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000140)=""/78, 0x4e}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/68, 0x44}], 0x4, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x60) io_uring_enter(r3, 0x6630, 0xfffffffd, 0x0, 0x0, 0x0) 13:18:16 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x6a1c}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$packet(0x11, 0x3, 0x300) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/140, 0x8c}], 0x5, &(0x7f0000000840)=""/151, 0x97}, 0x0, 0x40010000, 0x0, {0x1, r6}}, 0x101) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x4}}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:18:16 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 13:18:16 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1458.835544] FAULT_INJECTION: forcing a failure. [ 1458.835544] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.838532] CPU: 1 PID: 9566 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1458.839957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.841674] Call Trace: [ 1458.842220] dump_stack+0x107/0x167 [ 1458.842998] should_fail.cold+0x5/0xa [ 1458.843802] ? create_object.isra.0+0x3a/0xa20 [ 1458.844769] should_failslab+0x5/0x20 [ 1458.845571] kmem_cache_alloc+0x5b/0x310 [ 1458.846428] ? mark_held_locks+0x9e/0xe0 [ 1458.847287] create_object.isra.0+0x3a/0xa20 [ 1458.848206] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1458.849284] kmem_cache_alloc_bulk+0x168/0x320 [ 1458.850261] io_submit_sqes+0x6f76/0x85c0 [ 1458.851201] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1458.852245] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1458.853271] ? lock_downgrade+0x6d0/0x6d0 [ 1458.854143] ? find_held_lock+0x2c/0x110 [ 1458.855013] ? io_submit_sqes+0x85c0/0x85c0 [ 1458.855911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1458.856907] ? wait_for_completion_io+0x270/0x270 [ 1458.857908] ? rcu_read_lock_any_held+0x75/0xa0 [ 1458.858887] ? vfs_write+0x354/0xa70 [ 1458.859679] ? fput_many+0x2f/0x1a0 [ 1458.860446] ? ksys_write+0x1a9/0x260 [ 1458.861230] ? __ia32_sys_read+0xb0/0xb0 [ 1458.862097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.863200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.864275] do_syscall_64+0x33/0x40 [ 1458.865054] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1458.866131] RIP: 0033:0x7f24549c7b19 [ 1458.866208] FAULT_INJECTION: forcing a failure. [ 1458.866208] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.866925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.866937] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1458.866958] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1458.866969] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1458.866980] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.866991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.867001] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1458.885930] CPU: 0 PID: 9576 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1458.887481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.889346] Call Trace: [ 1458.889945] dump_stack+0x107/0x167 [ 1458.890780] should_fail.cold+0x5/0xa [ 1458.891639] ? xas_alloc+0x336/0x440 [ 1458.892484] should_failslab+0x5/0x20 [ 1458.893343] kmem_cache_alloc+0x5b/0x310 [ 1458.894261] xas_alloc+0x336/0x440 [ 1458.895070] xas_create+0x34a/0x10d0 [ 1458.895914] ? kernel_text_address+0xf2/0x120 [ 1458.896930] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1458.898115] xas_store+0x8c/0x1c40 [ 1458.898944] __xa_store+0x164/0x2d0 [ 1458.899762] ? xa_delete_node+0x280/0x280 [ 1458.900696] ? trace_hardirqs_on+0x5b/0x180 [ 1458.901670] xa_store+0x31/0x50 [ 1458.902415] __io_uring_add_tctx_node+0x1cf/0x520 [ 1458.903505] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1458.904691] __do_sys_io_uring_enter+0x14de/0x1920 [ 1458.905793] ? lock_downgrade+0x6d0/0x6d0 [ 1458.906730] ? find_held_lock+0x2c/0x110 [ 1458.907643] ? io_submit_sqes+0x85c0/0x85c0 [ 1458.908617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1458.909698] ? wait_for_completion_io+0x270/0x270 [ 1458.910790] ? rcu_read_lock_any_held+0x75/0xa0 [ 1458.911828] ? vfs_write+0x354/0xa70 [ 1458.912664] ? fput_many+0x2f/0x1a0 [ 1458.913486] ? ksys_write+0x1a9/0x260 [ 1458.914337] ? __ia32_sys_read+0xb0/0xb0 [ 1458.915255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.916420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.917578] do_syscall_64+0x33/0x40 [ 1458.918407] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1458.919566] RIP: 0033:0x7f94eea4db19 [ 1458.920498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.924675] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1458.926369] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1458.927973] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1458.929560] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.931156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.932741] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1458.934197] FAULT_INJECTION: forcing a failure. [ 1458.934197] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.937315] CPU: 1 PID: 9580 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1458.938780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 13:18:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0189436) 13:18:16 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) [ 1458.940464] Call Trace: [ 1458.941197] dump_stack+0x107/0x167 [ 1458.941945] should_fail.cold+0x5/0xa [ 1458.942751] ? create_object.isra.0+0x3a/0xa20 [ 1458.943681] should_failslab+0x5/0x20 [ 1458.944455] kmem_cache_alloc+0x5b/0x310 [ 1458.945281] ? mark_held_locks+0x9e/0xe0 [ 1458.946110] create_object.isra.0+0x3a/0xa20 [ 1458.947183] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1458.948403] kmem_cache_alloc+0x159/0x310 [ 1458.949400] xas_alloc+0x336/0x440 [ 1458.950252] xas_create+0x34a/0x10d0 [ 1458.951190] ? kernel_text_address+0xf2/0x120 [ 1458.952265] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1458.953517] xas_store+0x8c/0x1c40 [ 1458.954384] __xa_store+0x164/0x2d0 [ 1458.955266] ? xa_delete_node+0x280/0x280 [ 1458.956265] ? trace_hardirqs_on+0x5b/0x180 [ 1458.957304] xa_store+0x31/0x50 [ 1458.958098] __io_uring_add_tctx_node+0x1cf/0x520 [ 1458.959257] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1458.960524] __do_sys_io_uring_enter+0x14de/0x1920 [ 1458.961702] ? lock_downgrade+0x6d0/0x6d0 [ 1458.962715] ? find_held_lock+0x2c/0x110 [ 1458.963637] ? io_submit_sqes+0x85c0/0x85c0 [ 1458.964523] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1458.965504] ? wait_for_completion_io+0x270/0x270 [ 1458.966483] ? rcu_read_lock_any_held+0x75/0xa0 [ 1458.967430] ? vfs_write+0x354/0xa70 [ 1458.968189] ? fput_many+0x2f/0x1a0 13:18:16 executing program 0: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0800001d00010000000000000000000a0010000000000000000000"], 0x1c}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000040)=0x2000000008000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffffffff, &(0x7f0000000380)=0x4, 0x16, 0x0) [ 1458.968929] ? ksys_write+0x1a9/0x260 [ 1458.969837] ? __ia32_sys_read+0xb0/0xb0 [ 1458.970686] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.971750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.972815] do_syscall_64+0x33/0x40 [ 1458.973583] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1458.974670] RIP: 0033:0x7fd021856b19 [ 1458.975434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.979235] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1458.980781] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1458.982224] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1458.983676] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.985117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.986577] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:18:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 13:18:16 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1459.079550] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:18:16 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 13:18:17 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:18:17 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1459.323572] FAULT_INJECTION: forcing a failure. [ 1459.323572] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.326452] CPU: 0 PID: 9591 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1459.327862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.329509] Call Trace: [ 1459.330037] dump_stack+0x107/0x167 [ 1459.330789] should_fail.cold+0x5/0xa [ 1459.331553] ? create_object.isra.0+0x3a/0xa20 [ 1459.332464] should_failslab+0x5/0x20 [ 1459.333222] kmem_cache_alloc+0x5b/0x310 [ 1459.334038] ? mark_held_locks+0x9e/0xe0 [ 1459.334870] create_object.isra.0+0x3a/0xa20 [ 1459.335749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.336769] kmem_cache_alloc_bulk+0x168/0x320 [ 1459.337686] io_submit_sqes+0x6f76/0x85c0 [ 1459.338687] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1459.339679] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1459.340641] ? lock_downgrade+0x6d0/0x6d0 [ 1459.341461] ? find_held_lock+0x2c/0x110 [ 1459.342274] ? io_submit_sqes+0x85c0/0x85c0 [ 1459.343149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1459.344114] ? wait_for_completion_io+0x270/0x270 [ 1459.345096] ? rcu_read_lock_any_held+0x75/0xa0 [ 1459.346013] ? vfs_write+0x354/0xa70 [ 1459.346777] ? fput_many+0x2f/0x1a0 [ 1459.347496] ? ksys_write+0x1a9/0x260 [ 1459.348265] ? __ia32_sys_read+0xb0/0xb0 [ 1459.349071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.350141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.351176] do_syscall_64+0x33/0x40 [ 1459.351921] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1459.352935] RIP: 0033:0x7f24549c7b19 [ 1459.353697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.357381] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1459.359076] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1459.360656] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1459.362233] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.363831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.365411] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:18:17 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c00000000a04f1cb2000026800000000000002100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) 13:18:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc020660b) [ 1459.514097] FAULT_INJECTION: forcing a failure. [ 1459.514097] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.517340] CPU: 0 PID: 9603 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1459.519016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.521029] Call Trace: [ 1459.521673] dump_stack+0x107/0x167 [ 1459.522577] should_fail.cold+0x5/0xa [ 1459.523512] ? create_object.isra.0+0x3a/0xa20 [ 1459.524627] should_failslab+0x5/0x20 [ 1459.525551] kmem_cache_alloc+0x5b/0x310 [ 1459.526537] ? mark_held_locks+0x9e/0xe0 [ 1459.527545] create_object.isra.0+0x3a/0xa20 [ 1459.528620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1459.529850] kmem_cache_alloc_bulk+0x168/0x320 [ 1459.530793] io_submit_sqes+0x6f76/0x85c0 [ 1459.531793] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1459.532783] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1459.533752] ? lock_downgrade+0x6d0/0x6d0 [ 1459.534592] ? find_held_lock+0x2c/0x110 [ 1459.535413] ? io_submit_sqes+0x85c0/0x85c0 [ 1459.536276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1459.537242] ? wait_for_completion_io+0x270/0x270 [ 1459.538199] ? rcu_read_lock_any_held+0x75/0xa0 [ 1459.539137] ? vfs_write+0x354/0xa70 [ 1459.539877] ? fput_many+0x2f/0x1a0 [ 1459.540605] ? ksys_write+0x1a9/0x260 [ 1459.541364] ? __ia32_sys_read+0xb0/0xb0 [ 1459.542278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.543452] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.544607] do_syscall_64+0x33/0x40 [ 1459.545436] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1459.546590] RIP: 0033:0x7fd021856b19 [ 1459.547421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.551517] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1459.553205] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1459.554801] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1459.556289] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.557713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.559139] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 [ 1459.575146] FAULT_INJECTION: forcing a failure. [ 1459.575146] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.577894] CPU: 0 PID: 9608 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1459.579257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.580945] Call Trace: [ 1459.581474] dump_stack+0x107/0x167 [ 1459.582199] should_fail.cold+0x5/0xa [ 1459.582965] ? xas_alloc+0x336/0x440 [ 1459.583704] should_failslab+0x5/0x20 [ 1459.584462] kmem_cache_alloc+0x5b/0x310 [ 1459.585272] xas_alloc+0x336/0x440 [ 1459.585983] xas_create+0x34a/0x10d0 [ 1459.586745] ? kernel_text_address+0xf2/0x120 [ 1459.587639] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1459.588698] xas_store+0x8c/0x1c40 [ 1459.589507] __xa_store+0x164/0x2d0 [ 1459.590323] ? xa_delete_node+0x280/0x280 [ 1459.591262] ? trace_hardirqs_on+0x5b/0x180 [ 1459.592229] xa_store+0x31/0x50 [ 1459.592967] __io_uring_add_tctx_node+0x1cf/0x520 [ 1459.594037] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1459.595222] __do_sys_io_uring_enter+0x14de/0x1920 [ 1459.596316] ? lock_downgrade+0x6d0/0x6d0 [ 1459.597235] ? find_held_lock+0x2c/0x110 [ 1459.598142] ? io_submit_sqes+0x85c0/0x85c0 [ 1459.599071] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1459.600029] ? wait_for_completion_io+0x270/0x270 [ 1459.600987] ? rcu_read_lock_any_held+0x75/0xa0 [ 1459.601907] ? vfs_write+0x354/0xa70 [ 1459.602658] ? fput_many+0x2f/0x1a0 [ 1459.603379] ? ksys_write+0x1a9/0x260 [ 1459.604134] ? __ia32_sys_read+0xb0/0xb0 [ 1459.604943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1459.605979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1459.607017] do_syscall_64+0x33/0x40 [ 1459.607784] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1459.608921] RIP: 0033:0x7f94eea4db19 [ 1459.609751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1459.613828] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1459.615526] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1459.617104] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1459.618686] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.620190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.621599] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1459.640056] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:18:31 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 13:18:31 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 13:18:31 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc020662a) 13:18:31 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:18:31 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 13:18:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x4c, 0x12, 0x501, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x0, {0x0, 0x0, [0x0, 0x0, 0x1000]}}}, 0x4c}}, 0x0) 13:18:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r4, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fba0da3344bc9163688567feda8dba320d292f4ebefe64e99", "220c0000002d52004bde09505bf1c35930ac1d9268624c1420b156a2ac400377"}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, r3, 0x3, r4, 0x6) waitid(0x1, r3, &(0x7f0000000080), 0x8, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = openat(r5, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xa4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) 13:18:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x724}}, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d3, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000012) pwritev2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000011c0)="5fe0b5aa", 0x4}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="100000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0c00990006000000710000000c00178004000400040005001c00e700691dc3480d2346117568e81bb3dcc18c849a8535c7243539000017800000030000000400000002001c00e7006c7a618bccede6eb6f3aeb21b439faf54831365cb878a7f9240017800400030015fe0500040004000400060004000400040002000000010000000300"], 0x9c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r6, 0x301, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) r7 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001180)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000bc0)={0x57c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x1}, @device_a, @random="c9f463ed293c"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x534, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_b, @broadcast, {0x5}, @broadcast}, {0x6, 0x0, 0x3, 0x0, 0x6}}, {@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x20}, @initial, @device_a, @initial, {0x8, 0x3}}, {0x2, 0x0, 0x1, 0x1, 0x1}}}, @random="d87f6788c349b91c3dbf7ab2163de5375ef4e36ea2f633216c4b7d592e624a728ca89ee7ce8363bc5abab476bfe38e6c810f84361a81e097f082be4421ba1aad850d944552a078718cf05a9e9a0a2f10b1e0479b19f040d5800acd7c99df9d41076d6191bab5ad8bed54bb3d46655a095a8e68d5d0ac86b934ff171856a42d3e05a6d60d24527261e53f272def18cafdc0ac40c2346a89dc7f7cc6b06d45c085d88f8f2e8f623f1dcd839e6b1e353069ac5305f65c5a77f184d60b3a216dfab079b3d70f7afd00781e2aa452829bfa62714d9a23e23d43a1900f457bec8f0b4b8cbfe108ad8c1f1de0b6ca822d695ac44a24496204ac07a5056e8049074505b4e25c6afb5db4934888553e0e348a8076568fd6ded6518e18a1808eaba2fcd8ee2cdea1b4d6f3d55f619852b234e114119b558fd5cb8f3ac59286cd8406be2ad38c7e5dd501ca4a2d017f72da00fc7924a95968ceb7407df472efa8c52305550edd053fde062d7a90e0b19d4dfe1ed80c598829b8a18f14551320b165a3536579441fddb5f3b7588a4951e97aafeefceb1dbfc56ef6c7f5db882c9608c978516f357323af62356a374e2d5380a894d11ff860a8b9a6707809113170c7a8b9f2d587727bf9954edfe9442ddd940fc8e8aab0a9ce1512bd647368464c1a4408394ba5930c5e8028500eb7b4110b126ae2adb407f32b4afe5eeec32c2e465cf330d165cf9dcddb4fad1cd0a82b2b24ad3d3a15dd11c47660b75ec0b21c7bbe4e0544cd84fde590bc47c086b09dcf207516620b8c71a6fb8beca65b536656e198b3de90f53d3352db86d7b8dbdbd2f3f290e8e0f0a4d97e44bde62a364e978913cd52a310e22c18705cbab3eca1be02083db302c173e1d43a4ee7db5e0accb0489164b4f770f83b054b6e0fc796714832c0e689c856f736d34f490c08950b35c99b81f8b205170e6e3882cbe2ca3013f98802507d0f3d9fa20beb411baaed6046d6d98c5af1636f54fc665dcc6eb62d02c34d64f0474ba51c0813e85c4633393c07ed5187b7f267841e4ab38f743c330f05f9f8e55541c90a04cf8a7d657f51d2efba3c4436838e891b2c7161984d7b8c5ddc246ac5f928524031f3dbe24d991e5eb6eeecec8cc177d9d58865059e16b8b1769168a7df22d35dd8cfcb2b8a5f2cc1a221ed951f321aa8cd5d26d693c03c5dfe03d95841df5a808c463824e218f8a773444aeb028e118c453b694482220a8923e279efb87ea689fe3b429843bbdaf76992a37549d4aa99b07f2e103fadc5592cba44cd3c8775cbdef4dc4b9c2f73064c64e69d57c2810150c87fe29508aeed45db6180bc578c63aa7173a8ee35680766078f5c166a1933eb9cde69a80c38523062b61293f384a910870f321209927b076d41a53b03fea65164d2d7f522352824ad16f5adb95d5fa6764a983eb4857f3b6d1b94b776334152fddefe0d1323f1e81ae5fedcf407922d5de12940076e62e44ea0645a48083b855fd070f11581c90e60bc02fe4926eb411cd4804aa65004560a9ec6280773e2148de0d73df441d976aa1518df1d91086bfa8c6c3387f00dc2cda1a733918c765134716449905532bd51560f616346704df857e403d1274e56a8df5f7f75c5670fafd912b9b9d23d03f6034a71d4c151f504e685f2d861a3ea21f7771f170d4d83b9d0af3f8fc05be63d09c01c9b80672b8717166ca9d5019156bd8d982db44617971332abf6721c09277b703050b9010f49a6aa1af19d9d0728d3ae4e993ff3b9d71d807b44c97804cfc338dc0f53"}}]}, 0x57c}, 0x1, 0x0, 0x0, 0x84}, 0x4084) [ 1473.288416] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1473.306211] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1473.329266] netlink: 1792 bytes leftover after parsing attributes in process `syz-executor.0'. 13:18:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a02}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) read(r2, &(0x7f0000032340)=""/102392, 0x18ff8) io_uring_setup(0x57bb, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat(r2, &(0x7f0000000200)='./file0\x00', 0x440, 0x98) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hid', 0x4040, 0x20) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x60000, 0x8c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x80000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x80000001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xffffffffffff0000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='^+&+@^#*J]%\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x0) [ 1473.382213] FAULT_INJECTION: forcing a failure. [ 1473.382213] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.385207] CPU: 1 PID: 9639 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1473.386558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.388221] Call Trace: [ 1473.388746] dump_stack+0x107/0x167 [ 1473.389472] should_fail.cold+0x5/0xa [ 1473.390225] ? xas_alloc+0x336/0x440 [ 1473.390972] should_failslab+0x5/0x20 [ 1473.391723] kmem_cache_alloc+0x5b/0x310 [ 1473.392647] xas_alloc+0x336/0x440 [ 1473.393380] xas_create+0x34a/0x10d0 [ 1473.394270] ? kernel_text_address+0xf2/0x120 [ 1473.395258] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1473.396427] xas_store+0x8c/0x1c40 [ 1473.397341] __xa_store+0x164/0x2d0 [ 1473.398210] ? xa_delete_node+0x280/0x280 [ 1473.399295] ? trace_hardirqs_on+0x5b/0x180 [ 1473.400260] xa_store+0x31/0x50 [ 1473.400998] __io_uring_add_tctx_node+0x1cf/0x520 [ 1473.402069] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1473.403260] __do_sys_io_uring_enter+0x14de/0x1920 [ 1473.404351] ? lock_downgrade+0x6d0/0x6d0 [ 1473.405268] ? find_held_lock+0x2c/0x110 [ 1473.406181] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.407172] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.408252] ? wait_for_completion_io+0x270/0x270 [ 1473.409324] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.410354] ? vfs_write+0x354/0xa70 [ 1473.411198] ? fput_many+0x2f/0x1a0 [ 1473.412007] ? ksys_write+0x1a9/0x260 [ 1473.412853] ? __ia32_sys_read+0xb0/0xb0 [ 1473.413759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.414930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.416116] do_syscall_64+0x33/0x40 [ 1473.417070] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.418364] RIP: 0033:0x7f94eea4db19 [ 1473.419204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.423738] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.425540] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1473.427242] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1473.429018] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.430604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.432199] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1473.434417] FAULT_INJECTION: forcing a failure. [ 1473.434417] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.437481] CPU: 0 PID: 9643 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1473.439040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.440893] Call Trace: [ 1473.441488] dump_stack+0x107/0x167 [ 1473.442313] should_fail.cold+0x5/0xa [ 1473.443188] ? ___slab_alloc+0x155/0x700 [ 1473.444100] ? create_object.isra.0+0x3a/0xa20 [ 1473.445127] should_failslab+0x5/0x20 [ 1473.445983] kmem_cache_alloc+0x5b/0x310 [ 1473.446921] create_object.isra.0+0x3a/0xa20 [ 1473.447908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1473.448225] FAULT_INJECTION: forcing a failure. [ 1473.448225] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.449049] kmem_cache_alloc+0x159/0x310 [ 1473.449081] xas_alloc+0x336/0x440 [ 1473.453223] xas_create+0x34a/0x10d0 [ 1473.454072] ? kernel_text_address+0xf2/0x120 [ 1473.455101] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1473.456276] xas_store+0x8c/0x1c40 [ 1473.457091] __xa_store+0x164/0x2d0 [ 1473.457910] ? xa_delete_node+0x280/0x280 [ 1473.458876] ? trace_hardirqs_on+0x5b/0x180 [ 1473.459848] xa_store+0x31/0x50 [ 1473.460590] __io_uring_add_tctx_node+0x1cf/0x520 [ 1473.461672] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1473.462874] __do_sys_io_uring_enter+0x14de/0x1920 [ 1473.463977] ? lock_downgrade+0x6d0/0x6d0 [ 1473.464905] ? find_held_lock+0x2c/0x110 [ 1473.465823] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.466868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.467956] ? wait_for_completion_io+0x270/0x270 [ 1473.469040] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.470078] ? vfs_write+0x354/0xa70 [ 1473.470935] ? fput_many+0x2f/0x1a0 [ 1473.471754] ? ksys_write+0x1a9/0x260 [ 1473.472612] ? __ia32_sys_read+0xb0/0xb0 [ 1473.473530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.474699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.475876] do_syscall_64+0x33/0x40 [ 1473.476722] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.478070] RIP: 0033:0x7fd021856b19 [ 1473.479077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.483272] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.484971] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1473.486563] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1473.488171] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.489761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.491379] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1473.493014] CPU: 1 PID: 9629 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1473.494547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.496420] Call Trace: [ 1473.497018] dump_stack+0x107/0x167 [ 1473.497841] should_fail.cold+0x5/0xa [ 1473.498693] ? create_object.isra.0+0x3a/0xa20 [ 1473.499718] should_failslab+0x5/0x20 [ 1473.500565] kmem_cache_alloc+0x5b/0x310 [ 1473.501469] ? mark_held_locks+0x9e/0xe0 [ 1473.502384] create_object.isra.0+0x3a/0xa20 [ 1473.503372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1473.504510] kmem_cache_alloc_bulk+0x168/0x320 [ 1473.505533] io_submit_sqes+0x6f76/0x85c0 [ 1473.506490] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1473.507620] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1473.508707] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.509669] ? recalibrate_cpu_khz+0x10/0x10 [ 1473.510645] ? ktime_get+0x158/0x1f0 [ 1473.511489] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1473.512600] ? clockevents_program_event+0x131/0x360 [ 1473.513837] ? tick_program_event+0xa8/0x140 [ 1473.515011] ? hrtimer_interrupt+0x771/0x9b0 [ 1473.516007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.517170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.518320] do_syscall_64+0x33/0x40 [ 1473.519160] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.520299] RIP: 0033:0x7f24549c7b19 [ 1473.521131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.525219] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.526923] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1473.528508] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1473.530085] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.531673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.533270] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:18:31 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x2, "6d2276d10c05cb"}, 0x9, 0x3) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:18:31 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc028660f) [ 1473.692426] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:18:31 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 13:18:31 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 13:18:31 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x0, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61, 0x6}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001040)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000001480)=0x14) syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000002f40)='./file1\x00', 0x1, 0x1, &(0x7f0000003080)=[{&(0x7f0000002f80)="3695dd77e2e38467bcd5afac27b2427e9400882e1bd56259d2954322e21ed570a380d6b6fd49f3df788f199b15ac18c5166bb38214b667c7d885b3162fdc2cf7b67e9dc673314d55decc924e331b6d65e8b2ff1734e45513deacf5b9862314547f59eb16dfd36f74a37a057636219c1e9d61170108825a93c056a19ef0425cdc86e93bec9ffa29afc1e57b9fb079196380e28013a1159cfdc393c03a07649a8ca40c18223faf459db69a2563eebf9be098092c210d192765464ccd201060e0562535edc4041572e3f979", 0xca, 0x333}], 0x80004, &(0x7f00000030c0)={[{@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uni_xlate}, {@rodir}, {@shortname_lower}], [{@smackfsdef={'smackfsdef', 0x3d, 'syztnl1\x00'}}]}) sendmmsg$inet6(r2, &(0x7f0000002e00)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000004c0)="6ab7fff7773a3f7dd5061efb62e513bd180309164b668308bce0338a45f7e5562a23c72bf321879a01952ea35268cab8fae469b1b561b49b33a326cbcd00dab0937ca07c427aa7e44a82de8a811e33730c2721dcf4024c551e1f4735bfa9d553cf4d63dc9a95c3889a12c38180927726704dc0dde0e62a000b43f04f43cd7290a6e32a0b5e4fe1c4d9a29e015b97d80cef5eb8c34076d2cb54baea87e5fc363802bfd580ab17e22f9e698f2a9b97b96ed53efea92a55466fab63fcfff94802d1f1ca4161426c63dc3f1a84e4aa9e96f88c3837504dbaa3d714349c803f4c259154c3ea289576ce194e93e70c0ff0ddb26faf6c74dfa511121b315fa9", 0xfc}, {&(0x7f00000000c0)="b4c234cac35eb0a945bc12f1fce339b72fed979cd70fb7b06f63", 0x1a}, {&(0x7f0000001e00)="dce96d51e694c6994ba25cf45391bf227543fce8c7e8d484ddf3c32600c5ae1350fbb4a4a48417268f42d7d86065c02fb9e9f8cd4bcb48218ded1fe28948e364c404158bd8efe441e377170163d6116674e7bd85b0f89ec006e55126cc096c17cc8e6c45968c83d0b4ca5e190704a7d6f8e5aebc34474424acd764f61c98501cf196c0099e713c20bd13a8edda36c1bb98fd576d3aab57e0184bfa1347cd12092384e4179c05a736f9cbc8741cfb34c6b335f8721846c3d179bf6d610260e8f7fdae3948a4096c520faf519eb1e90f85c02cacc43d2bb11531e0eac7ee8b5334e1fc5b7085dbc6d8edfe0d8601a028cd698efba148f969980fea574aad625f8ee97e3c86745b9e60479cdf3811280d7f5541deec3e2062c6cf74f18a8ce0d4b65b431334004bdbaae1436d936d567f5c4a63ab591b04c790df2950698cb3386e45c5e663854ac2c05ccd6af4e9a743454ad8c12d8fe20530a76780d3e29760575d593ee8a8782492e28d7f52bbfbacbe8097476629ff3d3832696592bd2ed074d7d3954238d4c4879f53bcae79fa23d13b250acc30c04e31220969c70d216b80646d5126bb9d87f175dbd394260a4e929b9baa55645ce2881d24ccd3b70c4a779325c69f56425221215b834703a162448ed5bb29a75ccdadc8e27ba5589c70f481f664af8312ab5c2d141088317eb5eecc9b6a31ae8385f02d346db9eafd9f21166b5fec6c895aab0573c7966432470a2d8076c9beababeb1aeb74f46daea84ccb7ad233b02949f73d9e8e3f1e73ede4a739f582e46dc0ba50f25689c5cd00ef4365176d8ee5c72641896e0d7c7daf1ca7fdf4d4fb2122d1770c3dce98f74e1f2fb72aa8c1557b50d2045bd465a1bad69a594106d07dfd0286a6b48018690efdb9343bebeb4125cc7a0941c6f77d5d8a5dd0a1e00d81f65274be3645f65d5ee7d551b0e3bb150132a9390bcc9d1f87df6821f3011e595e8dd7c601a09e92221b2107e040e1e72d97527b3dd4d85ee3435d41e2fae79a67fef98652a0df54be53db4fdf5a9be47c8ac071cf55db1a5708f1d8649f5adbf2c4a8272857564487d973b1b2073656ba7ebcf6a889b41ec352570fde78332f5bd46b72d4caf74d2945b967c91ad22bfdbb9b6c8925dd7c336979773f105e613f7ad827667dcb72a8cee003a97a5daa46aeb95e785729ed9b697d3f065f66f87ed71198d31b70db0c999ae48469309981696e57454ff7a577a4610ea468c8241c4bc5c38fe8b43a581519ae8e4251ac28de46f33921d797c55960648e57efb3d105f5cb73ce7930eca3504434262bcf41521fdfb31fed3aa2a8bf977f3fc5c145a9992a0ded63fd76e438a60a9c7a43ec401a5719bd9b4b51a3b3686e0a3f1f1f5f00b80efb03a9d2ba16f3841bcfab210752b534cb9a0225f978e51b101ae9169f942938dd76469abc7642ff1f3de1cc689f7cbc4e62a5d623741d06166419ded7a389c95f96ff9557781daf34ba85517d2fefb9d86b5a91b81a749170779fd9c59e1611e2c24e70b560de26c3220abe6c8ee8b098fb816075694a3458fee29b74e226176255c80eb2d5dd2b72e9c1a4834ad92f384db8e63a1910ad4314db859b55e24bb3fda0f2421e34415492111c59ea5403ad5ca21eff4f0e3072b0126778d09c7cfeeed78709be77d11c3db7d9128e64d9ef4c284c94a144182f474da1b95f5cae4b173c5ad160ea3f4095411217adf5fe738f1dd3113d7aacda19774572e6ced73126a9480ad7ef545a4c65eb9a68427e06786133308ab7d3919cc6fe96c689fb2b29f9eafb4b28c9d7251c1bbfd89ff6d5fcfd2602de69441e799b6fa42ea11c5ae185c1f72a555de8fd91b13152e15ea2be7943f3995a1796cf22844a03828f992c29ad6c07f9cf2c55f32a99376e6bedfc1a56628ec47d819e15ce6694b73f06dc835ad3261c526bafb861576a8bb0cc80191b66c2b3555fa245960ff51fa3278576fd9fa1e22b7f6f11972007de08292f30096bba5e449fb6d18bf48051d1cf1f0471fe02f8898d1cf6c020d749f4a6eb89410448c5d73814bb8eeaab627f4acb59c1e67826ad48c8c9b70f10a5aba5f18ee0bbdf04520765b18dd8db3cddb3ade733edbfcbbcfd8642558b6620f0aec9ec02a86f6546440d1e6be166dc10f73764048375bedeff61de191e7579a9e866cba1aa93ca688e996ac5b5eae68d5ad372e25ea9e805be6165db89fb475eb7a53228746099609d081df0b2e961dc614b903459e61d75e742f129d7ff384e299c522326522209e9156b92bec36f4be23397d7cda58de3ba626b7d6ee25005a2abb3a6cef12d32b6858d8f04e134eb47cc1670938371e810e4f3c2c5feaff70f81172f18143353a21f48d7353619c1ca77a0e6694ae12167aa743e1add30e9cd508079db4836518770b86aa347eeab4a6efa3c17e17438c1f9b93ed8c3da9bcd02b193dbf72569c2244d650cf25c58a945e3d1ffef2159e418810a772cdeea3956cbe682fcef3e6c0feebb2628e31ede8650f5c120418283fbe631fa4540cc5d2083f8a6c88ded264c0397787b23c5c125c09d0294d20bfdd0ab8273aae85a1c78a7831fd955c31f36a7d8c258d3798561ed3dff63b4f3ac03f3b759f5686755c27fc1be11baaf12ad4087f060fb647723874e6e4f1bfa2f05312b6b5eba4547df5a9ab536eaac5d55d10fac10ffabe7276caad1244e162f4737bfe2e63fd6a9c00f0a0aee9b07b732693dc6488e4924382e833611e35fa89649e10ea4a206bde5ce03742dc762bf7d78dbd2d21d37c651ab549ff79ba20040d20fd52ef7bb2c638a60fecb36d4da078fc834f767012044ff5035bd22a5d8d3bc6e6debfa8588d94e4f8b5d33c10fb6a4768bc8fead093ec7c9e87b857d5b63d00e926f1d890a68c8543e86f879963e89d1dc5cc58a97b6e26a71cc76d6b6ef0313a71e27c8b650057b7c07e7da70ae5d835daf889c0804ac9542eb96534a618b333ee2498242726496ac65aaf800ca6ed51e3506609eb9c703367df0b911f0c65efc6a0ae3ca42c431e138b7aa9399cbe61552eb1418bac2b9439e3ba90dc3315b0bf46fb6501a4fe10b6b84ec1e4c38e9a844c2a1213af469f027648249a85c403dfe96b7e5765c54d6591bcd75142908a57eef843a54bc9ba8021182c42afae7be23d8bfe279f77945cc2951278ed0d7f1091a3f8743d41de46fb347b8cdca55c7e4ef7682387317646810c5c520abf2a486acc5fd29c0b7996d7e9b6b84f4bf54bbb2cbfe8ab8a3121fcc0ded13ce7355811a67f805a4df36b3bfba734f7d6295b6f7928c4949bd61963638fb04540f050377d00e9a21046b9e60ccf3f2b9d5b03b99c2f2d4ea2e91312a0362381cb15c22012709936825b6ede72df3e7fc681b5e02638122b26dcbc46a160614883fd9202fcb088adfc7c6b443b57a3f1b3e91fdad088cc03de29298615bdfb59bf4b4de6df4173e574f45c05e30ef120491de11ac1763a0fcb37baad776308a2f4ca038620dda6dc5caa3f1534bd3a63f94665fc3366494ef72d293ae6ed8963aa7f7bdcebfe74f24c99e94e259995e4db2bd30dfc4ff974dde0c7f776a79210b909e552d14afb1bca92948c8b95b0f02ba96468d69aacc2c35e561cf3e18e45fc79271f3781ca9de589badc2cd4ec023a3a24d3c47cb8266a3aa6d8799c10318b259fcb818d68c9a7f7b843c0f0cb872c1fb0089ffaa5ce9ad629f5f6f829869449eaee9a300ba9ed3aa16af85663346af2179ab0b90d1e8a6acaf677e6c7db9d8c5e1e89919638d243a429b21050a272f5d00e9e61b0e065ccead8fb464d8c279ee1999b50c385580cd28ebabbc6be8dad7fd61b0667cd404b4efb85ffb5ee722c7e4714ad12ba332306b64e867f7e82cb6aa1c2d509f9ea6035b9be7e59e8c54e75274dcf0264e32100e3cbc310af2459b66741fd936312f34228001a5d148f6f77fd201fff4003e067102c113d662498f340d138a0b06920245153dcd8417a83885cbc7be6767d538f6e3946813cb1dea6a31d6f214232325c5ffe95b1e9714adbc8cc38a9fa04a125eb440678b59df9649733b5149a3ffe88c490130b8aa1747a7c586296a14831ae13acaf37658bd00517ae72db85db1f277249d9834a69c303ce1a31035b11e5a6b69dbceeadf4e8fbd7375e36321eebb717b9625591a2d33d5d0f7813c1371fb2e7982a71dad72b487db8c89f767e6b2f82b4ee4d91d44fcd8256a44cea18bf29b1dac46f7c70380c947f26d84996ff69b816bfdef36c24de67625b73066655b4711152601dd1d52945b019c2e08e0cb72691c72cdfea724095b8b5d318576f093527013a9622707a39736a2fba77ce9dde7324b42220281f142e88050d6aa835690e8e40c197d08fcbc2f5cadd93a69e765bc2ba3bac2dab929182516dec1b8081e9848a8d154458d818c5ad87eacc98ac82e62731bf734c45d22ec0df3cd47b045a5103372415dd4117052569ff9e4ea1f52af533dea2ef3ca96910c11f95eb544725dbbd749ea6c83ad2677d85c8ce1052adee69c394b48d64a017de29c73f781874e981b152dbcd47a546aea75105a9efc1b10624c219e2bdc4627cb12fd617d92812a893ebea8e3b63b2c754e3a59198a2a00d08de469636156faa8d3b292bc8775241f94c236cd9133be8d3513eafc75eee97acb37ec496739f2aed609b61d26875aa8d5a485bac20831363a66a9f24ecffacc2a0c78ed6861462dd8e74dc64f29336fd9ad9d1f92871ff7d9061e3e7587716100cf7cd8ad56aae0e948a5a397c61de856294fd8034e574612e33909c469919ec8d4178e80815b16841dcb4bdc04c4bcaa2b42d7e82ef39ff6125cee132928dbabc6299cd0d7ba2cd8f0c87e88657a7028545fc9bcabb43036be5e9ea091f4d0840577300e4dc6c1ebba40226cb637c63382be832794a57cca28bdf9b140f9af63bcf243fee568ed04574b25927273cd639d9b855995a4d8be8922fe16c628c7b97aa04cf4eced4bcfb9a334e774094e604a58de46c477e963452d28e2e190515269932e4ece463088638d6ca3939b5c2e531378d35fa1d960ce35050100a49fa5adcaeffe90a9bc28d58355394696fe4df3546b5bedfab6247369b9c33f60f6bcbf23c3d7c3ee84522117346476648fb3952a7d75dc5e8bab5bb2c11565c5c50d6084da3534d4cd36a636a91c6eccb8a66b6b4d317b29d7ff6205fe961f27c73d9c6e2a5738049d224ca345d21f43a5e3a78358f87db1f595bf5584aa2b203d4be17e77efd38975e83eddf6e7496249151187038be7cc738b76836e84e0d22ffbf8e0e170348772c37b6e620ae4b23a0d38ce6395548562d2ef779dd4e5b05efc5668321665a69d3773cd945bd29e71b126fe4e726bc549d7b1bece13ce11429aa821a2dfc4a7135c5bc6b4777afca57e0f3e0e82b8b8bc41e2028988b3f6e87dcd7eefbffb2ab3d7c14cc7872c89e35e4d91812b2a06f7f682ef0d80391723e3b657b5c15595ce68b630f12ee75ef5b9f38cb5f6955023973c1d8c224df02fc6a0df92b7678b34946279d849700d9b6a921a46e2676a0f33df988578173af6c51f59d4ae77a901bf4d295528ca8e0074dbbb00b2762fdea3418a18cc438143755f7f31afa35e9a3d3a63ed4ac81477669ab981c6461a9c592147a16078e82a1e2da00785e6fd509157c15f73499c7c5b3dcfc90f63d37d85206a818c32c05e0136d49e3b50805d529a6eff034f56d8b25b2024decb95dc5c96116e2550a2237728560d9b392db00317", 0x1000}, {&(0x7f0000000180)="4b9445c5592b48368540723c1a5577f47029606271523df3eaa6bd138c0894fcfb8159861953d88463d4e83cf9c0628eaff3425eff9a866d1875d6b19ab7d7828988776e3b949e7a393ff91395df12d2be39b05f4c21db833dc5d88724a9c020bea91f83d918b2f25841eb03ca687bd8ee10b349348219d78c2393e4b735d2cc0f1587ea", 0x84}, {&(0x7f00000003c0)="c2a92dce752906ec9489c04bc0989f92c3a1fb82ffbb75ef8f30d234d8a0ddf50e0d2e0af6f0fc7852108d21d7ea75eeb69b1451428fcb63102d318e958a7ad183aebefdb39755587e9a10da19c96727011300f6ca28653ca1cfd8a405858fcd1cec45151ca81f182b248ca2b931d30ff867417e1a3a8df9b7889ab835fe2ce1f467acb8278786580b567a8f3da63a9c7dbef704edab7c5f5ca7aa369830d5e891794d79ac8a2add7aac597dafee4b6a3d2b010b", 0xb4}], 0x5, &(0x7f00000076c0)=[@dstopts_2292={{0xa0, 0x29, 0x4, {0x2f, 0x10, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0xfc, 0x6, [0x6]}}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x1f, 0x51a, [0x9, 0x3f, 0x0]}}, @calipso={0x7, 0x28, {0x3, 0x8, 0xe9, 0x1ff, [0x6f715ca2, 0x6222, 0x4, 0x87e]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x6, 0x3ff, [0x0, 0x2d60, 0x3ff]}}, @ra={0x5, 0x2, 0x5}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x29, 0x0, 0x1, 0x7f}}}, @flowinfo={{0x14, 0x29, 0xb, 0x47}}], 0xd0}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000700)="409bf23d72b29a5612049a9f62dced729fb2b8e5d605b1c8f1b83e0fe8e6f9a1a8d3d5cd0c6f4aff513b7d25572c08921d05ac6d6dce113812d6a0141a8a2e2cd0850cd9d0132935d3075ea26d79b46cd75097cdbf69e9461fe365645b9ced153ad9927c4cd815faa39389b6aa513fc7b62fc62912db4f8e3af90d93c41da92df56f2d403fda4d3b820549116eb2209e9ba42f6e9b6123c5b9b336b5ccac473f955ba134d2e0488549518a2a64b8edf30da3dec76028d0d3eeec4cb768dd6856e69fe372ed6a26ed9e85458ed5eba134fa13f42c360b08e579b48fff67aee153", 0xe0}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000000800)="e1deb7d87f29a86e9309b6cef44f64841f44627a2b97c98d74968248da68316d16cdde09dbbad1956775fd089f1a0398b5676588bd7f9c076e0ec45f1dc78a8b4a99d869d3315186a37eb994628a351edaa3336c061e3382ecda7cdeec6620553835185830c138703c65226a1d40e4e20e633bb96cfac70be8", 0x79}, {&(0x7f0000000880)="d1ee1205c64ed84ed0143db0691a7271762a358c9f0cd4fa6f14a633100451955f4a7820e820ca8aaac57bc9536f8f5aa1432a425270257ee4de6a2569678068b5c6d698cb8cd9033e7844558d8fe3578e9003b1d5b082e92cc6642e871b7d383e23a799e8384052bc9e7ed37381e44481ea2bdf2e543161bd67127b924ed8446dc2ba73410fde195eb34a6d82a27d4c4b722cd7e0e0be7a7b026e1ad1f19be7fecd5663a45990622d05e14baf2fc446afd4d4df2d6b5215ef26f1d34ab1125fe57c97404e39", 0xc6}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000980)="50985a940af1b239511e0eddc9644a5af18d8db9f46d9792031d8cb8e4717afbccc6e6f0f7091bd7172d97592ad31ff448895af5e4ec3ada07562685555424cb155c181fccf2e6f0307dfe7620907bf466c25f91084dbccdbebe23d672456ed81fa1d413080bb7992ca0e33d716f7d3816ebf243ac3b3ef043238b23", 0x7c}, {&(0x7f0000000a00)="d8d8f249f765fe652b66c344e956ba316216db09a6cda11a5e103c1e01ffa0a9a4d9cf9db2b5fcda66eb1fda0467430fbabf2f131e425e7ebfa350897b0f09b86baea9cf30bd04c12aedd2ef786b1b5597cd6996407af2baef28a466ceb487968e6953378b79be6064ed85f4f47caa8eb15b762aeea214f8456d", 0x7a}, {&(0x7f0000000a80)="3442fa1f89332ab9ed5e5cd86248bf942b3d239c3bdaab86ca83d290f12a9e378638f85311bf81dc1e788ddcf47d49238171e5117d14a14e22641fe8b62109512bc03a94f2512875f87da1a1409013a5215dc23290757adfa9573d80c899502fc8a633f9aefb24e9c626285f012ac4410af5324954fe8d3b345d43edb184d0a576e1abe25a800933288f49a22bfd9085ea480c5a949fc3380a6bc4b303b49359", 0xa0}, {&(0x7f0000004600)="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", 0x1000}, {&(0x7f0000000b40)="28d64d64a80a33d5bbff0c640868ab6cf1bebba3342c3664e2d1fa3cfc7e0165cbc231933394ca492d9946a59778dc", 0x2f}, {&(0x7f0000005600)="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", 0x1000}], 0x6, &(0x7f0000007600)=ANY=[@ANYBLOB="0000ef1200cffc00290000fffffffb00000000000008ff6207c617c05a8ea2701e9af523b935723f82066a4a9ba5ca6676f2df8599fb63c46dc0f692f19f2a4abfcb0c5b10f6afa81f22b3838f72edbf449606f35e82efdc1691aea8e53a43c5e251a8989f97c830a08de01e24911fcb7d58af803ecf11aa9da7e1540f3c78cde628834e323a1100"/146], 0x18}}, {{&(0x7f0000000c40)={0xa, 0x4e20, 0x7, @mcast2, 0x5}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000c80)="96b43022b81e5f06dd8ac5fdf54d8a4901adf400acd3e470351a0dda5df078cc7ad0814742a487057c13bdf3aba04361a00e6bcf2a7b32d0d15fe811d9026171a363708e03e4efc47bf3fc7cf2c9b1678ce5f6b02ccf69420e17fa13589ca90c0b4ffe5a72c255a19ceaaef00357d528c5e1", 0x72}, {&(0x7f0000000d00)="569c1a53fb36064e207202a1740c921a8ef90eedd5aeaa9b319d9c1a2f8abca53d57cec28861f7bfb8e90f0c6eada107ebc9b8c1638a37d2e9cf7689fc06a849f359cbb0413dc20fbfbe0ab9f8d4d73ae7f6ce5a2e86eca3bdea7d4d59970efe062db99a493cf410819ae7a1eda0ff9822c4063417409fc7ec6a318686a41502cee381f3640f9ff5b613ea7d39264084b1e729a7e419b3e600a51e64a80cbb4a7c6f6dba7610fa88c228b2bd493d79aadd45c4151171c622f3622d0ca889ced4db3a0c920840dea33f4e5cbc38234fba1b93ff150540bcc8f7a12319d4495f32fe73", 0xe2}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="3f22b37adb85807d3495db3e703acc5229f71880b842381c266bf3be8a15cc650638a4f8eb634908bba50fd2166e431acf14701e88fbf524f7e61e216d223f64e76e4e757c22dfd55a8cb4d314cd59417ae7849bb19d600971850371388d1f7c56e1036cd542b6a897c2e9281b43144fd147338e6d4c7581a00f54501c25cf920fddfbd542fd92dfa1e1046502928c681d07f6435508f1c71446a98e84585ade3a6f1b575b0bbe58c8aa0a65500024bb534ab1ac5d7ddc97f2856209c09a127e7a05bed5df2fea4c13d201842f066f", 0xcf}, {&(0x7f0000000f40)="0d3a8652ec7fa5e892fd19f2016d614523a897a7cb5125d0c16ca4714ed92383230e348cf636bcada70cc35b167e8a6938d749f6027e9204509904faf3b3598924606fdc325462a4cbf64b4a98bdcaf671e8020084dda32be7067c7ec06da967d9b364ba8ec53a8b776ebb2848457b40b7d48e17ffd914bb61111dea1408164efa346b2d4faf3e9d9bccce2726f6ea86f2d3990b10235e1321ee20289076517ea6e4743f250c45b115e4bd229235c2d4e8a79b0067037aaffd2affc7c1002fabf82b", 0xc2}, {&(0x7f00000010c0)="d03770a38cc6fa5245522c1365f0f70fdc91cd080d19bb2b44adb1f9175e0354b1b1935b4ba31210e47a5e03a98034b8c38ec1e09090ad3dd069f852186cee2df079cc6d4bc12317f1010764fbda85eb0e43ab1caa3eb8baeed792cba94dacaa9935a6c3257c446705ed0e015d357511a71de5558b2677421623a9cee0e304417eedffbfc7a9fe83b5db0c466d9ee8860f9a27badd68126c8c1ff8021a72d1d46017", 0xa2}, {&(0x7f0000001180)="475a2200bb062412d6b374aa583aa17caf77f13fe69e598c1dee4afd4d23fa5e0f82b9542bcac9d6b9ecaa83441adc0b079b7a50ed0207aa16d227368e52d2ac03ed8e97aff5779248be48e0b255842c52a23c614932f271a291245fe999d06b4c3e2ca86e7e21744d3fd4fd5deb44b85a203bcc2cd7c7c50351018161943f409a38378126b11dce5a14acec739abc768eb762e12cadec70f6f5b659d3e312fdb6603f4dad65cd9415ffcdcfd27d316fde4d8c34f8f84aba04cb4c0055ed3aa1039896f45df3ea26b40b0472443f0c1426a1ffbb4f9eba5eda110d042d80ef162639f6bd1ce27ead0fcd505551ef83ee", 0xf0}, {&(0x7f0000001280)="a378e946ccc08a682bf72d24d3d06980cdd142a199c13e23f930d91d626296344684df15599ecce93157004765d8c5f57ca91e76a3831f6cdc029dbdfe59033513dd502b38b2ec410c28101028569f5944465feb0aaa9bafcb6176594e2bc45a38ff88a9db4c", 0x66}, {&(0x7f0000001300)="6c2ac43f549ae7b8a201078188a16b391b4baaee55604743f769b28ca19dee139af9b812e0811625531fab61d113745f9483825f682aaf8900cc95920e7f21f19d897e1b9921ec24b5155488715df93009d00d11c477606ff8a6902d94b7d0043f750af86a3093df600c5d3bb213a8ddce5dfa535d2edd44a6570b482909bdb506a08b", 0x83}], 0x9, &(0x7f00000014c0)=[@tclass={{0x14, 0x29, 0x43, 0x10001}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @hopopts={{0x20, 0x29, 0x36, {0x58, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}], 0x78}}, {{&(0x7f0000001540)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000001580)="6567fdddb8112024bdc92038fcdc33e2ee783ac22b783c49795ddb7ffbc77b1f67a1a84dc4153e239b7f8fc180dcbd0ea673b646dace56fc8e2470d29fb85c15aaba710fb4730dc03f6c794c20332d7704bfae5ad103275bc9c133f94903b26630854df7c15e7e775fde505660d44722b5d1bdd5833657a886f71a95bce2cada3b594ff01fcfee191ade6d68b52df0832e6418a5fdbfb627d2608cb39409720d9d958c95af03f5c326655dd6f53050c2171a678818b22706c43d3049eca87fd70ac6", 0xc2}, {&(0x7f0000001680)="b7c5830310eb690c9048532e19929f190360f498e9eb9facee9911b6dafc227fb54b4ac2a0f94bdd1d98ac08263aa684ebc00fe4175bdcb4a18807c3b3a7d3d8f8fca4250e27f819ef485fb03380648031fb66f17e548964f40958b5bee2ba90fcbbdde33a9cff792ba09882c937dc9348f5537c394c79f3d8dd04737f38acc284eccd9f1144dcafa2561a1404bda62392c338f8f158bb5948443e9f5a5e079e18621366745de2c4ab7a0bb55b49a730c0", 0xb1}, {&(0x7f0000001740)="acb5d4d9ccfe0b610a6ba58d25375e2a0f9985cfd72e75c890b997331638a0a6bc7b5c7c5026a8950ee52fcb51de6289a3730013298df46d06bf3b1eafd08b5535e57fc892baceddb03b54adcec77c8e359b", 0x52}, {&(0x7f00000017c0)="788ce8cf3d4173aa5d55b097c8bb6e4b06524c9949257e7a10be304afc947d7a4b94651308d967250d5692eca9b601e3bd235b2e5dc0209d3f074a77aa307779ae98878717b0328e66f790c04be5c23bae83a4c3188bcc2b0fe086432aed353c08e1bc41493a12f098a7cb29a57457191fa0322893d3fee8ce319d4be9c0810a866972509a15c6e7fceb2747d6e2368b64bb8112e176b843b68102192a55978d2a33b7d91d8a80db62db7042f458a940cbe1ad5ea90ebd6ee382a7e26d36b197daa57e18504673e422c6829ae1393d2bedd92f39a06e0a41d6780d20099b8faac72b684468b732f2aca824bc9cbd04c690bd7abafe", 0xf5}, {&(0x7f00000018c0)="272f6aa68b45530fb4709f9b86be8a04774e73a9cb580c45cfb3e538c05d1061c478331e007de95fce34b7653e47e435a2e21ebcfe919eef87e929f2a8b8dc5de933bbf0c29ee751a6d53ec2b7757348a403457bc196d8f651b95f688bc967f7116a077b2a57760a8fdd9c3662328f2d20a7c972e3d6dbcf4ebfbbb864c9f05e3a5b47c5758391efc527c66ccf17bfbef7b248f9279d620911491c1a23", 0x9d}, {&(0x7f0000001980)="8c21f94e3fefd27eea15ee027661a8b3a9a7ff56a28f49a0e6e0f19a94ad863cb845160d416d844ad94dabe43a3c56b2c260bcf45b610f8e9c4e25b7c412cb5fb1c2d7c77790db934601ddece0c301ce7acf6a65db62e3d4e86686c74b06d09505131c819f61697ed14519c3612e4282c579db1f7b6512511a167a0b4013e4c262a15d0d2e9a2f3bba97449fd0f47348026b34af7a7ccd100864429d940998c3982b8692bd11bb2be3f5f0e92ec667ace93f68a16f8b31a22084857a1764443bc433", 0xc2}, {&(0x7f0000001a80)="3c8c51833a889da9fe73c54dc201cf3798a27c5ddc76e65be1ad9feb50f2c60660502764b3d2c491cbeffeb4cd48f17c76674f132156232defb5fec6412af22a9e1710a299d134ca560174b91ce24434022b81028ed8078e438db79430eb2943d8cb5282a2213bd5a79d1fe3846fbc819886a3ea0b763eb8392525e45faba6b5dc6c95f80f9ebfcc8afac74bd90aadaaad1b404fc714be639807b74f7ce894bb73ef0e079f", 0xa5}, {&(0x7f0000001b40)="cce13271765511d948a234607fa3c2d11f9c26056d5b49562cfdedf7992ecb52b4f80788e53c3f466bc61d14e9d1e50edb354ac00f8b3d4a0927943b70a8aa54c7fc456bbce72250c1d74be95dafee6bc8", 0x51}], 0x8, &(0x7f0000001c40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x80}}, @rthdr={{0xa8, 0x29, 0x39, {0x87, 0x12, 0x2, 0x1, 0x0, [@private1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xa}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x89, 0x8, 0x1, 0x7f, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @empty]}}}], 0x118}}], 0x5, 0x20000800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1ce6ffff1c00210c0000000016000000060002000800050000000000"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000031c0)={0x0, 0xffffffffffffffbe, 0x4ded}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000006600)={{r2}, 0x0, 0x10, @inherit={0x50, &(0x7f0000003140)=ANY=[@ANYBLOB="010000000000000001000000000000000700000000000000040000000000000016000000000000000400000000000000fafffffffffffffffdffffffffffffff770000000000000005000000dc530000"]}, @devid=r4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) fcntl$dupfd(r5, 0x406, r6) 13:18:31 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0x0, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1473.920544] FAULT_INJECTION: forcing a failure. [ 1473.920544] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.922213] CPU: 0 PID: 9660 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1473.923451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1473.924663] Call Trace: [ 1473.925140] dump_stack+0x107/0x167 [ 1473.925696] should_fail.cold+0x5/0xa [ 1473.926233] ? create_object.isra.0+0x3a/0xa20 [ 1473.926914] should_failslab+0x5/0x20 [ 1473.927463] kmem_cache_alloc+0x5b/0x310 [ 1473.928022] ? mark_held_locks+0x9e/0xe0 [ 1473.928617] create_object.isra.0+0x3a/0xa20 [ 1473.929222] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1473.929957] kmem_cache_alloc_bulk+0x168/0x320 [ 1473.930586] io_submit_sqes+0x6f76/0x85c0 [ 1473.931208] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1473.931946] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1473.932665] ? lock_downgrade+0x6d0/0x6d0 [ 1473.933278] ? find_held_lock+0x2c/0x110 [ 1473.933886] ? io_submit_sqes+0x85c0/0x85c0 [ 1473.934534] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1473.935271] ? wait_for_completion_io+0x270/0x270 [ 1473.935989] ? rcu_read_lock_any_held+0x75/0xa0 [ 1473.936680] ? vfs_write+0x354/0xa70 [ 1473.937238] ? fput_many+0x2f/0x1a0 [ 1473.937780] ? ksys_write+0x1a9/0x260 [ 1473.938347] ? __ia32_sys_read+0xb0/0xb0 [ 1473.938968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1473.939747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1473.940519] do_syscall_64+0x33/0x40 [ 1473.941073] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1473.941911] RIP: 0033:0x7f94eea4db19 [ 1473.942467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1473.945222] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1473.946395] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1473.947533] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1473.948596] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1473.949658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.950720] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 13:18:31 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1a5980, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:18:31 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 13:18:31 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0406618) 13:18:31 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1474.002929] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1474.004736] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1474.005918] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1474.007066] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1474.008329] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 1474.049656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.050957] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.052590] Buffer I/O error on dev sr0, logical block 0, async page read [ 1474.053768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.054613] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 0 [ 1474.056150] Buffer I/O error on dev sr0, logical block 1, async page read [ 1474.057214] Buffer I/O error on dev sr0, logical block 2, async page read [ 1474.058283] Buffer I/O error on dev sr0, logical block 3, async page read [ 1474.059356] Buffer I/O error on dev sr0, logical block 4, async page read [ 1474.060421] Buffer I/O error on dev sr0, logical block 5, async page read [ 1474.061487] Buffer I/O error on dev sr0, logical block 6, async page read [ 1474.062572] Buffer I/O error on dev sr0, logical block 7, async page read [ 1474.106018] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1474.135302] FAULT_INJECTION: forcing a failure. [ 1474.135302] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.137141] CPU: 0 PID: 9670 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1474.138278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.139544] Call Trace: [ 1474.139949] dump_stack+0x107/0x167 [ 1474.140503] should_fail.cold+0x5/0xa [ 1474.141082] ? xas_alloc+0x336/0x440 [ 1474.141652] should_failslab+0x5/0x20 [ 1474.142231] kmem_cache_alloc+0x5b/0x310 [ 1474.142858] xas_alloc+0x336/0x440 [ 1474.143416] xas_create+0x34a/0x10d0 [ 1474.143988] ? kernel_text_address+0xf2/0x120 [ 1474.144670] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1474.145467] xas_store+0x8c/0x1c40 [ 1474.146019] __xa_store+0x164/0x2d0 [ 1474.146571] ? xa_delete_node+0x280/0x280 [ 1474.147228] ? trace_hardirqs_on+0x5b/0x180 [ 1474.147889] xa_store+0x31/0x50 [ 1474.148393] __io_uring_add_tctx_node+0x1cf/0x520 [ 1474.149129] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1474.149930] __do_sys_io_uring_enter+0x14de/0x1920 [ 1474.150681] ? io_submit_sqes+0x85c0/0x85c0 [ 1474.151347] ? recalibrate_cpu_khz+0x10/0x10 [ 1474.152012] ? ktime_get+0x158/0x1f0 [ 1474.152578] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1474.153230] ? clockevents_program_event+0x131/0x360 [ 1474.154001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1474.154800] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1474.155615] ? trace_hardirqs_on+0x5b/0x180 [ 1474.156270] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1474.157100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1474.157887] do_syscall_64+0x33/0x40 [ 1474.158451] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1474.159248] RIP: 0033:0x7fd021856b19 [ 1474.159816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.162610] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1474.163782] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1474.164871] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1474.165955] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.167053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.168134] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1474.183646] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1474.185118] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1474.186145] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1474.187270] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1474.188427] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1474.202808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.203685] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.205210] Buffer I/O error on dev sr0, logical block 0, async page read [ 1474.212910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.214028] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.215577] Buffer I/O error on dev sr0, logical block 1, async page read [ 1474.216884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.217716] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.219274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.220093] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.221879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.222695] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.224268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.225112] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1474.226690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.227613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.346366] FAULT_INJECTION: forcing a failure. [ 1474.346366] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.348669] CPU: 1 PID: 9681 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1474.349255] FAULT_INJECTION: forcing a failure. [ 1474.349255] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.349992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.349998] Call Trace: [ 1474.350018] dump_stack+0x107/0x167 [ 1474.350039] should_fail.cold+0x5/0xa [ 1474.350058] ? create_object.isra.0+0x3a/0xa20 [ 1474.350077] should_failslab+0x5/0x20 [ 1474.350093] kmem_cache_alloc+0x5b/0x310 [ 1474.350111] ? mark_held_locks+0x9e/0xe0 [ 1474.350130] create_object.isra.0+0x3a/0xa20 [ 1474.350152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1474.360011] kmem_cache_alloc_bulk+0x168/0x320 [ 1474.360888] io_submit_sqes+0x6f76/0x85c0 [ 1474.361681] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1474.362623] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1474.363568] ? lock_downgrade+0x6d0/0x6d0 [ 1474.364349] ? find_held_lock+0x2c/0x110 [ 1474.365127] ? io_submit_sqes+0x85c0/0x85c0 [ 1474.365953] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1474.366880] ? wait_for_completion_io+0x270/0x270 [ 1474.367796] ? rcu_read_lock_any_held+0x75/0xa0 [ 1474.368656] ? vfs_write+0x354/0xa70 [ 1474.369371] ? fput_many+0x2f/0x1a0 [ 1474.370067] ? ksys_write+0x1a9/0x260 [ 1474.370777] ? __ia32_sys_read+0xb0/0xb0 [ 1474.371579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1474.372549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1474.373556] do_syscall_64+0x33/0x40 [ 1474.374244] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1474.375238] RIP: 0033:0x7f94eea4db19 [ 1474.375931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.379326] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1474.380731] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1474.382048] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1474.383385] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.384712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.386037] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1474.387394] CPU: 0 PID: 9678 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1474.388434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1474.389679] Call Trace: [ 1474.390087] dump_stack+0x107/0x167 [ 1474.390628] should_fail.cold+0x5/0xa [ 1474.391203] ? create_object.isra.0+0x3a/0xa20 [ 1474.391889] should_failslab+0x5/0x20 [ 1474.392465] kmem_cache_alloc+0x5b/0x310 [ 1474.393075] ? mark_held_locks+0x9e/0xe0 [ 1474.393683] create_object.isra.0+0x3a/0xa20 [ 1474.394337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1474.395111] kmem_cache_alloc_bulk+0x168/0x320 [ 1474.395803] io_submit_sqes+0x6f76/0x85c0 [ 1474.396446] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1474.397203] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1474.397943] ? lock_downgrade+0x6d0/0x6d0 [ 1474.398553] ? find_held_lock+0x2c/0x110 [ 1474.399190] ? io_submit_sqes+0x85c0/0x85c0 [ 1474.399844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1474.400575] ? wait_for_completion_io+0x270/0x270 [ 1474.401290] ? rcu_read_lock_any_held+0x75/0xa0 [ 1474.401989] ? vfs_write+0x354/0xa70 [ 1474.402549] ? fput_many+0x2f/0x1a0 [ 1474.403101] ? ksys_write+0x1a9/0x260 [ 1474.403672] ? __ia32_sys_read+0xb0/0xb0 [ 1474.404297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1474.405097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1474.405883] do_syscall_64+0x33/0x40 [ 1474.406437] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1474.407214] RIP: 0033:0x7f24549c7b19 [ 1474.407778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1474.410575] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1474.411741] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1474.412824] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1474.413903] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1474.414991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1474.416073] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:18:45 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 13:18:45 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./mnt\x00', &(0x7f0000000140)) mount(0x0, &(0x7f0000000040)='./mnt\x00', 0x0, 0x20000, 0x0) mount$9p_unix(&(0x7f0000000240)='./mnt\x00', &(0x7f0000000300)='./mnt\x00', 0x0, 0x3101082, 0x0) 13:18:45 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 13:18:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0406619) 13:18:45 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0x0, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:18:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="075c27422f9073adc446e1052a47465e5aa569586ba242e7ff711774e081d29a55127d80d61e97af300f535d86dc828828f4dbeacd4f0000cb38c2f6e7da8ba729e7e10199d7d7c1033fa2117ac45f4591e7859c88a07b25629a1d917c1019eb581a831ad2efa3cd520b7f34677f82dd00c0d1a3129bb7c8fb8efe2988a36f4d3e13388a3d8114a7ab48cdf3464f0bb19484c61d4655681c8575c779fcf232ca3b684b5e6139f5df52c8864fa2114c0875cbb612df868bfd1cc3e7c746b5c733f8b91bf177bc63d7f89dc923b88fc887d234f2f3268629afb6aeaa04304fcd", @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000000000000c0005000000000000000000"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, 0x0}, 0x10) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x70, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xffffffffffffff15}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 13:18:45 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x8010, r1, 0x49f5c000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="c1e17be6d999841e", 0x8}, {&(0x7f0000000080)="66bec1ee7d1dde72bfed6a2c073555052c943e6df7c86940d0de9623795cd5d69142a479739f289d2ff6262522fc50961b6b55b746345bbaa4fc5bc14b9137eabbea1f51d895ccda6e1b7cef80cd62393f03eedf9c6a75699f6bad6870253b0793e3b74c1138fbcdcf4535759894ed0a962f3e4a64ffbe4c548dfe6b556d", 0x7e}, {&(0x7f0000000100)="eac9f4bf2dc7121c5aa07acf6153863db48797762c0366a3e9eb16eefb00b1cc8365626c47302abcb0d06e99f0e91e23b02823ce5a374b4cfcc3a0c03a7a9afca8dcffd53ccd98841bc2d80f9b05ce22efd120c3283101a7063f89141734967661bec606eb4d47f1540e0663abe83858202b8f0d405f3ed7b395588150b85f092817f2bd4aede1b72970694d217925c05b04304732df4ac5ffb8d133a13cbf053c502ebdad297ee4a75e3a0e8698104bbee3586abf651f2dc312", 0xba}], 0x3) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x757b, @remote, 0x1}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:18:45 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1488.042555] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1488.066124] FAULT_INJECTION: forcing a failure. [ 1488.066124] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.067818] CPU: 1 PID: 9701 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1488.068907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.070139] Call Trace: [ 1488.070564] dump_stack+0x107/0x167 [ 1488.071116] should_fail.cold+0x5/0xa [ 1488.071674] ? create_object.isra.0+0x3a/0xa20 [ 1488.072347] ? create_object.isra.0+0x3a/0xa20 [ 1488.073076] should_failslab+0x5/0x20 [ 1488.073639] kmem_cache_alloc+0x5b/0x310 [ 1488.074296] create_object.isra.0+0x3a/0xa20 [ 1488.074975] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.075684] kmem_cache_alloc_bulk+0x168/0x320 [ 1488.076244] io_submit_sqes+0x6f76/0x85c0 [ 1488.076798] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1488.077405] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1488.078030] ? lock_downgrade+0x6d0/0x6d0 [ 1488.078562] ? find_held_lock+0x2c/0x110 [ 1488.079094] ? io_submit_sqes+0x85c0/0x85c0 [ 1488.079626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.080257] ? wait_for_completion_io+0x270/0x270 [ 1488.080830] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.081438] ? vfs_write+0x354/0xa70 [ 1488.081891] ? fput_many+0x2f/0x1a0 [ 1488.082366] ? ksys_write+0x1a9/0x260 [ 1488.082828] ? __ia32_sys_read+0xb0/0xb0 [ 1488.083360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.083990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.084639] do_syscall_64+0x33/0x40 [ 1488.085080] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.085752] RIP: 0033:0x7fd021856b19 [ 1488.086197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.088551] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1488.089521] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1488.090367] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1488.091216] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.092136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.092988] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 [ 1488.112451] FAULT_INJECTION: forcing a failure. [ 1488.112451] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.115474] CPU: 0 PID: 9719 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1488.116991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.118953] Call Trace: [ 1488.119546] dump_stack+0x107/0x167 [ 1488.120363] should_fail.cold+0x5/0xa [ 1488.121217] ? create_object.isra.0+0x3a/0xa20 [ 1488.122383] should_failslab+0x5/0x20 [ 1488.123244] kmem_cache_alloc+0x5b/0x310 [ 1488.124276] ? mark_held_locks+0x9e/0xe0 [ 1488.125176] create_object.isra.0+0x3a/0xa20 [ 1488.126152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.127463] kmem_cache_alloc+0x159/0x310 [ 1488.128385] xas_alloc+0x336/0x440 [ 1488.129290] xas_create+0x34a/0x10d0 [ 1488.130122] ? kernel_text_address+0xf2/0x120 [ 1488.131269] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1488.132428] xas_store+0x8c/0x1c40 [ 1488.133229] __xa_store+0x164/0x2d0 [ 1488.134151] ? xa_delete_node+0x280/0x280 [ 1488.135052] ? trace_hardirqs_on+0x5b/0x180 [ 1488.136145] xa_store+0x31/0x50 [ 1488.136841] __io_uring_add_tctx_node+0x1cf/0x520 [ 1488.138008] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1488.139128] __do_sys_io_uring_enter+0x14de/0x1920 [ 1488.140157] ? lock_downgrade+0x6d0/0x6d0 [ 1488.141014] ? find_held_lock+0x2c/0x110 [ 1488.141863] ? io_submit_sqes+0x85c0/0x85c0 [ 1488.142824] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.143957] ? wait_for_completion_io+0x270/0x270 [ 1488.145101] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.146197] ? vfs_write+0x354/0xa70 [ 1488.147106] ? fput_many+0x2f/0x1a0 [ 1488.147969] ? ksys_write+0x1a9/0x260 [ 1488.148868] ? __ia32_sys_read+0xb0/0xb0 [ 1488.149838] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.151090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.152217] do_syscall_64+0x33/0x40 [ 1488.153014] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.154101] RIP: 0033:0x7f94eea4db19 [ 1488.154892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.158803] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1488.160429] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1488.162012] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1488.163724] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.165407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.167102] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:18:46 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0x0, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1488.181286] FAULT_INJECTION: forcing a failure. [ 1488.181286] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.184179] CPU: 0 PID: 9706 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1488.185607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.187610] Call Trace: [ 1488.188251] dump_stack+0x107/0x167 [ 1488.189137] should_fail.cold+0x5/0xa [ 1488.190059] ? create_object.isra.0+0x3a/0xa20 [ 1488.191175] should_failslab+0x5/0x20 [ 1488.192097] kmem_cache_alloc+0x5b/0x310 [ 1488.193076] ? mark_held_locks+0x9e/0xe0 [ 1488.194062] create_object.isra.0+0x3a/0xa20 [ 1488.195151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.196380] kmem_cache_alloc_bulk+0x168/0x320 [ 1488.197504] io_submit_sqes+0x6f76/0x85c0 [ 1488.198537] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1488.199758] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1488.200927] ? lock_downgrade+0x6d0/0x6d0 [ 1488.201927] ? find_held_lock+0x2c/0x110 [ 1488.202913] ? io_submit_sqes+0x85c0/0x85c0 [ 1488.203816] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1488.204985] ? wait_for_completion_io+0x270/0x270 [ 1488.205968] ? rcu_read_lock_any_held+0x75/0xa0 [ 1488.207102] ? vfs_write+0x354/0xa70 [ 1488.207859] ? fput_many+0x2f/0x1a0 [ 1488.208619] ? ksys_write+0x1a9/0x260 [ 1488.209374] ? __ia32_sys_read+0xb0/0xb0 [ 1488.210188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.211240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.212287] do_syscall_64+0x33/0x40 [ 1488.213026] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.214040] RIP: 0033:0x7f24549c7b19 [ 1488.214780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.218427] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1488.219942] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1488.221498] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1488.223265] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.224849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.226440] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:18:46 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x98) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)) 13:18:46 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0506617) 13:18:46 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 13:18:46 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x5, 0x2, 0x7, 0x0, 0x8001, 0x1802, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x202, 0x4, 0x7591, 0x7, 0x1ff, 0x3, 0x1, 0x0, 0x3fffc00, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r3, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000002c0)) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r1) [ 1488.547196] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1488.551318] FAULT_INJECTION: forcing a failure. [ 1488.551318] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.554266] CPU: 0 PID: 9728 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1488.555943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.557587] Call Trace: [ 1488.558227] dump_stack+0x107/0x167 [ 1488.558969] should_fail.cold+0x5/0xa [ 1488.559934] ? create_object.isra.0+0x3a/0xa20 [ 1488.560917] should_failslab+0x5/0x20 [ 1488.561762] kmem_cache_alloc+0x5b/0x310 [ 1488.562627] ? mark_held_locks+0x9e/0xe0 [ 1488.563560] create_object.isra.0+0x3a/0xa20 [ 1488.564539] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.565670] kmem_cache_alloc_bulk+0x168/0x320 [ 1488.566690] io_submit_sqes+0x6f76/0x85c0 [ 1488.567651] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1488.568761] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1488.569842] ? io_submit_sqes+0x85c0/0x85c0 [ 1488.570740] ? recalibrate_cpu_khz+0x10/0x10 [ 1488.571629] ? ktime_get+0x158/0x1f0 [ 1488.572377] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1488.573237] ? clockevents_program_event+0x131/0x360 [ 1488.574249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.575309] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1488.576384] ? trace_hardirqs_on+0x5b/0x180 [ 1488.577241] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1488.578326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1488.579388] do_syscall_64+0x33/0x40 [ 1488.580216] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1488.581353] RIP: 0033:0x7fd021856b19 [ 1488.582182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.586274] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1488.587984] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1488.589666] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1488.591361] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1488.593037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.594704] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 13:19:01 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 13:19:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$FIONCLEX(r3, 0x5450) 13:19:01 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 13:19:01 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000080), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)=""/243, 0xf3}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f00000002c0)={0x80, 0x0, 0xe, 0x7f}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:19:01 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) faccessat2(r1, &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x1200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r4) write(r3, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) sendfile(r1, r2, 0x0, 0x20d315) r6 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000004c0)=0x2362, 0x4) sendto(r6, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x408000, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000002c0)) 13:19:01 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc080661a) 13:19:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:01 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1503.342512] FAULT_INJECTION: forcing a failure. [ 1503.342512] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.343894] CPU: 1 PID: 9759 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1503.344712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.345660] Call Trace: [ 1503.345977] dump_stack+0x107/0x167 [ 1503.346401] should_fail.cold+0x5/0xa [ 1503.346839] ? create_object.isra.0+0x3a/0xa20 [ 1503.347380] should_failslab+0x5/0x20 [ 1503.347824] kmem_cache_alloc+0x5b/0x310 [ 1503.348297] ? mark_held_locks+0x9e/0xe0 [ 1503.348760] create_object.isra.0+0x3a/0xa20 [ 1503.349265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.349869] kmem_cache_alloc_bulk+0x168/0x320 [ 1503.350407] io_submit_sqes+0x6f76/0x85c0 [ 1503.350891] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1503.351469] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1503.352013] ? lock_downgrade+0x6d0/0x6d0 [ 1503.352491] ? find_held_lock+0x2c/0x110 [ 1503.352947] ? io_submit_sqes+0x85c0/0x85c0 [ 1503.353435] ? __mutex_unlock_slowpath+0xe1/0x600 13:19:01 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000)=0xfff, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x1, 0x0, &(0x7f00000002c0)) openat(r3, &(0x7f0000000080)='./file0\x00', 0x80, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 1503.353984] ? wait_for_completion_io+0x270/0x270 [ 1503.354677] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.355206] ? vfs_write+0x354/0xa70 [ 1503.355621] ? fput_many+0x2f/0x1a0 [ 1503.356033] ? ksys_write+0x1a9/0x260 [ 1503.356463] ? __ia32_sys_read+0xb0/0xb0 [ 1503.356921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.357497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.358077] do_syscall_64+0x33/0x40 [ 1503.358499] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1503.359072] RIP: 0033:0x7f94eea4db19 [ 1503.359492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.361532] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.362387] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1503.363198] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1503.363993] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.364776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.365575] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1503.371407] FAULT_INJECTION: forcing a failure. [ 1503.371407] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.372701] CPU: 1 PID: 9761 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1503.373176] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1503.373454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.373466] Call Trace: [ 1503.376522] dump_stack+0x107/0x167 [ 1503.376928] should_fail.cold+0x5/0xa [ 1503.377348] ? create_object.isra.0+0x3a/0xa20 [ 1503.377850] should_failslab+0x5/0x20 [ 1503.378272] kmem_cache_alloc+0x5b/0x310 [ 1503.378718] ? mark_held_locks+0x9e/0xe0 [ 1503.379175] create_object.isra.0+0x3a/0xa20 [ 1503.379667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.380226] kmem_cache_alloc_bulk+0x168/0x320 [ 1503.380736] io_submit_sqes+0x6f76/0x85c0 [ 1503.381213] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1503.381764] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1503.382301] ? lock_downgrade+0x6d0/0x6d0 [ 1503.382753] ? find_held_lock+0x2c/0x110 [ 1503.383213] ? io_submit_sqes+0x85c0/0x85c0 [ 1503.383699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.384243] ? wait_for_completion_io+0x270/0x270 [ 1503.384778] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.385298] ? vfs_write+0x354/0xa70 [ 1503.385714] ? fput_many+0x2f/0x1a0 [ 1503.386123] ? ksys_write+0x1a9/0x260 [ 1503.386549] ? __ia32_sys_read+0xb0/0xb0 [ 1503.387003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.387607] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.388181] do_syscall_64+0x33/0x40 [ 1503.388597] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1503.389177] RIP: 0033:0x7f24549c7b19 [ 1503.389602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.391611] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.392444] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1503.393238] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1503.394012] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.394790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.395574] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1503.402249] FAULT_INJECTION: forcing a failure. [ 1503.402249] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.403548] CPU: 1 PID: 9774 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1503.404296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.405205] Call Trace: [ 1503.405494] dump_stack+0x107/0x167 [ 1503.405906] should_fail.cold+0x5/0xa [ 1503.406324] ? ___slab_alloc+0x155/0x700 [ 1503.406779] ? create_object.isra.0+0x3a/0xa20 [ 1503.407303] should_failslab+0x5/0x20 [ 1503.407723] kmem_cache_alloc+0x5b/0x310 [ 1503.408186] create_object.isra.0+0x3a/0xa20 [ 1503.408670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1503.409225] kmem_cache_alloc+0x159/0x310 [ 1503.409687] xas_alloc+0x336/0x440 [ 1503.410075] xas_create+0x34a/0x10d0 [ 1503.410484] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1503.411041] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1503.411611] xas_store+0x8c/0x1c40 [ 1503.412016] __xa_store+0x164/0x2d0 [ 1503.412414] ? xa_delete_node+0x280/0x280 [ 1503.412875] ? trace_hardirqs_on+0x5b/0x180 [ 1503.413355] xa_store+0x31/0x50 [ 1503.413721] __io_uring_add_tctx_node+0x1cf/0x520 [ 1503.414243] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1503.414831] __do_sys_io_uring_enter+0x14de/0x1920 [ 1503.415387] ? lock_downgrade+0x6d0/0x6d0 [ 1503.415831] ? find_held_lock+0x2c/0x110 [ 1503.416272] ? io_submit_sqes+0x85c0/0x85c0 [ 1503.416751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1503.417280] ? wait_for_completion_io+0x270/0x270 [ 1503.417807] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.418308] ? vfs_write+0x354/0xa70 [ 1503.418713] ? fput_many+0x2f/0x1a0 [ 1503.419117] ? ksys_write+0x1a9/0x260 [ 1503.419540] ? __ia32_sys_read+0xb0/0xb0 [ 1503.419994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.420561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.421131] do_syscall_64+0x33/0x40 [ 1503.421532] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1503.422096] RIP: 0033:0x7fd021856b19 [ 1503.422501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.424540] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1503.425358] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1503.426138] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1503.426901] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.427668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.428435] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:19:01 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0xc0c0583b) [ 1503.468719] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:19:01 executing program 0: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="e6c0f7885180", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="00000e6000", @rand_addr=0xe, @multicast, @remote}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @void, @x25={0x3, 0x9c, 0xfb, "36e393b12adbf38b5b107fa77efd17cfe05b103ff2d076ea7b60e410facf3c3d77f0d497ff222c1cdeb43d429e3bdd5a438cbedd1945057453915f5b77edc71401d665cccb38ccdaca250c6ca9225620672b18802ff48a8e0373a9af8c77adb4a3e2c99616b3f74206416686a0e45f63d0efa2801bdf43c76fd4513fd89b75b60b283ded4bf0ecd05284c1a899168dca9d9e1c69b13b7d9c848edba422fff8ef60a3a739e03e920d63e5de417e1e7c27c52ab165efec4ccf8a944571cae011f8d89f309ab1eaae834def7bd3f8d74f86fbc33b3a28531a2135683b45721c996554378437d70603d9a523dcd244ad0c7f891a57d802e7"}}, 0xf9) 13:19:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:01 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000004cc0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001d00210c00000000fbdbdf250100020058e1f427ac228a56bc00c90f3fe66cd20f0db019fd3553e2c0178ab966c0f8ac7a2a330419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32fd06d2267d09aae07f6db51a7ddcfe39e42a36bda4a8694badc4f48b0754e2a90b7deddf481d2e832ae0fcb0019f7cc"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r2) getsockopt$inet6_buf(r2, 0x29, 0x45, &(0x7f00000003c0)=""/90, &(0x7f0000000300)=0x5a) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x24}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0xcc) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r3, 0xffffffffffffffff) [ 1503.887288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.912698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1503.943270] syz-executor.2 (9760) used greatest stack depth: 23416 bytes left [ 1503.978535] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:19:14 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 13:19:14 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r1 = dup3(0xffffffffffffffff, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file1\x00'}) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) dup(r4) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000000)=0x5a6, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) openat(r1, &(0x7f0000000080)='./file1\x00', 0x10002, 0x162) 13:19:14 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:14 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000884}, 0x20000000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xdbd, 0x58}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000800)="260910149421fadbbdb18d07b802f5c8abc2ef36e5dc982a15e8a3423cceed06bdc7c0171382388e502d0fa18f9f37f700ad43f3b227a3d0715ce4a3a57558f3ce696eebeabb227bf68b1cc011e58dc521781f28011c4a61d7ff1b43d62bbe5ed29fe0d1a884475bb9c213b22391a3a401ca1e5cc8abcaacbb0f0c496c82279cd82eb4a3b8073fe36d0fe9878540fd455d7fab0e9b2e7627fc71d8a9b3a66a649e2daf06a1d34369a1c941489a93408eea0acb076c5015e4af95ba7e62a2a51ff3a3ae082cb00efe6a8fe6404d85fed9e83ca1544724888e7e52a1152cba3514a9f39eee2e54cf3816d577382d83b8d3a9ea8d18b7c3817721f7301f121a63a8231689a02a25c91106b5993d9a6c119fcfa739a139bd67aaaaae34a21133477dd4cfbbbd41e1b8b38187908b9ae41d7bc0c7e34982ff101b3c4561f1bd308867ec66536d1de9cb756150af6245bdf2c5e1908d310905448dfd4fcc020c997b55e565b1045f0f2156605ebfdb6ddda48f6700d17f2bba388ed6473d14045291b7bbf9982dfb3fb29b4fb134e8d8c377cc9c9cace9d16d69e9c9d6c975b36aaf1eb25b481178b55c5e71e7f2eb5c770ebdd2e5a90804ab7e9d9b8b18abe73f8929ec231e62526b0212253038a5e9b9a92e76e9aa6d51fbab7a79275c3f957978aae04b1f3f582c05d30ec7efdb0730a560e0af8dc7796859f82ae83f62a4f64f818ad90f8704284868a2acd6bddc9b2451d24f3541688462c53e1c236f24b9b09cdd577fb4a0b10497b78fa707b8c0baf374f0cc482dc9be2ff12d5cc696bb871695babdda2a9003eaabb16bf10e864a7dc1618cfc10d48575e5d15d217ba453e8488f26d1b0077d3334a99b36af64f827a180f266cce91778724214fb2dd19e098f70b623bae5d2c9f964b8d4c3ed9c5f9f0d86ee0e1c0a3a9cef0b53b903e85dad9277968fe109f2d8e6bf1542ae39f53274cfd788fc3f43907732b830d1d185083aaca8ad48bcf754c37594fa98353690a08aef4331c7c9e83fe4cc26b917fe6feb6b97592b2587c28bb5bde3dc480dfb26e02b6f6f75d70837769a70334aeb7b9433c97e3ea8bfa3bec5479b6e752d8718b4b43647d23193170b6299fd390ef189898c0cf14390bd389bdeefc4aa99fcaa15b5292a94095d4b1bdac562b359e2a3449c80449f36681eb1149a40a5142f4d7d3e514b88340abeccce9a329cd31eeb86560d168a1fb3803d6fc04b4b8c8a814d8e7c5ab5b1d546dde2b38333b4e5e362aa194e70a8030c273177ed9981521270c73ff72b33bab795403cb054ef7b67dd4eb73dd5f29de2adfd199b94768eb798bb238c30d5f5e47f3a6a2814ebf99183f02de85bff1efd54d64798d1a30434f4e4378490f90b5916074bb692cd648be03d8b92e2fbb2c0025b98c255c4e74158d4802301effd76f665dc9537911e74db3d89e15667c265af85584319f3f47f40b26719cac06b8afe4e7088919390da83b6c75c770ad67cd1b49010e7e47c438434068618a0d053b21389cf10cad955d61b8937f283e5657bc13aa61241205b0b9e95aa2cde980d1401962419b59b3375c6a6f4f85ff2e659f01f6c81d1148670e91b4b33ae8ed83aee0b9da2cb412bceda3f81f16c407d4d95a26d76a8a5b22b9073d77e61d560d3beecfe032e3b10ec9a5842e1d6e525a8a3c7862e165159b80726e9e5528bfa0329a16c83dc05b58949c2a0c0657f901a2e9e6350b602ebf850d94560cd4133f982a8e5a16113bb57afca094d8a5ec32ddaf5e81531dbea7aee5995cc7eebbd14bc5f811f02565fd7e8b58915dad5bc8b3814158a6905ee4b6339c925e6dff51ddf562ac8212ea027eefb23101e84e11ff9e7a5bf22341bcac6e78e265f4abb49f86da70e57cfe7dadd602c0edb2b861195f0d2dd0cf0b980468afe0efbbb5b00ecf485928dd554258adc3d6acf9d5e54b06f0b52a1cd4fe8ac0d78268b76fd48f3ed597b735b9e137dda5fdcf1e72ab62ab2b5379f7557e1f705d48a4fb85c5713f856c6594be94eacd4120ee68087746dfe9213327bb94e3ee5e077ec95b1f442d564594c02d7b0c61eb10898d3c969c474edf80e5e524405a4785195ab5c73cdb1d218359ace95119f4aed64da6964706f4167f473848297a6f53d0842f3046a8a4ad8e2edd33cdd5dc64f696099bb2d57f3f7aeb9ee1bfb74e65f0abf55f6f660290184fb89df794c94c844e434cc657828cdcd5623845f728b1d1b779ae86baf797324ad14585558ca8ad8204d17e2bbc36bf69828bb5b01621b0b5121eced2b2763fc80ccf60a28e166d1616ae058300d79860c16068da3a7fed65a9badc439019fe27c5006b0088483fd0847b2d803d53df7b6dfd31a04f2ffad44993e40fac27f11f44c726b2ef8576fb4331e92ba0a97e7b55788e35701f1a7f395880b921747af66f17ff433dd3f69d2eea214af57356ed272c1cb12515f96700db7746216b8393a2c2d848796e49213f9f2163b287abde7c65e09e91dacc3c4ae27516f7370a304601edbd988cc232eeb96cbf1b860293ca6da62c64219da6464c25c9adbd0fd644237de9b354c00001512f13c61743e4a14b10d403c4755360b77ee8a41f33cf5b505108a80979626c084e3cf9fd5620a6704131153f633f2a16ed569f980e439", 0x761}], 0x1) io_setup(0x9, &(0x7f00000001c0)=0x0) io_submit(r5, 0x0, &(0x7f0000000200)) 13:19:14 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000001000000180000003f916887ff881b2f6cabd22e853f532a882f54070cfd2cda38fefb9566588c919d1f9efcdff6f5eeeee071bf910cecfa8ac0a41e884a138e3bc176b5e117a1bf7b781a60ee7e8bd26eea3f61308ba8e35dc3d47b5c7385051f209cf63952a6f15334cfb35f0c29e073b166d9345a3a62c12fb41cbe8569b964e9cca211fa101b8efa8ab7e79b2248b079cb128fcb1bf2333f29c13f73b2b1a2b9f235fb2eab2912dd6877879af4859ff034256dd02cac782ffdb48419b1c74db815b7db22dae129c385dde8a55fbc610d596f421cd84576fb3f143a5e46e6933d597ffcb8f987", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file1\x00']) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r2}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/140, 0x8c}], 0x5, &(0x7f0000000840)=""/151, 0x97}, 0x0, 0x40010000, 0x0, {0x1, r2}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x3, 0x6, 0x0, 0x0, 0x18, 0x0, {0x3, r2}}, 0x3e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 13:19:14 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 13:19:14 executing program 0: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/93, 0x5d}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/121, 0x79}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) close(0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) memfd_create(&(0x7f0000000100)='^@!#:-\x00', 0x7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040140}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a9b3803a", @ANYRES16=r1, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c856559530600000000000000551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) fsync(0xffffffffffffffff) 13:19:14 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1517.148186] FAULT_INJECTION: forcing a failure. [ 1517.148186] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.151027] CPU: 1 PID: 9809 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1517.152120] FAULT_INJECTION: forcing a failure. [ 1517.152120] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.152429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.152442] Call Trace: [ 1517.156878] dump_stack+0x107/0x167 [ 1517.157621] should_fail.cold+0x5/0xa [ 1517.158406] should_failslab+0x5/0x20 [ 1517.159174] kmem_cache_alloc_bulk+0x4b/0x320 [ 1517.160114] io_submit_sqes+0x6f76/0x85c0 [ 1517.160997] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1517.162026] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1517.163026] ? lock_downgrade+0x6d0/0x6d0 [ 1517.163901] ? find_held_lock+0x2c/0x110 [ 1517.164740] ? io_submit_sqes+0x85c0/0x85c0 [ 1517.165633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.166610] ? wait_for_completion_io+0x270/0x270 [ 1517.167604] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.168561] ? vfs_write+0x354/0xa70 [ 1517.169335] ? fput_many+0x2f/0x1a0 [ 1517.170088] ? ksys_write+0x1a9/0x260 [ 1517.170854] ? __ia32_sys_read+0xb0/0xb0 [ 1517.171668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.172696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.173729] do_syscall_64+0x33/0x40 [ 1517.174479] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1517.175542] RIP: 0033:0x7f24549c7b19 [ 1517.176299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.180082] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.181656] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1517.183119] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.184595] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.186063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.187542] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1517.189028] CPU: 0 PID: 9820 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1517.190515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.192216] Call Trace: [ 1517.192746] dump_stack+0x107/0x167 [ 1517.193488] should_fail.cold+0x5/0xa [ 1517.194267] ? create_object.isra.0+0x3a/0xa20 [ 1517.195211] should_failslab+0x5/0x20 [ 1517.195987] kmem_cache_alloc+0x5b/0x310 [ 1517.196814] create_object.isra.0+0x3a/0xa20 [ 1517.197708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.198745] kmem_cache_alloc+0x159/0x310 [ 1517.199612] xas_alloc+0x336/0x440 [ 1517.200334] xas_create+0x34a/0x10d0 [ 1517.201096] ? kernel_text_address+0xf2/0x120 [ 1517.202004] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1517.203065] xas_store+0x8c/0x1c40 [ 1517.203807] __xa_store+0x164/0x2d0 [ 1517.204551] ? xa_delete_node+0x280/0x280 [ 1517.205399] ? trace_hardirqs_on+0x5b/0x180 [ 1517.206281] xa_store+0x31/0x50 [ 1517.206951] __io_uring_add_tctx_node+0x1cf/0x520 [ 1517.207947] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1517.209024] __do_sys_io_uring_enter+0x14de/0x1920 [ 1517.210024] ? lock_downgrade+0x6d0/0x6d0 [ 1517.210866] ? find_held_lock+0x2c/0x110 [ 1517.211702] ? io_submit_sqes+0x85c0/0x85c0 [ 1517.212585] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.213569] ? wait_for_completion_io+0x270/0x270 [ 1517.214553] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.215512] ? vfs_write+0x354/0xa70 [ 1517.216276] ? fput_many+0x2f/0x1a0 [ 1517.217015] ? ksys_write+0x1a9/0x260 [ 1517.217787] ? __ia32_sys_read+0xb0/0xb0 [ 1517.218616] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.219692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.220754] do_syscall_64+0x33/0x40 [ 1517.221509] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1517.222547] RIP: 0033:0x7f94eea4db19 [ 1517.223311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.227043] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.228600] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1517.230042] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.231493] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.232934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.234377] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:19:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1517.266020] FAULT_INJECTION: forcing a failure. [ 1517.266020] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.269069] CPU: 0 PID: 9811 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1517.270576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.272289] Call Trace: [ 1517.272825] dump_stack+0x107/0x167 [ 1517.273586] should_fail.cold+0x5/0xa [ 1517.274356] ? create_object.isra.0+0x3a/0xa20 [ 1517.275307] should_failslab+0x5/0x20 [ 1517.276075] kmem_cache_alloc+0x5b/0x310 [ 1517.276897] ? mark_held_locks+0x9e/0xe0 [ 1517.277719] create_object.isra.0+0x3a/0xa20 [ 1517.278605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.279645] kmem_cache_alloc_bulk+0x168/0x320 [ 1517.280570] io_submit_sqes+0x6f76/0x85c0 [ 1517.281427] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1517.282435] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1517.283441] ? lock_downgrade+0x6d0/0x6d0 [ 1517.284272] ? find_held_lock+0x2c/0x110 [ 1517.285098] ? io_submit_sqes+0x85c0/0x85c0 [ 1517.285971] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.286954] ? wait_for_completion_io+0x270/0x270 [ 1517.287942] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.288911] ? vfs_write+0x354/0xa70 [ 1517.289784] ? fput_many+0x2f/0x1a0 [ 1517.290528] ? ksys_write+0x1a9/0x260 [ 1517.291318] ? __ia32_sys_read+0xb0/0xb0 [ 1517.292150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.293215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.294258] do_syscall_64+0x33/0x40 [ 1517.295006] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1517.296045] RIP: 0033:0x7fd021856b19 [ 1517.296805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.300506] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.302035] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1517.303489] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.304920] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.306352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.307794] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 [ 1517.309735] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:19:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) fcntl$dupfd(r5, 0x0, r4) 13:19:15 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x11) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x428000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfe, 0x80, 0x1, 0x7f, 0x0, 0x7fffffff, 0x20480, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x800}, 0x40, 0x8, 0xe4, 0x6, 0x4, 0x1000, 0x6, 0x0, 0x3, 0x0, 0x100}, 0x0, 0x10, r3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40420000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000056eabdd239b3699244a9e9195100", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf255c00000008006b007800000008006b001400000008006b001400000008006b006e00000008006b00e400000008006b00f000000008006b003700000000006b005a00000008006b000a000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000081}, 0x8090) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:19:15 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 13:19:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:15 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1, 0xa}) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000000789ff6f93d69618318d2030405161718191a1bc4451e1f202122232425262728292a2b32333435363723c8081953e7c5383b3a3b3c3d3e3f40000000000000e321ea6bfe54ee86ee9960d14c4a4bc3b9a28093b464fc852aec3a4813c21703437ed052f261428157111064c8000400000000000004be2c686462ac13de2a4d9c0dcd16ec688129b08454d9fc23e6533fcf7c58c5bb9a7092cb5b264731000000000000"], 0x48, r0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000440)="4e01509534dd256a3546aa7595460cd8d5eee5b5801659a75bb6b1c031f4920a0f3e12054faf0138b4bc984399ada10a0b4e870159dbde2e461adf57da553d5514e032f4aeb0f5e95dd82b3cd5d49b7eb5eb18da2e5f416f86c9abd77da0734ef381a88a70ac48f9", 0x68, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r4, &(0x7f0000000240)=""/95, 0x5f) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r2, 0x1) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000180)='\x00', r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:19:15 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) [ 1517.552045] FAT-fs (loop2): Unrecognized mount option "roDir" or missing value 13:19:15 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 1517.751557] FAULT_INJECTION: forcing a failure. [ 1517.751557] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.754651] CPU: 1 PID: 9854 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1517.756120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.757867] Call Trace: [ 1517.758433] dump_stack+0x107/0x167 [ 1517.759216] should_fail.cold+0x5/0xa [ 1517.760036] ? create_object.isra.0+0x3a/0xa20 [ 1517.761004] should_failslab+0x5/0x20 [ 1517.761800] kmem_cache_alloc+0x5b/0x310 [ 1517.762651] ? mark_held_locks+0x9e/0xe0 [ 1517.763510] create_object.isra.0+0x3a/0xa20 [ 1517.764420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.765473] kmem_cache_alloc_bulk+0x168/0x320 [ 1517.766404] io_submit_sqes+0x6f76/0x85c0 [ 1517.767311] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1517.768324] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1517.769331] ? lock_downgrade+0x6d0/0x6d0 [ 1517.770172] ? find_held_lock+0x2c/0x110 [ 1517.771010] ? io_submit_sqes+0x85c0/0x85c0 [ 1517.771918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.772912] ? wait_for_completion_io+0x270/0x270 [ 1517.773903] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.774864] ? vfs_write+0x354/0xa70 [ 1517.775647] ? fput_many+0x2f/0x1a0 [ 1517.776383] ? ksys_write+0x1a9/0x260 [ 1517.777170] ? __ia32_sys_read+0xb0/0xb0 [ 1517.778001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.779079] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.780162] do_syscall_64+0x33/0x40 [ 1517.780929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1517.781961] RIP: 0033:0x7f24549c7b19 [ 1517.782728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.786440] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.788014] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1517.789475] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.790935] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.792411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.793876] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1517.795077] FAULT_INJECTION: forcing a failure. [ 1517.795077] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.798248] CPU: 0 PID: 9857 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1517.799669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.801377] Call Trace: [ 1517.801917] dump_stack+0x107/0x167 [ 1517.802671] should_fail.cold+0x5/0xa [ 1517.803472] ? ___slab_alloc+0x155/0x700 [ 1517.804304] ? create_object.isra.0+0x3a/0xa20 [ 1517.805242] should_failslab+0x5/0x20 [ 1517.806022] kmem_cache_alloc+0x5b/0x310 [ 1517.806857] create_object.isra.0+0x3a/0xa20 [ 1517.807759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.808799] kmem_cache_alloc+0x159/0x310 [ 1517.809644] xas_alloc+0x336/0x440 [ 1517.810377] xas_create+0x34a/0x10d0 [ 1517.811149] ? kernel_text_address+0xf2/0x120 [ 1517.812071] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1517.813141] xas_store+0x8c/0x1c40 [ 1517.813886] __xa_store+0x164/0x2d0 [ 1517.814647] ? xa_delete_node+0x280/0x280 [ 1517.815520] ? trace_hardirqs_on+0x5b/0x180 [ 1517.816409] xa_store+0x31/0x50 [ 1517.817077] __io_uring_add_tctx_node+0x1cf/0x520 [ 1517.818070] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1517.819132] __do_sys_io_uring_enter+0x14de/0x1920 [ 1517.820150] ? lock_downgrade+0x6d0/0x6d0 13:19:15 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffdffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1517.820980] ? find_held_lock+0x2c/0x110 [ 1517.821997] ? io_submit_sqes+0x85c0/0x85c0 [ 1517.822879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.823892] ? wait_for_completion_io+0x270/0x270 [ 1517.824869] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.825817] ? vfs_write+0x354/0xa70 [ 1517.826570] ? fput_many+0x2f/0x1a0 [ 1517.827325] ? ksys_write+0x1a9/0x260 [ 1517.828098] ? __ia32_sys_read+0xb0/0xb0 [ 1517.828930] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.829991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.831052] do_syscall_64+0x33/0x40 [ 1517.831822] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1517.832849] RIP: 0033:0x7fd021856b19 [ 1517.833622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.837328] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.838899] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1517.840336] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.841769] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.843204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.844645] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1517.863125] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:19:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80800, 0x100) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da", 0x27) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={0x0, 0x7f, 0x7}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) r5 = openat(0xffffffffffffffff, 0x0, 0x0, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000060b40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r7}], 0x7f, "411ab0b7f6aaeb"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 1517.939538] FAULT_INJECTION: forcing a failure. [ 1517.939538] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.942469] CPU: 0 PID: 9861 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1517.943939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.945637] Call Trace: [ 1517.946187] dump_stack+0x107/0x167 [ 1517.946929] should_fail.cold+0x5/0xa [ 1517.947752] ? xas_alloc+0x336/0x440 [ 1517.948512] should_failslab+0x5/0x20 [ 1517.949298] kmem_cache_alloc+0x5b/0x310 [ 1517.950145] xas_alloc+0x336/0x440 [ 1517.950865] xas_create+0x34a/0x10d0 [ 1517.951655] ? kernel_text_address+0xf2/0x120 [ 1517.952579] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1517.953669] xas_store+0x8c/0x1c40 [ 1517.954404] __xa_store+0x164/0x2d0 [ 1517.955158] ? xa_delete_node+0x280/0x280 [ 1517.956022] ? trace_hardirqs_on+0x5b/0x180 [ 1517.956918] xa_store+0x31/0x50 [ 1517.957596] __io_uring_add_tctx_node+0x1cf/0x520 [ 1517.958595] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1517.959710] __do_sys_io_uring_enter+0x14de/0x1920 [ 1517.960706] ? lock_downgrade+0x6d0/0x6d0 [ 1517.961563] ? find_held_lock+0x2c/0x110 [ 1517.962386] ? io_submit_sqes+0x85c0/0x85c0 [ 1517.963298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.964276] ? wait_for_completion_io+0x270/0x270 [ 1517.965280] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.966219] ? vfs_write+0x354/0xa70 [ 1517.966993] ? fput_many+0x2f/0x1a0 [ 1517.967749] ? ksys_write+0x1a9/0x260 [ 1517.968535] ? __ia32_sys_read+0xb0/0xb0 [ 1517.969365] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.970447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.971570] do_syscall_64+0x33/0x40 [ 1517.972375] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1517.973412] RIP: 0033:0x7f94eea4db19 [ 1517.974181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.977889] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.979436] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1517.980868] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.982297] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.983750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:19:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="2e9c66696c653100"]) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$packet(0x11, 0x3, 0x300) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r11, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r10}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r9, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/140, 0x8c}], 0x5, &(0x7f0000000840)=""/151, 0x97}, 0x0, 0x40010000, 0x0, {0x1, r10}}, 0x101) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r0, &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x4, 0x4000, 0x0, {0x0, r10}}, 0x100) [ 1517.985184] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:19:15 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 13:19:15 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x127fe0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6c, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_complete(r1) 13:19:16 executing program 6: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9865a729f435ef37, 0x10010, r1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x52820, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 13:19:16 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) [ 1518.260146] FAULT_INJECTION: forcing a failure. [ 1518.260146] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.263036] CPU: 1 PID: 9874 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1518.264397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1518.266038] Call Trace: [ 1518.266556] dump_stack+0x107/0x167 [ 1518.267277] should_fail.cold+0x5/0xa [ 1518.268048] ? create_object.isra.0+0x3a/0xa20 [ 1518.268952] should_failslab+0x5/0x20 [ 1518.269679] kmem_cache_alloc+0x5b/0x310 [ 1518.270441] ? mark_held_locks+0x9e/0xe0 [ 1518.271210] create_object.isra.0+0x3a/0xa20 [ 1518.272052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1518.273012] kmem_cache_alloc_bulk+0x168/0x320 [ 1518.273881] io_submit_sqes+0x6f76/0x85c0 [ 1518.274683] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1518.275606] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1518.276484] ? lock_downgrade+0x6d0/0x6d0 [ 1518.277224] ? find_held_lock+0x2c/0x110 [ 1518.277996] ? io_submit_sqes+0x85c0/0x85c0 [ 1518.278856] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1518.279814] ? wait_for_completion_io+0x270/0x270 [ 1518.280742] ? rcu_read_lock_any_held+0x75/0xa0 [ 1518.281637] ? vfs_write+0x354/0xa70 [ 1518.282343] ? fput_many+0x2f/0x1a0 [ 1518.283053] ? ksys_write+0x1a9/0x260 [ 1518.283820] ? __ia32_sys_read+0xb0/0xb0 [ 1518.284612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1518.285613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1518.286579] do_syscall_64+0x33/0x40 [ 1518.287276] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1518.288236] RIP: 0033:0x7f24549c7b19 [ 1518.288933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1518.292381] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1518.293799] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1518.295107] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1518.296434] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1518.297724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1518.299004] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1518.513467] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1518.538082] FAULT_INJECTION: forcing a failure. [ 1518.538082] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.540304] CPU: 1 PID: 9889 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1518.541414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1518.542735] Call Trace: [ 1518.543167] dump_stack+0x107/0x167 [ 1518.543760] should_fail.cold+0x5/0xa [ 1518.544368] ? create_object.isra.0+0x3a/0xa20 [ 1518.545092] should_failslab+0x5/0x20 [ 1518.545693] kmem_cache_alloc+0x5b/0x310 [ 1518.546338] ? mark_held_locks+0x9e/0xe0 [ 1518.547010] create_object.isra.0+0x3a/0xa20 [ 1518.547773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1518.548634] kmem_cache_alloc+0x159/0x310 [ 1518.549351] xas_alloc+0x336/0x440 [ 1518.549912] xas_create+0x34a/0x10d0 [ 1518.550551] ? kernel_text_address+0xf2/0x120 [ 1518.551321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1518.552214] xas_store+0x8c/0x1c40 [ 1518.552832] __xa_store+0x164/0x2d0 [ 1518.553451] ? xa_delete_node+0x280/0x280 [ 1518.554148] ? trace_hardirqs_on+0x5b/0x180 [ 1518.554866] xa_store+0x31/0x50 [ 1518.555428] __io_uring_add_tctx_node+0x1cf/0x520 [ 1518.556247] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1518.557124] __do_sys_io_uring_enter+0x14de/0x1920 [ 1518.557963] ? lock_downgrade+0x6d0/0x6d0 [ 1518.558675] ? find_held_lock+0x2c/0x110 [ 1518.559358] ? io_submit_sqes+0x85c0/0x85c0 [ 1518.560095] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1518.560927] ? wait_for_completion_io+0x270/0x270 [ 1518.561741] ? rcu_read_lock_any_held+0x75/0xa0 [ 1518.562537] ? vfs_write+0x354/0xa70 [ 1518.563173] ? fput_many+0x2f/0x1a0 [ 1518.563792] ? ksys_write+0x1a9/0x260 [ 1518.564439] ? __ia32_sys_read+0xb0/0xb0 [ 1518.565142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1518.566018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1518.566890] do_syscall_64+0x33/0x40 [ 1518.567536] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1518.568406] RIP: 0033:0x7f94eea4db19 [ 1518.569018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1518.571942] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1518.573183] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1518.574316] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1518.575423] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1518.576536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1518.577642] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:19:32 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 13:19:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 13:19:32 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 13:19:32 executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x401}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x90}}, 0x44800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r1, 0xffffffffffffffff, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0xd, 0x80, 0x74, 0x1, 0x6, 0x7, 0x0, 0x1, 0xccc3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x4874, 0x1, 0x4, 0x4, 0x9, 0x8, 0x7, 0x0, 0x3ff, 0x0, 0x1ff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xb) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 13:19:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3f) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd_index=0x6, 0x938, 0x0, 0x0, 0x1a, 0x95bc5dd5d67caaf8}, 0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x8000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005080), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) open_tree(r5, &(0x7f00000002c0)='./file0\x00', 0x9100) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 13:19:32 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 13:19:32 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000007a80)='./file0\x00', &(0x7f0000007ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmmsg$unix(r0, &(0x7f0000007bc0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="cdca9784cc1c586801fbda8b0787fe3e836b56cbe91f645096de97194e4f20e5a38b514c77e4c2b1d1291f003456d521c3354ac6e7a62d1f48260b5e03ea9989e7b2644b012e6a14a681cb825623a935d7d9a5a480ac291fdfa43cedd247af523ff1e7dc6ae9236ffd69013238d93dc037d5a1d713cd875c2408726cccf5e10b8f43843c41b6144cb0193bad925018337d23a93ae43006b0d57c56c3448d5116d331ab5d23e7", 0xa6}, {&(0x7f0000000240)="055eeac448b99568904663c0db51643f1e3a55514ba4ea0e09017b9750970e618233f636f3a87a12071fbc6b05ea0b8ee598507883cf7bc3c6b17cccbb40cc7d682a352457a069c2b88e1e658bf1cf6021f6805d3279871e", 0x58}, {&(0x7f00000002c0)="ffa201ce220c7f1d238249e4644c817419496f1640401b9ff25b5a90547e6ac9b17731544a0b848f1dab00c8e19dfaea80b84c71f23dca9e4b482bd699fca7206d2c", 0x42}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1, r0]}}], 0x118, 0x20004004}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)="6b19b62e2047377ce516d6209f11181c4ab905e54e5005a4eacf9e085707e31963d824040b8cb4ebae02276cd7dc1ceceddb30552a03eb288ad2a68127f45063c4194af1578c74434657f0f1fb3adf9a144685d1c8f108ffee07b3c41219d67a0bc74531aca2bc4b6184b2bd96eaab4522efefd3bd707531a7b4359e1f9ad79e3275371d9191afb827b1e738e49027fd8dbdbaec69d50367bcda91c800ae3f", 0x9f}], 0x1, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x48050}}, {{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000d00)="ad38b765dfc078b6079ff69dfb96981bec085b1f0ada61a79f4c75055e3ef136bfda66da8c95251b5cf05c5a3beab54e842a147d1771b722", 0x38}, {&(0x7f0000000d40)="a5588f95720c33535f9fc58e939fb902c64ea7261ab6c4035d104fb7161f3e2f1fe0e2533fa64f4118ce1932555389cb8d9b041cd75f4c03c335910ca8a55c255e70dc22417691de88f715dd815c6b7d5a9252d8999910914e0f419b9e502df6ffb4a6d5826d669766552edacb91c35c0d87eefc5d5b10a079db654f6765bb14d14d5194960f5be050886b843cd8c6119edbbe917830e4ae6a685e0df50572f37071859c60339fddd3dc2d9927b9deadb41a5f07e7e2da82d71fce19ec148105da8857d35f794892d2b9da8d470d30102faeec3babd074b4cc9bcd8226a2367068462b8ce212c65eb1d3fd8d76fb", 0xee}], 0x2, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001e00)="b7ebbe31d34fd764f44a5f522453f7a9a1cbb28560b00249a4db9105f443fc208bc2362471f48eb9f03a6c9eeefe2db7835d5f1f6fab8437e6264584cf2c52678f964ec0b3a5d23481e01f003adf40b5bbe1b0276df2746e670d283358e4e7788514de9d822449eed65223ef52e1c424f7e2e45a254fda51b0d9275ebb839ddaaca2a2f949871ba0d988edc3a162026808b8547b9f288a35c8795a9ca4346f0f7e844afdefa6fb77a9fbfac1c4ea5bfac9cce80c4ed62ffd65b40aeabcb5188e1b6e99518767e64367a7f289432b09a3a57c433ef294762a269a79043b5f6496fc9a4797b3bb39a99467f30f2af891f2ed2842eb991d36cea18ae31dbf8cfab448fd6e9adffb6cd4f7b765e0b4616982ab278cbe75696132b6499dd58ad28baf0f808c2a3b674ff9e7a0712a20e04b5840959d98cb104104be4f785dd5add894910ff2843acb9be0922111fbd2545667e5a60706e2d993c1dad970b573461294145aa63fbb0cab7735b5b54e4e0fa8ebd5956396b4a263790db735772ff930063cc5fb17af78d9a6de4bde44351ad0a19ee234aea2eee340fe4a650f0518f4e1f1ffce32fdfb9307905acc32363d44015e8dc6e69b40d3f2765da1d0433151f3601ffac2d7e09a8c0beca3074718c6b908f6d3e8b9ed23fa15b4f8871f5386e9f32de7c77bcb5b87c802580a7d6c43120164f8548cb82e2d1905ec8f6f5e986ec5c956db1352fce482bceaea05a1667c8c67cc8787f37c71af800f38402ea9fc5565021a06839972626535d8815a47407cab4e0e51dd9ec0622dccfd0d33a7aa0913922b0fc7efe102fa2b75883002fc82d6736c02a1ec454a620172d801b30e53a3d8db55ba3d870b392c95096bf0b45fc7df06efbe565052c7baa9924b2f33ad0cbad58a435b54b37a5623755db0b3639ce46ac234b0c0cd24d0ae7188825f37eca2e754752265211e4ba0ef45cdafc2a1273b24726afa15b88e25161eb5c9153d2a480ae52eaa449a4df4b1085648d545791f12b2314a65334b5e8be4f2725baaf01c6fd58dfd83037899e922bc8fa248a987ef06012301239ffd3eec7cc1974b61e8fb8730d72814c7b07acb58613aadd6a4b2425061988da6a69f1d3082eb25b953ef6d37e418a209526449d14e7898a4f4af7cadc00cdb697137e5f143dac34201ca8a863327553df6f69e2595d24bfe2c484595906ce518eb0282e44bfaf07152676e76e4fcb043b6d341835e36e0624e44b7ecf4d1a80fb667941a0034ebf21b6e3eb73df1c3f2db8adda36fc94aa585e6cb471aa42bd82bd14df142c356201e365e1442e2de20a302c8f067063ff285c1e736fd3e92d3bee701d9e20969e0e348cfe9a0afca07dc34bf098b5f79d3dfea6e5e3c6179117ceee20e930dd05d2998ec591096447781795b8590548f59930b53158c47e8137db2dd03ad8f707aa683830d927ece56d53a82eeda4f5d31fc28ce7aa635cae50ae2cbbeb9813570ad844dce5b4e3b94edbf66d73879be0d724012674d98112a29a5ea33c57c60601fc00b0476c365e5e7dd7bf8f2a7d318cfbaf8b7a03913e5ad558e0dea5f2927117f442a184d56d01d8c68ff71b3c678f846e3df25640be983e47d3ed9c338fa68d1de294e5906819011aed596ab83f943f90dff196abdc1ff0e3187ac835b75b44dd5ad4a14cfa0605bd449731836c222c022a45fa5e350f8a4b6d6440bdf1a483ffe6f42366b27dc29d8b538a9e970cfa19e203b686a73992764f2b698194e5e2246c211b6b89d86d99e96712ff23b1f5d49ad263567f2e809fbbbbc7df777ad092eb837aa928902c27f8cc64eb7ac9f18ee7d234a0cf36cf3f04c031779a63ce15779be4082be9613381394fefa558360b698348e9a9a1fd1b1d832e269db7d47ce0fea5110ab134b627ad50e26e75025c22f0599626223d4593d8f3e09bb1356eacfdfb400c45f78adf0489835cdda54cfa6c2a5f4fd703bbdebea966c1967657dc8f8c86e5e4dccb6ccb671682daae47e9e362ac378b97603f1b059ee84c4cd7f40276fa8b4b89e34c65af88188befae26619302dbaa3e3401f436389892a903606a00fe899243a28150c246e2d5eff2bf340eb45218f7144d8ea239b05de0e59db11ff5a45fd77cad3bc013d9f352a6a60663c8ee36ed4cae159c84f11717e728b8f04560af5b1fa63c1fc6f7c38943f2bf7ca7e5170049c6196302f9af46f018e2ded52e9272cfc7bab7deb5990aa4094db3852feac7921cb21655b24ed70b9c72f78061b137b57422dc23bfde6d15d5a57d3648e5df14f0f094688cc6bd33354add3ef379da6c2348cec6f05e4e2d09105aa9a0ba62a3766717d09e35227232bf5fe3ae1bcd612f564a9a4df5a7acdcb6009f2980437ff7b4917d187edb5e8f5619b10aa56346ef6998372bd3fbc8520793b54550946ab1f26831f93070224fab370004a470ce2b1d20adc82cf0e6f5c6bacf86b7ea27901d9451fd6fe3c297a4c476dd6333d47db846e1ddefeeb0d7346cec05a542fff77561876f2ec0ad8b47436ddef3f421e3df9908a72d19422d13172554faeab873e6fa016b8bb3703826262f15b7a49bad40a80a0fe3c938f3df79860eb118b1fb314c5cc4a7cd66d514a93d5d8d84b0f93fb14a07b81361de0fd966bef250f3614bf2439e80614899505ea5d6750dd7e165ec0f328e55951569fbac75c2b8df2c64b0692abe73c5b8fd18768311fde3ecb646cd28c4308bf58b98f9959b36eaf44d7cd842227288ab71c71b506e466b2d5896fff22acafe4ee8ec4fe337eb071fe34a23f85142a8c65d57affb3ceb637f3b75b51fae7d7a9e7a0a86d718504f7cd483f2443e74dd66724da0a4637356e2f724172c9bb7ddb5fa510bf264c362ff73573f3e2ac7d2c35e2ee8278f888f6596fd8a035eccf70f2e5a1f181d27f6261a18319b402079bc3e1190c7a89d6c09462dece74b8e72b446ea88481cdbf22a5f8a6857e0d956fa03c51dd5e63db5fdbb452650174e637d38ed97644aca22c685b4b2512f9f4c2ace553a060a01f73f7102fa0727d4640815f843bcd6bed3e14468d5be897e7e87f43f1a4ef8828099e43375f235527d036c7238615aa40aa6030c090c0fcfdd0eed0c0aaacd50bb0dc0713cb6bf38583e18b80ff12f83376bb1c123b6af5e00492c27dfc9bda41e4fdeba3a82467e5bb910f6f86a5de051ca871c03ea3210b029fe6da892a4797f95b76ec1f7ebeb518367117730f7e37b0b84744c85f7fa4723dfbb5ba155abb2dc87ba730329e319ea67036448bbfa3a71cdd8f6ca73811c92462e6ec388db531356c7d05e8c37263076fda848b1c02d799d982b4ccb0e162778bdb7eb8be149aa6131684836a1a08b56ffdab318e6253b6f32a44510c4d9bac0a6cc8b686cbe026f9e6bdf7a61cc5f31f3aa24e0b285de39826e85caa80c9a2e451dfb51726c14995e68c977b2724df17a4ddb57ba7db1d641081dbfac2791bc99dfc5e61b9d4a574d13c12f719ddcd843bafd0bc0b1f700040fbd1807d1b88cbe8e850f07649d47c103b21c44736a34d89da2729cd0730037e4e8f60c2748c1978a0a5841dd08115444d82ace163bc2e7f343d98f7dcd129fa0f47a7486d34a8261d5775300d3a274667750f64930101f9e939c5ccb9616aba2c455c2b9773206fea1242f6975e772e89537fe1f86acccf57713c8482797590c1ed3599da88e17a20bcc08b324adb4b4c704a8c4007884b01caefed0bcf1a06f831019650eaa4f176a3b984bcc28f935f31217c3f804efbed9b35e92c81aa129bc0fe42dfa70d2bb42c24ccbcc0c1669aa044d5c5374a68d2ad7439cbbaef1a64992deac86131f5034091da828f70c912f5c1319608f440e1a9018e2230f19ae33606bac6c221249c50ef2f032fa0a1b37818c0fe7b0c06b6543d2e8b8f62d8f8d208adc77994f178624f326c4b6763a1a4b731f83cb0a08e4ae62e7d0142a6054a7f7ccf347cd92c094849d3e3e4f46602cd2a29f8b5a839168bebec2a4d63b15c5513f7567efd95c37aaacaa40412de932a17bda6e3a715c9175f9f081fb6d2aa5f8180df4456f99f0936dff866940e7fa34dd04b9f55899ef471437a8fa3abcb15bdc93cbd42605c851cb587764a3997639f3cc021e87d354760a19951fb3b9742eba1a1663a337a50671e99ffb0fb5e3362494f8291b7d12ffc66964276334b81a74d5013c82091c10fe0dfd0749eceb435a0375edd2791a2e49176bab41b1e435cdda174bdf66874e1b41b16ae918a52ccaee5fdc473a7784d129c5689fe5df9e162e3cdecbccd7aff782075ef6f74fa2c8dde1e71a6f30a2a50d05ce83e9c67314cc2d9adffef04bad4f2d27eb8fc635d4a54702ca9e81568bad424e0c6e680e9b3f5e19df9298cd4c0683a888475a48bb744e05924be9182dacd2253a23f569fa4d61e834d99e6e8e1b44c6d387e8bc23daf5e78939296e50809f375dcb5c710827872bdacffce02ac6bc0f619bb30a8beca35a67c26283f7d2041a38f95c2fa135d300cfabf2cdfbf19c8da4fba793b556d71beac70ffd2e09329c09e30f70dea2bcaa24e775c624741e28ee67ed8c2afd59c1493107fcddefae5c9a59f6504204429d481e1165fa6210a1ae53c9b82dd2b9c61582c51a1625e2eb26f8fcd3274bb11b2f09874340ed402f1294332bf19ad4ba099310746b9673bda899c5fc28dbed421b237ce8db9c0996ede00cdfd394002bb56007d27eac58cb6b4bfb72a1f6b790c7c991818975b76d759dfa77f64c0fc98f1375818642341325b8c236b054b3658bb74f1fdce4131c4f859704edc5577acce33c764e9235a51b7b8fb5bf7b9898a81dcdb6ac8ecfe5978aadff1093721acd337eabb2cf9cf71536ecf28ff3dc8cb6af7d0f2e382322036baad7fa0f70445d6121fcbe7dfcf9a85ae3cfa1a99c46b5db5a7dfca4728373f417ec7598a80534143e9a0dcd7e58e5afc3ba1fe6c17fd71192c355455451e60093fa1c5422da70ac842b7f8f81c46b228273c234466d0dca893703a610f2910a2f21682f64dc8832095dbcb504a363caaea7f102c766c315b40e7258adcd9a93ed2fffaec9cfbb3541b60037375b48d215dab9fadfef823cbe1324301741d41078b660f1d2fecb4f4e62bb5ede4743453c0096232acb9656c36d039da12b0a756b9b04a24bddc4cc59e42cd2a2a6f605f8abc11b502769cd3ee9c56bca2134e1b1545af67e533739644953feccdc540f99393e7ead41ad5600cab23678253e7f8fa866cdf96ec8afb7aabc006d6d45f8c595256bf7a51debdfa007f344c0819107179aa791158fdf49bafe8bdbc05ed07510040cc472c521045950b9dcdfe498ba5fa6c341394239a58aa5596f8d5b4230353fef54f276736a801d1c1d26b002b637caa95021241db7a73036322ad5908afdc414c999c40e083dc1caddf31b4156c9954ac410a7cb0281fe10b5482790e43f34424c11ddcc9b3c2810d8d5bf028a33ad73b0f5625756c449171b3e3ad0e39002120d020852829f4ffb8de0db76712d9b7aed246eb6db2f03874b59c4d0618476f1e466f141b535803669808702e5dc3fd1371597619fad861e37256d2064535b1297361cc8bafdcf0b5c427a4e778f853e482c6512e7870ce6599dee00a6300d2a23852607cf948ecf1cace2ecfdb35a8cd6c4985a622e423da8603c1156c683333049334d85f649ce61735afcdf95a3861781b643dcb728fda0e216d19b3a43734ff7d8cf48d3c2d87b62f8f62a3a44a033a253986018fe1a05c", 0x1000}, {&(0x7f0000000f00)="267e156e005fc8e8ba45ba2c9b62eed8d00966c29fdadf298060b3023b3a2df0b66b066ca9b223a9e67c75272ab58bb8b0083571cbcbe61f81acba9d", 0x3c}, {&(0x7f0000000f40)="1864c77f3d0cebffb8e5a7a6a09ac4859f24bbf66fe854411a04f44549ee1bb8a2e722052d1a03a12c54d87b154e5eda200613330b1af9c4307c56cc791b262acddafc71fb0c9424584b3dd9d500b45d5e6c5452e1162856b3b665cad42af97a64f1da2aff9de83388feb24be01541349abbae248f7f8518ffbec67216612a2db88cec", 0x83}, {&(0x7f0000001000)="081c734278a0c5edd51ed65b1cd01966772a796e9e516aab572e4360e0440d7c4d7b70e8efd9112ef519689f2083ce218a7906a04d42035c16bbe9b5f963c55418e334", 0x43}, {&(0x7f0000001080)="2da975688cb6d0f727c6fd546398a202773189693fd911d5aeeff2eb25bf8cfd810185c6d2ea229f1901cd4c7c533b126dfcded88e0caffe859932028e20526d8d09546be7940f5c81504dc7792be90ac84df4cc347c66088f0b2934c4f720a1257ba330253b3ccf463797b4c94c36e3cf97c76d1e134a37f429f7c377f3fd645ad40c4ece08b13780523109919cdcae8db8aec2975e8e7422019b517fa8b61da9e2e2608d3ea889fc468855e5793726007d63474de12bcc6afe94a06b58c22d0b1fd259", 0xc4}], 0x5, &(0x7f00000012c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x60, 0x20000000}}, {{&(0x7f0000001340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000013c0)="0c6037e61a97f8206c18e7149f337e9ebc38a1c2e0960712571a5a4b62cc78159397571328b0ada06a117c8297076a57ed49ca21f6950ba33e9c06ae3b4b4a6179fea4a80b09ce0ec8e9467f21223b993241a13de47d7e005e9d7b2945eae860043df2e0e3c793c1eee70a8d23523bdd9b58c03a476cbbcc2d0d5d8b0b977a9de929f172fd72ed39ef6ff4bca4cb2942a7d4e53c00f065a9b42efb244bd52b50c4408f33a12ba403bbb297fba63c9ce52cee137d7a962b2b02e9015a8f507a766aa8dba8f9bf124e8289e2c8ef", 0xcd}], 0x1, &(0x7f0000001680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68, 0x41}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001780)="441a1fa0a4572fe44d70298e8925c1fd4887c9c239c1d1f43e098174d8680bae488097165f3a7d141a0a", 0x2a}, {&(0x7f00000017c0)="964ddb7758c4680adebf44fb163168263a614f7f16a489050e6bf6f988b9e9f13eb1ba2d0eecbe94a9d9faadbf53bc4095ba4cbbe9c2b23991d545916b03cd877d4f6369096a10b20c146b254c11b80782ec40a19b23c325840dabb0f465d36cd36bb1c263073af07007635da77b9d72b0d31a9cc2e4d0586f9ef2c23e85be1bf342f055cd17b746019a5eaf0b16874b9ccd65bd839dcc0da64b537351b9ffdf10489ebba6495bd7616a8c7e37c348f9e30eea0024a2a3ec4106fe2ee9a11b7a05013918998e86ca89ee7a1e8fdb4285f5fbb7329e1566510a", 0xd9}, {&(0x7f00000018c0)="58af2d58b0df44bd1e2c00c2c857c7ebea03a4e05e4da91ed8a0587659f0c445354be7d50f3b99066e90288beae963ba08e03b95e1f3019c765e94beee3a090c1f9c203458867c7db94b6418c408ef69ee328c0f4fd7ad9bebfdd39b29874c268a07ce93394db5d07cf9065eba5c4c2f26e8388e753df967e8f742eeb9a3e2faa7b0bf50ff452716eb618162b9e9d25941d1edf1c90c658efd1ccff8bf9a0498e244633b4caa7fb1c9850980c0f6cf70970c1260e90fc58e8756f3c2f36c12d2bc15796c4e1e0f03a2a98718dc8af4f7c3382298e440a815cbb49a035bcdfbb67dda545cdc4b6b68ab", 0xe9}, {&(0x7f00000019c0)="dfa0d9b7cc7aaedc812166d4017017d282ebf2df37dae90bafe90538a521c06e0c2568eda38fe7d8c05ca651fdda7b97536d158ea31a39c666b0780c21b7d2125283597b8ecf49a5db566cd10c80138fc13c39a9b63e12aa9a4e39bb3e431848a3993f36f8ac7a7f6a83cb979d5af0bb48a9565f927dbcb1d04d1f3565ae37956d1ec655a7fee0369fe7953568925940dcce7656706bc2cfdb51b4", 0x9b}, {&(0x7f0000001a80)="0121adfd9ff82c10d6f9b24fc43dba756690ceafe35a132bc22ca2843a747abcb178d2ba47c4eb9e85f9f6986669747cbf9b5605873a73649390b04d79cff99809ffd65e915ee3751cfc588ebfaa2766", 0x50}, {&(0x7f0000001b00)}], 0x6, 0x0, 0x0, 0x40}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001c40)="0530f6e72d4d7b889a39d163173c8b96a11f717634ebb8b7186ce09afdf5be2585d915a689d5712e66b96098baa6a26ef8205f174c9a59b1dd02dfec4c52eb131dd450b19dafc5a4141950b1", 0x4c}], 0x1, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0x108, 0xefdb14d212a5feed}}, {{&(0x7f0000003140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004380)=[{&(0x7f00000031c0)="d5215ec97d6997bd967bb5dde541dd67afbcbd0c1aab0b772fcc6aff24e99bbc115f2f8cb75fa78656374305d9296d3a3f8a90bf4b285a7de7962293eb78c7566c46e3f985ba37fb7653a16e0e4daf87a1d20a5d90403379e0b628bfc62613bb13f9ff994b4ebe0a4d892db39adfe8734d71ad4b247d79d3d9fa869dd10b157309514e1a234610a290f14cd07e372a93a83b381f48493dfde8d8377129a909e8d2b7d5a95cafa3a3adfc294e60eb6111efe01c8e08", 0xb5}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="b66437b029659c253ef2c5c5ff3b6fe468c1c55be4cf7fb76c3b45b5802e2b38ad017239b6e47ac0d1a39babd860edc278105ad5b2ef5612971890c523fd0622801abf8027104b50c329936565995dbc8cdbbfdeab3215faab3559d17be404638247e379cab07387ade4351f7c6f58a2745d741ad6e5b873a19178e303b0de7454d70ed370ac3fc69605f0d4615b9f90a0f21ffe1a0dddc10e3d9f5bf4f057ccb1fd83fa8d6e620c49f2573d8b5f5756ba04238bf270c43a48fafefda765955d14baca0e67d5b33d", 0xc8}], 0x3, &(0x7f0000004400)=[@rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x20000000}}, {{&(0x7f0000004440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000079c0)=[{&(0x7f00000044c0)="1e7f0c05e765d7d54fa8eeba4ec693", 0xf}, {&(0x7f0000004500)="87d38342b6ec97d8123f49211701891c30d1b55d660b63f6a5d85e93e0489ca93e70747d7bddb1ee06aa0f771cde2552ee34fe02b5a36ced02c8161f9eb7813c2fab2c3dc6d025282c0c66818cf4ba9963733f6186eba7bcd4df3ccd2857ce90605518844ea0970ba82cc22cbd06452623c4b2ec9b34dec4612231a326aa0f67e5db658d817e338383ee7b20e23bf1fd4f52496939c6a7fad02b218116e1c8b4916469ee26abf4eb5034186827d65f2dc293426ee2077e915fbd92e7652b6bd9c44df4", 0xc3}, {&(0x7f0000004600)="6dab95989e3bec8c31bd09bea2c5765d5b9e9b8375c3f1e12ab1e9a191997794e0907e34088d8937fcf61f871e5606c181f5a65ca8501231426c48e01385f1d3627395620a8747b660f136d1388a28d27bfa5b38324430ee741672214d8d21779855f7cf69d9bc2cb10ddd4ed51273faeb0d35bc2a1d0f641891b83876bda5542508c9f1ec941f3d995f4edc58d9365efd30ca926f7b4c9b22c9192d68b158bc448e8bc59c97105b5ba2b1443ddc11c9d46242bff7c9fb", 0xb7}, {&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="a083c7b9f097298508882698d4376984f839805fce81ca378bdc35c667c95455c9f80d8d1aaee18a3c9309818d7c4548268742a70aee52eab0d9349d96508c1cf065ae83099940115d00f3dc45d2429dc727e7666b82e169f18391758bee72d0aa43027b1e7bfb5f70e44fffc1e6888616dc22e661b91a94d25f3a8ef3346fb7a754de859ee00726aa8cf522190578", 0x8f}, {&(0x7f0000005780)="ef30fd1349a7", 0x6}, {&(0x7f00000057c0)="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", 0x1000}, {&(0x7f00000067c0)="f2e136f474baf209e8f9784f848016f6ae718a2253258342a29810c4314d4355c4acff19bd84948859dd2902440b0b1b855eb3b2dcabd7fa104995bab8a36b5e982b5f280cd0bb01b192a3b9b0076f6f15f4b8c80dd1b5c5e947e579062fedaa56d1b245df99f8597688f025ade3a744a9880e0525b33c0f1117c648c981c2543fbe20a3297047bdd1adf9237a3ec17ed5d011d294cdbb24f7ee211d70b81b66c09bceaa8b0fb63188fdbe548e5b980641e9672cb13c55861359b7558f1ea3f2f74c692f29a5a97f1d218bdf5199fd", 0xcf}, {&(0x7f00000068c0)="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", 0x1000}, {&(0x7f00000078c0)="5a3b4863629efea2baef5c612337401cfbc619a939ba63a7d857681e493ce652e02f61cbe475c9b5d4d653c655a1941b7984dbf9792232b3b71cc0bd65aee52210842c8d0210844d420182a32cd36e6304fdd95174614b8bd59ff4850eb1ff07bc5c7359c36e8e5d8afa19c30aba46a26fa5034bf8dcd6e153360324439f4076e2ffc2a9053b9297ffc73da2e82f0b1c75a21ea8b5388cced09f23824fd6d1a67eb233d2a797ed63a758099d03905d53f76265d83f980fa899afa719f2d9a0155ef64c0b86aa824afe08d919f94b3c3cc5b802102d8873095e", 0xd9}], 0xa, &(0x7f0000007b40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32, @ANYBLOB="01f0ffff"], 0x50, 0x20044800}}], 0x9, 0x10) r10 = open(&(0x7f0000000000)='./file0\x00', 0x404401, 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:19:32 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1535.255355] FAULT_INJECTION: forcing a failure. [ 1535.255355] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.257717] CPU: 0 PID: 9906 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1535.259103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.260784] Call Trace: [ 1535.261320] dump_stack+0x107/0x167 [ 1535.261412] FAULT_INJECTION: forcing a failure. [ 1535.261412] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.262060] should_fail.cold+0x5/0xa [ 1535.262081] ? create_object.isra.0+0x3a/0xa20 [ 1535.262102] should_failslab+0x5/0x20 [ 1535.262120] kmem_cache_alloc+0x5b/0x310 [ 1535.262144] create_object.isra.0+0x3a/0xa20 [ 1535.262162] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.262186] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.262210] io_submit_sqes+0x6f76/0x85c0 [ 1535.262256] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1535.262273] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1535.262301] ? lock_downgrade+0x6d0/0x6d0 [ 1535.274398] ? find_held_lock+0x2c/0x110 [ 1535.275231] ? io_submit_sqes+0x85c0/0x85c0 [ 1535.276125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.277110] ? wait_for_completion_io+0x270/0x270 [ 1535.278093] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.279037] ? vfs_write+0x354/0xa70 [ 1535.279810] ? fput_many+0x2f/0x1a0 [ 1535.280552] ? ksys_write+0x1a9/0x260 [ 1535.281326] ? __ia32_sys_read+0xb0/0xb0 [ 1535.282154] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.283214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.284273] do_syscall_64+0x33/0x40 [ 1535.285026] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1535.286062] RIP: 0033:0x7f94eea4db19 [ 1535.286817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.290608] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.292168] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1535.293624] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.295096] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.296557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.298032] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1535.299523] CPU: 1 PID: 9915 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1535.301079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.302928] Call Trace: [ 1535.303532] dump_stack+0x107/0x167 [ 1535.304437] should_fail.cold+0x5/0xa [ 1535.305326] ? xas_alloc+0x336/0x440 [ 1535.306005] should_failslab+0x5/0x20 [ 1535.306734] kmem_cache_alloc+0x5b/0x310 [ 1535.307564] xas_alloc+0x336/0x440 [ 1535.308212] xas_create+0x34a/0x10d0 [ 1535.308892] ? kernel_text_address+0xf2/0x120 [ 1535.309707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1535.310655] xas_store+0x8c/0x1c40 [ 1535.311310] __xa_store+0x164/0x2d0 [ 1535.311992] ? xa_delete_node+0x280/0x280 [ 1535.312751] ? trace_hardirqs_on+0x5b/0x180 [ 1535.313542] xa_store+0x31/0x50 [ 1535.314144] __io_uring_add_tctx_node+0x1cf/0x520 [ 1535.315017] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1535.315996] __do_sys_io_uring_enter+0x14de/0x1920 [ 1535.316898] ? lock_downgrade+0x6d0/0x6d0 [ 1535.317650] ? find_held_lock+0x2c/0x110 [ 1535.318388] ? io_submit_sqes+0x85c0/0x85c0 [ 1535.319176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.320059] ? wait_for_completion_io+0x270/0x270 [ 1535.320945] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.321788] ? vfs_write+0x354/0xa70 [ 1535.322480] ? fput_many+0x2f/0x1a0 [ 1535.323144] ? ksys_write+0x1a9/0x260 [ 1535.323866] ? __ia32_sys_read+0xb0/0xb0 [ 1535.324607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.325553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.326495] do_syscall_64+0x33/0x40 [ 1535.327173] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1535.328109] RIP: 0033:0x7fd021856b19 [ 1535.328782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.332125] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.333498] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1535.334788] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.336090] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.337376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.338666] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1535.357283] FAULT_INJECTION: forcing a failure. [ 1535.357283] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.360016] CPU: 1 PID: 9912 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1535.361287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.362805] Call Trace: [ 1535.363284] dump_stack+0x107/0x167 [ 1535.363962] should_fail.cold+0x5/0xa [ 1535.364652] ? create_object.isra.0+0x3a/0xa20 [ 1535.365476] should_failslab+0x5/0x20 [ 1535.366164] kmem_cache_alloc+0x5b/0x310 [ 1535.366896] ? mark_held_locks+0x9e/0xe0 [ 1535.367647] create_object.isra.0+0x3a/0xa20 [ 1535.368443] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.369363] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.370191] io_submit_sqes+0x6f76/0x85c0 [ 1535.370970] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1535.371896] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1535.372791] ? lock_downgrade+0x6d0/0x6d0 [ 1535.373555] ? find_held_lock+0x2c/0x110 [ 1535.374309] ? io_submit_sqes+0x85c0/0x85c0 [ 1535.375101] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.375984] ? wait_for_completion_io+0x270/0x270 [ 1535.376868] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.377708] ? vfs_write+0x354/0xa70 [ 1535.378384] ? fput_many+0x2f/0x1a0 [ 1535.379040] ? ksys_write+0x1a9/0x260 [ 1535.379747] ? __ia32_sys_read+0xb0/0xb0 [ 1535.380483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.381427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.382361] do_syscall_64+0x33/0x40 [ 1535.383043] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1535.383975] RIP: 0033:0x7f24549c7b19 [ 1535.384648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.387978] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.389248] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1535.390324] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.391394] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.392478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.393547] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1535.421506] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:19:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:19:47 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 13:19:47 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 13:19:47 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f00000000c0)={0x13d4, 0x2a, 0x100, 0x70bd2a, 0x25dfdbff, {0x1d}, [@typed={0x8, 0x62, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@empty}, @nested={0xcc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @uid}, @typed={0xd, 0x89, 0x0, 0x0, @str='/dev/sr0\x00'}, @typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x7e}, @generic="3585ac946cdf7a2721ee3f551538277a282ac8d979722c963468c1b59ac61e2f4aaaf212140eecf46d3410871d48eb202bbb60fbc5f4ad78dae734a366a221fccfbc0d9fbf3974dd7c9473628f89cd942dddfded4e75a693e72dd0aded054c7c71b2484b723bb44c3fffc63cb955f8ac2cf50b8151e89e3fe113ddf958293cf257c6c5499755372d216486ec", @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x23}]}, @nested={0x12e1, 0x61, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32=0x6}, @generic="51bf5b459033b1e3b220fd66289c8a489d6cbf390f0edbad6aabb3bd03697a6ff9513f8e3f39a0d6ad8500a9de48b2ac214ac0ad41978f1e220d29249508dba13041299c26aca10ddfa1b6d752438470341775eb5cddcf9a08cf98f9b64495a61fb3d2b8c2802daca265c13390c2c2547e1b1c3ce5eef2b9c1b2e439d2e23c62d1f2e8117f3be4f1e137f373ab96015768dadbbd768ea1f6b9b9c65a5249e9e5bfc1b08efa9f617e9763717ed2d6e0c5b75d2d720bc27c958b203c24cd67043955e2ba707103a0334917c619775f875b1e39edacdaa42d9f4018f15b531f06a06b72126984c65249fc6bdec4a0228b2637e38cee9c3b6db5aad1ece503aa81e3b30bf4dd36fd4e6aa7bec5071e228a28ff51c0b3bd0fcc796f64b61fed8b8cbb63155ca1f36fcd9409837ec1b55c8bffb6ab89aa754a1f3a421648e650976ea31a0edd12d2c1cbaa65a049706273ee4c5cf56c2897932721416f5855b3a62dbf21884a5c117b563630648036aabec78e3ddd5e195136dcbbf4b17f7ae76a33318fa0e69a9d3c5f8dec05d6716e588fd1ceb06d0f336d7a3a071a5f6e9bd55edad0db0672f2df4f57907fd7f5a5fc3bfbf9ceaea5fb2eb0e99cdf4e92a98d36dc8bac0ba54df3f620fc2d4138f38975a4f88f5798ed067603c3d3e45b47545c74a993e081940875da8c45656dcd06685113a7275fa9838d8e0251638af0962e0d782082cccfb019660ed30ddf3cc96fca7b094221ff9a833b9cf2e84575952c7e00d2473a27dceb5e16feb08e137fd22e9a4d840427216cf51ba54734afeddcb0b69f026e47c57c4ac8421bed02ad91a208dda8fef81c55ed1107200d4c8c933f0cb83afd5b4977d9423fd581f23deecb2ce1c15a6bec28c1e1e32283a0242dc1df7c6c9d53f10c8a41f55a5dc39a17557c4f4d27322d5b819b162a6c794afabf12f84c93bbd57a59dbbdf1b1b2204693f246c6634fc179572629798d3a3ba25bafcc86712629db524e5d13df546be1b5f8a7e8f09440adb8d3e066131b30ec4697e1a1d7d3d1f7573ab6468ff148acc54f8551570f35ff2e9353a0b8b6b6eb2712c43522fe0a0224f274d03661d15be66aa5928e8e4c45a4864af8da464003c5ad3679b4249fcecd52620b5fa4fcf04ab8ed7f22df547b2b77075903ae1a1f3ea1adb608cb796a6961f96ae8573b131494438d9faab47b261cb4271f98849145aefdbadefc4786fcacd70f3f2fd7b59291cd6cf80d27c2e63ef85fc30c7ef952e08882b4c93881324460a5d7df2b24e46c6927e1e8722c4fa08adcaaf4313d3163596220e8fdd7c022e4868cdf689657b57f20e327e3f6bcc93413a458e0e0681b3ca3d7dea6f8aabca75f234c02c9e0380de5d7a702e5cf03ced8fa49889d7156de42852df3ce9abdaa51d56baa02baf604f0d4444d0bfe719a24e26550227da056f743365e8d8fae6a4845b4f2b2e5f6c1693150aff49f04410779c497aee792764be081856c41d2c883ec64bce5fc5405ce66bb9ba291a137be52b401719ade986e132b542f0870dd75260a176b32e5c80c608c58086dbbc5845a7e86488c34160f5c4fc31a89fa299464e9074e0c4ef01eb9787f8222ee941d84d45c56b565d90794d4f886d8e5ef877342dead939f658da9d6362e9cd88c9454c4bcdbda836fd86ea664bdf491bc77de5886d4460e0b575b3c3eebe8c842f2d31972a8a30ff07c7b2c9ebc38fb9fb505e147ab0d49dc960ec40767d98ede2bff487ac3a85da4ab38c9b48c26c55e2b9c9460dd19c1a40674b3887469b0e716cb1f656a14b34297aca9bfa7e7bb624cd703ace314c366ba4705b0b6b4b827f88381574d61b17c32905b2c0242fc17205be5a64da68e7b67df212f3d3f2239db9e1d50027cddf6dca138b2f2dd48e8c7b09a60c6c11f30f07d492a82c25b10962bddf63f7ef61bea0b6b8e7dfae28bfbe52cda6cb331c7a49ea99568a1d4f204dba5eccdfb42c7a54359464dd585f9f4c281c5a70ea3e5fce6e95023fee03ff3368d621d4e41566d5823419f90964274ec90d8d16f1e100f8222218bd9a9b9db1063e9cb8243c9ea53a2c33a97c0d78122aace0439707be889a3ef85fb315a63c184db998c95cc916047453aab3a33b60b2b6d5e3012848593abf5032db0a10920cdd292417223c4ef728a49974e3674f533b6bc2093d326bf8fa07b701cce07a4b7e314ff51673e98edfd5a725b184b44854a38866f9754da9240fc0511d5126ae48217a385d10195d3efc9fbe9730f47491f0bf880cecb20ef43b164776dca2c00bdde6617177426dcd6ba302da4564a1d8fdb353f604c3bbb5f2d813be905c07ddac1ff2a7da8262415d73b6957df69978ae92200102e60dffbd8ee0c444ca9c3f35f86a711f8273b185894dc5566fd4ef89402174eb6f9b12bae5b551b9df372d96405862e6d5f463daa85033e1dc517b1f61a73628362d324e6282cdd5c567e01846a137710bc8229c86aeab9cda5a0316e38f12376679676e21237ce887bc70648e2a0eaf32cf868ea95ea288061a6a219a04dca7e012d5d7211d9400a8e68db59cc10104f535d4cd97610d1d4e9eb63f05ddbe87502a054d7e951861794be49f3952b1bd01e8f1f67c1643c71a6cac19bd8478c46b41d485979e2ff3f2fadb334be3b187a75df962b6dc7c444ced9e4d2a2cdd25e79d6938a72582527d7a26bf18cb272f0a867bda22a985c45eb66ca81507a915cc9566254f97545f5fdba9906c618dcb26613d2d920d6d4f4e60a89b47fb6988f4251bddbb4a5728143f38d778b1e025a21882e2591e65100cacede8c96cc2bcc16f4afdf7e780819c3b1e4ad39e219a6dca920f96c22219fde1b260f274f0f5ef90ca628a8aaddf05b08bd80b08f5f7c99a836067955acbb1853987666f2af6d154d8342944ec638e34b72245c6a371e20c567f533e85a62b55c6c15c948f99af242e2470bd1739358c485ef86296c48bd48da00111c079143011c7a051ab0ae7b14924d18626d5d3f795c030efc0c7bb83e67dfa7b057f572e56ad4c89262d70a155a07473cce68fbb2ede323090b6b4c773106e68ba46aad22daf16124074c83e963c3b3ffaac62a6d7e6d07217c262fb81f5d3e6d848d3e1cc5928795e3fda1aac436518da101f5a4e8f0cc962abf6c190bee0859fbbd9fd3cec3b6eb6b3d1580b6af617bec127ea48fddb7137552f02ccceb49d65871b04d9a07ae4a107985d8820f06b06eca62d17bacb73847369a11653a04fe10da3e539cc097ff45592dc457915c94f3a02df1b89efd94600eb352f80845d26c8b5094418c98bfed99f145ac90221045b1e1b6e1d6284158b51c1c0b4d31c49f19348933bee1a99fd4de332bed38e0a482594a49fe1aef0ddda7e4fe283740e2ce04e192fd50d97a0ea816b178b8e7bae55d4e3f36e4d9e2b53556efd1171910b8545ea24abf0b7f0e0ba14e1a576da23828f715701c7cf425dba3502427ef715191ec0956b593683044781198403dacb33af25184cea01058dd37d532fe15d16fdad9768abd9ef5a496ffa47e472e81d35f0ac45b7629dc13a5d222e048bdc1d7784825df5848703ea85381c6608ecb552b4a54611f8bfc768c57b1a2e5daa555d5ec86fb6350c88a8857ec1adf767f54ceccca28de995967e25ceae878ae95bd6e0b7e4e6b28617703633177814deb303d35427b6eb165c943123e18b344af23cd07c6082537a051c2c244b3f80fb4fa21f209e34d4126397c153aa443e49bbdd6f2c0b0f1ca5c222a2a269377fe79c61a7606ef6887f79bd3100ce461134a7042c963097fde73d5f8179efaa38aac687cd94e29742c543c57e6a160375fffe63a45711a8acd2b6f3a6ef06887944db0cbeeef1853c10e216eac57b94997321f99a5c7191730771a6e373f1d6ecd7dcd21c7bd9993c909421cc7058a09eb982ef53afc267f7d755ffc0895d5e0f384eb45f7b62d01d46fa0f7c7b0bf33e51c0a71f1dddcf603889d20518e023086db9af9bddd52918e0f34a39446f573db341e289d90811349d76fe7980c4c6464c01361fee93562e07a52a3cf4e7b4dd9bf9c7dd73cf0c57f2beaa2c52144c9220f12f448b47e416d6e3a6328fd48b209eaf34ebeb2a1e2939a53fdd3a696393685c8ae8e90be4552d9107523336c65e489c95b5c039fae5521e9e180a02ff4a6c42c2623a08c4bd89490f10365d0be42a4e1f2af9830d31400327082d4d941dbe2583083448b0a98abd253399728a96a6351925dec3ff1cecfb63820240fa0047d8f6dd8dcabf2f9e6ac715d0957367e85d22cc4127ca512d815e36be25df8ac24c1250bab19a273a351024d2dbdc5514515d74e4e6bc06a05b4180860f0fce09856fdc276ab7c075c65d5f6838c1802f5b57470479bf18732a53447138e24f4af9429ecf806aaf05d7c410a795509253c395c87de427ed21e22a52496af09192eebe6d2395c7bc1f6b8425368071f6e77e4fe7a4417ce09f8f7925042ddbf325db8c019e6913b3cfa7cb0e8bc1f45cef3f3d42dddfbe6a6cadc73a79ab5ba5114c6ff9dd77250141f64fc20985473a4ca9133ec2cc6c4eb2a565336b75ddf733dc5d3fc92e571f94d7c48aa2717bedc99b84af134365667bbd5fd7acc0e2622307dc7984d54c7e869a3c744058623eb74bf59d1e15b8a66cedfc40f58ace2e3e701ac7aed86a8f94f2ffc85cb19bcf7925e06972535e7cde3ddc0f3b6b55113021003c766a12cce8b73606fc2aa882fff32fcc4dc8ddcf321ca9d1514f25995cf177c3109db64fbca4e6c39d21d79bd23a5ce26137884204f5a85d7e059488d11813012b4e017ed7315ea55e4c9942524a0dcc4ae305f045f170ad056988dfa0871a1dccdd5a5dd3e9c8cd946b5b9f4518655509bfadb12abe215bc34218405e254f1be6240db61f86dacc222e88e79ed919e3c8e9cf17cffc12a1e65617682b6bfdae76a6d3433268d7e507f6a66ca678b84869d75790c4d4b50ee41604d43a54747daaf79882f7731f931e631f2b0ec8bd9cb37fca9e8d24b246773f92de7179ae3fa5d2c331ef6c0e229e017ef86c4d9b044aac19ba82cbfb1d05f0df59f50c2e24a2230ce92a03716571b5f1fb564946eef07586ffc85c394857f62ae06bf6d0ad870ce87c3a09228a66c4b70df68fbdb8eaeafed3c10adba4f97cbc99d7e49b0793fb5ec277252a7b295a6ab8ea2e9cf7e7d744a1ca28b1e4b46e0aa2c7c226352702a37bb69350d8d5c6f9a83af7ce1e977bf5dd88273e4a0676aaa68887a734e5646ea388fedec8e113e47c03e3edcd001e113f9849d9242712c02bd64d464d898095de7344115922584d0ee66b53a1eff38772d2ab9dec12e3e9cc48227a46b17d8b17389fd340d0e862f40377a7525d6961f520bebd894e6a0830676ec28b03d8811c84dce6bbcbbe79ef7794b8710c121185d7449f69a87bf8b2c4c98d6432a1cbae9257469d8e71eea8e579bb41680799789689db1e36541824f322c2dbc43ce41d9a04c07990ba24e23c5193fec33fa3456a265a281534e2e57e01476c81556a93d6c0c33856853c25cfb84e0d6af2783cf0533455d68e6b9ad9fa6b1361faa43d59002fbe0f5cf10aa5e78e73fe04c1e5986074a227fb6056a9a2caeebc4dcba2727eeadb7bde127cd0e57a186c7db663a9214c4cde75acc58416f5091b018cf860f6ff3760c0552265d41981208f80dbdfe3e116c2bb37ed85f089107f4a415b6c9b7932477e733ed4ad8783f65f3eb5c559eb9692f928b11952939d765b1f7", @generic="adfb7c741a70981528b64d2f04108978ecd01e326954b65433f17df6543febf39a7504ed89f2b7d01e74b9a32807357663ab3935618fd69f75638f09a80eba61ce981558f26fda0bf764b8edb61324c4b47b93388965bda9149c1967182b16858f829842d4f33191582189b1ffd5fc1edd93935ef2131fddcf03067dba23071c8a60bd879b1e420d96b88e8ea7c99824877a43a4d5d0186950580d670fbfecafaeb66df0956d6575ba5c9bb219cbd5e13d4482867fa616be", @typed={0x97, 0x23, 0x0, 0x0, @binary="e86f4211edce05fa3471122dba3a57b732cf48c093083d40b377f20ccc6edbc5372e5541f109c6527d9729ad57fb8e2150bb68bd26cf86502c7a49422ccaa77652ca5071f93ab978ab7bb653fb1e287e317f45fcedc1c0ab1638519f0a1254ee20d00af073322af5237ff9c9b5c8b4a1b10c1a5c3b364d6a16b205698471316875990a4bc54cf9ae5cb4f993f5b539985e685b"}, @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x7fff}, @typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x9}, @generic="9e0722c1b8fff0a23fd6ce4a6fcad986cf684816a0be931c91c79bea5755845342beb2248e3001049c487681dc3ed0b344ef85d80967a69845e37a2af7958008bf83080cd2972f402d418715f3480d7949cfc5740d0eaf096861914730ff74555b993a7e3c2e4c24e02fd15a042cb6e5817aa486d66414dcb6ee5e12", @generic="aaed8abe8e0e0f142573ce9439a002a95388ffbaeaa9c908247aa58fc0dd0ff6b9ce681577630b36c5d3c780d89bf867d740abec368cee2cb0e78ffce4929ca12a38c76b50bed2b303bd7a0bc243232bfdf0c71c6ca78f72295309f77e84ba0964f1da3f7cce609fa2cc86e658e33637cc1271b1810f822404cc1626f1ab7b8e26664ccf9cad1130fa130cc3ea2437835924acc1849051144994afb1da42d483c63de38c0cca1c51cca6f78544fef36eec6b6dd437b411c944d98f7a08dafdc881b219eca3b59cfa058b580258fafa9cfec2e38a25973255b6dc4b8395ababd69c211368e9fc885154de387afa"]}]}, 0x13d4}, 0x1, 0x0, 0x0, 0x44050}, 0x881) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x1, 0x7f, 0x8, 0x61, 0x0, 0x8, 0x60040, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x704, 0x0, @perf_bp={&(0x7f0000001540)}, 0x202, 0x9, 0xfc, 0x8, 0x8, 0xfffffffb, 0x0, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x9, r2, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001600)={0x0, r3, 0x10001, 0x7fff, 0x3ff, 0x20}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:19:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3f) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd_index=0x6, 0x938, 0x0, 0x0, 0x1a, 0x95bc5dd5d67caaf8}, 0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x10, r1, 0x8000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005080), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) open_tree(r5, &(0x7f00000002c0)='./file0\x00', 0x9100) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 13:19:47 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 13:19:47 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0x0, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="53edb8999e6b4e8b204b9374eea3d3ac2d0b920a05b4783d019c77c996f08a6344ce4ea24a52237c6b13057f6cfb43e3eb83d6e7596221ca3310b15a5eb6a3550e6f244c2ae5b63834294876aca06a2cabe4515aa6e4617fac7544619c3d3a3c176eca90c54262dfa64e25c1b4264645b060f622387d96064f56abb10afdb83fb56ae7"]) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') [ 1549.451394] FAULT_INJECTION: forcing a failure. [ 1549.451394] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.452812] CPU: 1 PID: 9936 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1549.453654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.454644] Call Trace: [ 1549.454972] dump_stack+0x107/0x167 [ 1549.455402] should_fail.cold+0x5/0xa [ 1549.455864] ? create_object.isra.0+0x3a/0xa20 [ 1549.456408] should_failslab+0x5/0x20 [ 1549.456861] kmem_cache_alloc+0x5b/0x310 [ 1549.457331] create_object.isra.0+0x3a/0xa20 [ 1549.457840] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1549.458434] kmem_cache_alloc_bulk+0x168/0x320 [ 1549.458976] io_submit_sqes+0x6f76/0x85c0 [ 1549.459475] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1549.460069] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1549.460633] ? lock_downgrade+0x6d0/0x6d0 [ 1549.461112] ? find_held_lock+0x2c/0x110 [ 1549.461587] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.462086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.462652] ? wait_for_completion_io+0x270/0x270 [ 1549.463213] ? rcu_read_lock_any_held+0x75/0xa0 [ 1549.463773] ? vfs_write+0x354/0xa70 [ 1549.464204] ? fput_many+0x2f/0x1a0 [ 1549.464622] ? ksys_write+0x1a9/0x260 [ 1549.465069] ? __ia32_sys_read+0xb0/0xb0 [ 1549.465550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.466161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.466766] do_syscall_64+0x33/0x40 [ 1549.467201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.467803] RIP: 0033:0x7f24549c7b19 [ 1549.468242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.470362] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.471247] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1549.472091] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1549.472917] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.473733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.474572] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1549.486300] FAULT_INJECTION: forcing a failure. [ 1549.486300] name failslab, interval 1, probability 0, space 0, times 0 13:19:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20020000) r0 = getpgrp(0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ptrace$peeksig(0x4209, r0, &(0x7f0000000100)={0xfffffffffffffffb, 0x0, 0x2}, &(0x7f0000000140)=[{}, {}]) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="d48eb3d9dc66cbc5910cf1acc868d8632e806d845694eda6b293201d31234a816406abc0db7ffb0b28f92686a2f22964c4f03bd9207a26", 0x37}, {&(0x7f0000000300)="0c4282c50c02bac7fffaa98b49708ae6d590ac76c3248e68d5f864128039b1a6de8ce026ec97c46634fad0102b29ea8341d1db5739cddc91a517c78941b0a9b0819a22c0af082bb10762eabe189b31171803f3fd6cf70e5a0ebced7882318b4b8f069d1a633960a0651611a84cb723a49877533a1586035a0685f9dfb5182a410a028ebf7177068bac43e7625e961c5296a79f9df18c87c08143c26e3cf7937e102912961559b432b928d52adbc4164423a7383d438b2fcc1e609fdab87989cd563104f621ddeaa3c72de28755d556acd5c5e32bb83354f7b212fad692d390b239640ddc57ca989a73cd455a788644531bd203223d34a1a7", 0xf8}, {&(0x7f0000000400)="b41fa2b4e84da96b5e2f44b593be2e5cf916caae8de6339043c77eb2ef12d15d8e1b53f88f556d8e9ccd7249f8905bfb6f8e78058d2464f5f3b3b74cdf97e23a1719cf5951389e15bde25bbb51f537bfcf872c53e26eda5e2387cea7c22454", 0x5f}, {&(0x7f0000000480)="134cc278b48dc908b30e0ade478c790204180b26f5c7937435fdacb7f1c5b3a8856d1cfddcb112bffd521944a9d6f06ae825c43c57ac60e6d22168a79930fc1c39991d120b06fa5d1522b559dafface529796e1de243d4b625ad30cd259398851878b4a407", 0x65}, {&(0x7f0000000500)="28bc322b3cb5ed2c3e6d8587f09a1234835e6e24580660ca77a4bc2633cafd7b7d69919c3adcf80742ddcb9a3b570154f7ece02915c633ea7ce2325d764dd9f52d02963b9e8b8f8ae4a86767ef06d17cba6fa585", 0x54}, {&(0x7f0000000580)="a937571a70e897b57a9c0c65c9ef372954ac60ea3c1ed56700fcf2b67ce6f0e915410b25aa5687407517bdf7a07262352241c980d8db903e21a74bf62a16b1e611d5245f25f0a06a264195a6bccddfcceaeff92253252a50ee971ce40243590db3b3abf797071bb42a389b31a78701f0dd9209afedd834ebe09c8ef8300c3217a11398a75e5e175c68128429cb925848984e", 0x92}, {&(0x7f0000000280)="060973f16b703172475281de71740975bafca60e17c61346dfcee050a9bd102cf8", 0x21}, {&(0x7f0000000640)="5883c3b7251c6a06567f788816af0b893a0e0ab10cba64f7e7c93a64c6d0bb8a033dead55ea819ef9ac0edf5acd26d5b0929a608ff40a2f801c105d996b3906524f921f6db79440813b1ff996be628af675e37d267c2ea6800e32cdf531350e8cf93bf78c4c6c9fce45e9a4e49fa2c3198976584c24169705a9427f7ae78c57516bfac62ff2782d8d72a1629433ac082d73b0a25870fc7b1bf620b92b53367", 0x9f}, {&(0x7f0000000700)="a877195bfb20e37f4e8fe1c2f7c2378fac40feb2e885b840d05c8dface6b77183314e29e1ac036e4424d029617469bed84", 0x31}, {&(0x7f0000000740)="ba43f4f60782bd829e2a10d4a87d4e0cbd5ce510c966aecf112700764e79ffc05486f77c9bfe3c4d71db0bc37e040c937665bdc5baeddd0a0026f171c76d8e1586522c1abbcf357696ddaaa3b5a3e108d69e9005dc466ac02dd0adb897c4d40b8e426909decf388088930939f7cb9c98c6bb70b5650decaf08b92256255eacc9a582769939ef337d1aab0ed5838fd9c88d610cbc0a5faa518fcd51612ff955bdcd0cd9b0f9d5a64a4e231e79c17b4af62ce5528df29d45876ef277acfb4bee8eb167813e92062f15b77af27dc045ba19b9fe08d9d2f32a6bae03f5", 0xdb}], 0xa, &(0x7f0000000900)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x82b}, @ra={0x5, 0x2, 0x6}]}}}], 0x28}, 0x11) sendfile(r2, r6, 0x0, 0x35d) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x7, 0x7, 0x4, 0x7, 0x0, 0x8, 0x6108, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x21, 0x4, @perf_config_ext={0x6, 0x6}, 0x40002, 0x6, 0x9, 0x3, 0x5, 0xffff, 0x3, 0x0, 0x3, 0x0, 0x101}) setns(r3, 0x80) [ 1549.487832] CPU: 1 PID: 9948 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1549.488758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.489735] Call Trace: [ 1549.490049] dump_stack+0x107/0x167 [ 1549.490474] should_fail.cold+0x5/0xa [ 1549.490925] ? xas_alloc+0x336/0x440 [ 1549.491377] should_failslab+0x5/0x20 [ 1549.491835] kmem_cache_alloc+0x5b/0x310 [ 1549.492324] xas_alloc+0x336/0x440 [ 1549.492751] xas_create+0x34a/0x10d0 [ 1549.493200] ? kernel_text_address+0xf2/0x120 [ 1549.493726] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1549.494338] xas_store+0x8c/0x1c40 [ 1549.494759] __xa_store+0x164/0x2d0 [ 1549.495186] ? xa_delete_node+0x280/0x280 [ 1549.495664] ? trace_hardirqs_on+0x5b/0x180 [ 1549.496177] xa_store+0x31/0x50 [ 1549.496572] __io_uring_add_tctx_node+0x1cf/0x520 [ 1549.497145] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1549.497765] __do_sys_io_uring_enter+0x14de/0x1920 [ 1549.498339] ? lock_downgrade+0x6d0/0x6d0 [ 1549.498823] ? find_held_lock+0x2c/0x110 [ 1549.499295] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.499817] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.500381] ? wait_for_completion_io+0x270/0x270 [ 1549.500953] ? rcu_read_lock_any_held+0x75/0xa0 [ 1549.501457] ? vfs_write+0x354/0xa70 [ 1549.501899] ? fput_many+0x2f/0x1a0 [ 1549.502328] ? ksys_write+0x1a9/0x260 [ 1549.502782] ? __ia32_sys_read+0xb0/0xb0 [ 1549.503258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.503882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.504485] do_syscall_64+0x33/0x40 [ 1549.504916] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.505509] RIP: 0033:0x7f94eea4db19 [ 1549.505936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.508083] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.508965] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1549.509740] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1549.510574] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.511413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.512275] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:19:47 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = signalfd4(r1, &(0x7f00000000c0), 0x8, 0x0) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0/file0\x00', 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50880}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x5bc, 0x6, 0x0, 0x7fffffff, 0x6, 0x0, 0x5, 0x2, 0x8000, 0x1, 0x20}) [ 1549.574515] FAULT_INJECTION: forcing a failure. [ 1549.574515] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.577331] CPU: 0 PID: 9949 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1549.578720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.580434] Call Trace: [ 1549.580972] dump_stack+0x107/0x167 [ 1549.581717] should_fail.cold+0x5/0xa [ 1549.582499] ? xas_alloc+0x336/0x440 [ 1549.583262] should_failslab+0x5/0x20 [ 1549.584055] kmem_cache_alloc+0x5b/0x310 [ 1549.584880] xas_alloc+0x336/0x440 [ 1549.585602] xas_create+0x34a/0x10d0 [ 1549.586365] ? kernel_text_address+0xf2/0x120 [ 1549.587273] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1549.588346] xas_store+0x8c/0x1c40 [ 1549.589080] __xa_store+0x164/0x2d0 [ 1549.589817] ? xa_delete_node+0x280/0x280 [ 1549.590659] ? trace_hardirqs_on+0x5b/0x180 [ 1549.591541] xa_store+0x31/0x50 [ 1549.592221] __io_uring_add_tctx_node+0x1cf/0x520 [ 1549.593200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1549.594274] __do_sys_io_uring_enter+0x14de/0x1920 [ 1549.595272] ? lock_downgrade+0x6d0/0x6d0 [ 1549.596118] ? find_held_lock+0x2c/0x110 [ 1549.596943] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.597832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.598812] ? wait_for_completion_io+0x270/0x270 [ 1549.599808] ? rcu_read_lock_any_held+0x75/0xa0 [ 1549.600746] ? vfs_write+0x354/0xa70 [ 1549.601504] ? fput_many+0x2f/0x1a0 [ 1549.602238] ? ksys_write+0x1a9/0x260 [ 1549.603012] ? __ia32_sys_read+0xb0/0xb0 [ 1549.603850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.604914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.605956] do_syscall_64+0x33/0x40 [ 1549.606703] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.607742] RIP: 0033:0x7fd021856b19 [ 1549.608497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.612226] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.613760] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1549.615194] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1549.616640] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.618073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.619506] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:19:47 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 1549.669744] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:19:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) r5 = getegid() setresgid(r5, 0x0, r5) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) r7 = getegid() setresgid(r7, 0x0, r7) setxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r4, @ANYBLOB="040006000000000008000700", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="000006981300000000000012d3000080"], 0x4c, 0x2) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r8 = epoll_create(0x3) kcmp(0x0, 0x0, 0x6, r8, r2) write$binfmt_elf64(r3, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 13:19:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000001500)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004af794da6c3e945152dbfdd0601f245f9b40708decb153869204d6525dd24c26d905281fd32ba053df287a7e5492c0325fab9d91ad1251110fd76e1769e79e6edd0119ddea5d125a77c8b9992", 0x69, 0x2100}], 0x0, &(0x7f0000000140)) r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="27a8e0c0b691755d1af7ac550763ee90ffbea843e47891d20c730731ef14a219f078", 0x22, 0x5}], 0x10800a, &(0x7f0000000240)={[{@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@fat=@showexec}, {@fat=@dos1xfloppy}], [{@euid_gt={'euid>', 0xee00}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@measure}]}) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x102, 0x88) 13:19:47 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0x0, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:19:47 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 13:19:47 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 13:19:47 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x639d1876ab868171, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000380)=""/168, 0xa8}], 0x5, 0x2, 0x1) fallocate(r2, 0x0, 0x0, 0x8800000) lseek(r1, 0x0, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x4, 0x9, 0x3, 0xffffffed, 0x100}) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(r4, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40800, 0x84) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) sendfile(r0, r5, 0x0, 0x100000001) [ 1549.852491] FAULT_INJECTION: forcing a failure. [ 1549.852491] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.855323] CPU: 0 PID: 9968 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1549.856734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.858451] Call Trace: [ 1549.858996] dump_stack+0x107/0x167 [ 1549.859773] should_fail.cold+0x5/0xa [ 1549.860557] ? create_object.isra.0+0x3a/0xa20 [ 1549.861480] should_failslab+0x5/0x20 [ 1549.862261] kmem_cache_alloc+0x5b/0x310 [ 1549.863085] create_object.isra.0+0x3a/0xa20 [ 1549.863996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1549.865024] kmem_cache_alloc_bulk+0x168/0x320 [ 1549.865961] io_submit_sqes+0x6f76/0x85c0 [ 1549.866824] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1549.867836] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1549.868823] ? lock_downgrade+0x6d0/0x6d0 [ 1549.869658] ? find_held_lock+0x2c/0x110 [ 1549.870485] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.871364] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.872360] ? wait_for_completion_io+0x270/0x270 [ 1549.873335] ? rcu_read_lock_any_held+0x75/0xa0 [ 1549.874278] ? vfs_write+0x354/0xa70 [ 1549.875029] ? fput_many+0x2f/0x1a0 [ 1549.875776] ? ksys_write+0x1a9/0x260 [ 1549.876546] ? __ia32_sys_read+0xb0/0xb0 [ 1549.877371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.878435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.879479] do_syscall_64+0x33/0x40 [ 1549.880261] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.881292] RIP: 0033:0x7f24549c7b19 [ 1549.882049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.885792] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.887330] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1549.888783] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1549.890228] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.891670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.893133] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1549.909639] EXT4-fs error (device loop2): ext4_fill_super:4962: inode #2: comm syz-executor.2: iget: bad extended attribute block 146 [ 1549.917779] EXT4-fs (loop2): get root inode failed [ 1549.919064] EXT4-fs (loop2): mount failed [ 1549.965526] FAULT_INJECTION: forcing a failure. [ 1549.965526] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.967276] CPU: 1 PID: 9984 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1549.968317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1549.969206] Call Trace: [ 1549.969648] dump_stack+0x107/0x167 [ 1549.970052] should_fail.cold+0x5/0xa [ 1549.970489] ? xas_alloc+0x336/0x440 [ 1549.970919] should_failslab+0x5/0x20 [ 1549.971368] kmem_cache_alloc+0x5b/0x310 [ 1549.971851] xas_alloc+0x336/0x440 [ 1549.972246] xas_create+0x34a/0x10d0 [ 1549.972671] ? kernel_text_address+0xf2/0x120 [ 1549.973177] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1549.973760] xas_store+0x8c/0x1c40 [ 1549.974166] __xa_store+0x164/0x2d0 [ 1549.974576] ? xa_delete_node+0x280/0x280 [ 1549.975041] ? trace_hardirqs_on+0x5b/0x180 [ 1549.975539] xa_store+0x31/0x50 [ 1549.975923] __io_uring_add_tctx_node+0x1cf/0x520 [ 1549.976458] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1549.977048] ? __do_sys_io_uring_enter+0x628/0x1920 [ 1549.977610] __do_sys_io_uring_enter+0x14de/0x1920 [ 1549.978165] ? lock_downgrade+0x6d0/0x6d0 [ 1549.978603] ? find_held_lock+0x2c/0x110 [ 1549.979059] ? io_submit_sqes+0x85c0/0x85c0 [ 1549.979527] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1549.980087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1549.980670] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1549.981280] ? trace_hardirqs_on+0x5b/0x180 [ 1549.981765] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1549.982370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1549.982945] do_syscall_64+0x33/0x40 [ 1549.983360] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1549.983947] RIP: 0033:0x7fd021856b19 [ 1549.984354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1549.986411] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1549.987256] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1549.988070] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1549.988867] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.989660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.990461] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1550.004772] EXT4-fs error (device loop2): ext4_fill_super:4962: inode #2: comm syz-executor.2: iget: bad extended attribute block 146 [ 1550.007115] EXT4-fs (loop2): get root inode failed [ 1550.007822] EXT4-fs (loop2): mount failed [ 1550.015397] FAULT_INJECTION: forcing a failure. [ 1550.015397] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.017106] CPU: 1 PID: 9987 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1550.017878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1550.018923] Call Trace: [ 1550.019230] dump_stack+0x107/0x167 [ 1550.019643] should_fail.cold+0x5/0xa [ 1550.020110] ? xas_alloc+0x336/0x440 [ 1550.020634] should_failslab+0x5/0x20 [ 1550.021082] kmem_cache_alloc+0x5b/0x310 [ 1550.021686] xas_alloc+0x336/0x440 [ 1550.022160] xas_create+0x34a/0x10d0 [ 1550.022605] ? kernel_text_address+0xf2/0x120 [ 1550.023198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1550.023913] xas_store+0x8c/0x1c40 [ 1550.024473] __xa_store+0x164/0x2d0 [ 1550.025013] ? xa_delete_node+0x280/0x280 [ 1550.025488] ? trace_hardirqs_on+0x5b/0x180 [ 1550.025969] xa_store+0x31/0x50 [ 1550.026415] __io_uring_add_tctx_node+0x1cf/0x520 [ 1550.027000] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1550.027670] __do_sys_io_uring_enter+0x14de/0x1920 [ 1550.028320] ? lock_downgrade+0x6d0/0x6d0 [ 1550.028914] ? find_held_lock+0x2c/0x110 [ 1550.029434] ? io_submit_sqes+0x85c0/0x85c0 [ 1550.030041] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1550.030608] ? wait_for_completion_io+0x270/0x270 [ 1550.031341] ? rcu_read_lock_any_held+0x75/0xa0 [ 1550.031955] ? vfs_write+0x354/0xa70 [ 1550.032446] ? fput_many+0x2f/0x1a0 [ 1550.032836] ? ksys_write+0x1a9/0x260 [ 1550.033267] ? __ia32_sys_read+0xb0/0xb0 [ 1550.033797] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1550.034439] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1550.035078] do_syscall_64+0x33/0x40 [ 1550.035637] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1550.036338] RIP: 0033:0x7f94eea4db19 [ 1550.036930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1550.038889] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1550.039770] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1550.040549] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1550.041369] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.042187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.042999] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 [ 1550.136656] perf: interrupt took too long (6260 > 6233), lowering kernel.perf_event_max_sample_rate to 31000 [ 1550.150234] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:20:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x5c04, &(0x7f0000000080)={0x0, 0xcb66, 0x4, 0x0, 0x363}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:20:00 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 13:20:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) pwritev2(r1, &(0x7f0000001680)=[{&(0x7f0000000080)="441903a5cf6870c980b7eef4a5925f29fd8e3abdf0539615906bc55f0136259b300ad849246ded46369b46852a29f7f6fe31a03731b78f27a82cc1274a75325334800c37c54d0cc9869dc8036b914604333281ef7b84eb94791abb22624a7ebcfe586ec050edd3417b6c76f2a2361619198e9ea865ccf05ba12c0fb44e62ae73f74f0c33ae6bf6cd3602216d271522f1913fd7ea8a71cee61c0e63121fe82501292f78d679de79bea75644e96e6c346caefdb574d6d2178aba2c549f99c85b77d1aff05cc2bd5c55661de303a19915b72b229837ed683891ca84c117", 0xdc}, {&(0x7f0000000180)="94d5ff66751636d551ec18b10fb6c3b47a463724fe94fb471ec7a4c8abe3ff029e5b627a3e31714477e97e7b7edd27d0e8f8b76db81f3f7a354ad950aa12fca5215e6a249bb730aa063fdff455c0d83e9848ee723bdfdd523946dab05a543a567a524bfd31f713c36bc6c26d082f171aecdb1e9f2995990d690c973eee1bdc33821cc964bc6d0e9254de4ba49161dccb75407a293739619adf59fb872c7a226080d08a96f7a07d2ecf0f7d7cc390e24a5e90d125094c926939aa0cf1a70eb33aafa59277efbb9f5f7d064a9a5b082b7545f5ebe62b5d1ad9ca00b4b05b69e250591fef3952c2", 0xe6}, {&(0x7f0000000280)="45163156f083b7e193f5b8fe32e545e69b37cc2612195d33004d1cbc913475cb2490ef65136b69ebcb71d2008a7f5fb0f34036b24c90a1bcae2c68378b6103c15cccc67b9bb6ba152bd4a1689075506d39de737c4407a55f8c35e1f85b52d01a60a806af22c9e844ac442bed075e2b13199c9cee076b501bc2ed194b6a79d84fee0b543aa584fedacb9ed9ef186229a678723e5b2533f35f05dec46e9105638d20fa8ce4807b0631115687540f032422bfa4aaa6c88777fb8018c34da526", 0xbe}, {&(0x7f0000000340)="9f81b25572195fb170c1c7af2fa5d6fbd1a4c638c2357ede9c09ea56595cefd673105d3854b86ee22781f374a734d997c16dfca686e7739d64ac3619305b543777a752927ffc6ae7bd979e1eb29cd6ea54ca7fb89ff6af319f28666928b37ce8bca4f33c350aee73d738a62e601b92d988a20e4d396d921b4347", 0x7a}, {&(0x7f00000003c0)="3d070637", 0x4}, {&(0x7f0000000400)="81fd50ba64a03f09a2ebbeeeb16b5f43f62e8bc51c306426eccbb78a1ce2", 0x1e}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="3c459c1f33324120d813bf1e7db9a16351639b146cc8b5187a16accf0f3cc721a83b32b432b215aa743277eeb50b1cc10f5d1f0d5df4320545ed8225aa6f869e01e04b2e750e158fda5a83cc4e84ff948f3f7e15726486bdf680672f98b354b10519a956acc2da4b968928825891d949c1d162ef37cf5fc5d6531246", 0x7c}, {&(0x7f0000001580)="ead14e7ab68369982d32851c668bd9b51542006c8c65bdd3f8d49f027d54c155bae271e839bbfef17d57ce9069b2e5e7bdfa26534e96385f42b3de478e75f53fa4ee04df8978c00ea87f59af0e490a30488961ff262cf88de7d0bd0ee7ec08aa5e3d7f663f5f797f2680ee948e53d57f109d759329db47521a3e71bdec406a953bdd72e89e0e6b2db486f26d683975385b0d789033821235ec09041ad2bf7a3129fd7833457c415d5513eb8da5fcee1c14ee22742dc1d183a786354b3be757d19b407afb5a42624d817684f4f1f6ba07fec02d3cfa0fdc9abe9c949e41106acdbd0bccc2", 0xe4}], 0x9, 0x4729, 0x0, 0x1b) 13:20:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0x0, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:20:00 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 13:20:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4042}, 0x4000000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 13:20:00 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 13:20:00 executing program 6: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:20:00 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, 0xffffffffffffffff, 0x8000000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x1d}}) [ 1562.575252] FAULT_INJECTION: forcing a failure. [ 1562.575252] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.575268] CPU: 0 PID: 10008 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1562.575274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.575278] Call Trace: [ 1562.575293] dump_stack+0x107/0x167 [ 1562.575307] should_fail.cold+0x5/0xa [ 1562.575319] ? create_object.isra.0+0x3a/0xa20 [ 1562.575331] should_failslab+0x5/0x20 [ 1562.575345] kmem_cache_alloc+0x5b/0x310 [ 1562.575356] ? mark_held_locks+0x9e/0xe0 [ 1562.575367] create_object.isra.0+0x3a/0xa20 [ 1562.575378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.575391] kmem_cache_alloc_bulk+0x168/0x320 [ 1562.575405] io_submit_sqes+0x6f76/0x85c0 [ 1562.575430] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1562.575440] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1562.575452] ? lock_downgrade+0x6d0/0x6d0 [ 1562.575461] ? find_held_lock+0x2c/0x110 [ 1562.575473] ? io_submit_sqes+0x85c0/0x85c0 [ 1562.575489] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1562.575502] ? wait_for_completion_io+0x270/0x270 [ 1562.575514] ? rcu_read_lock_any_held+0x75/0xa0 [ 1562.575523] ? vfs_write+0x354/0xa70 [ 1562.575534] ? fput_many+0x2f/0x1a0 [ 1562.575545] ? ksys_write+0x1a9/0x260 [ 1562.575555] ? __ia32_sys_read+0xb0/0xb0 [ 1562.575568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.575577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.575591] do_syscall_64+0x33/0x40 [ 1562.575600] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1562.575607] RIP: 0033:0x7f24549c7b19 [ 1562.575619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.575624] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1562.575637] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1562.575643] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1562.575649] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.575655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.575661] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1562.602419] FAULT_INJECTION: forcing a failure. [ 1562.602419] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.602441] CPU: 1 PID: 10019 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1562.602451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.602457] Call Trace: [ 1562.602481] dump_stack+0x107/0x167 [ 1562.602505] should_fail.cold+0x5/0xa [ 1562.602531] ? create_object.isra.0+0x3a/0xa20 [ 1562.602552] should_failslab+0x5/0x20 [ 1562.602570] kmem_cache_alloc+0x5b/0x310 [ 1562.602590] ? mark_held_locks+0x9e/0xe0 [ 1562.602611] create_object.isra.0+0x3a/0xa20 [ 1562.602630] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.602653] kmem_cache_alloc+0x159/0x310 [ 1562.602677] xas_alloc+0x336/0x440 [ 1562.602697] xas_create+0x34a/0x10d0 [ 1562.602724] ? kernel_text_address+0xf2/0x120 [ 1562.602743] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1562.602763] xas_store+0x8c/0x1c40 [ 1562.602794] __xa_store+0x164/0x2d0 [ 1562.602814] ? xa_delete_node+0x280/0x280 [ 1562.602839] ? trace_hardirqs_on+0x5b/0x180 [ 1562.602862] xa_store+0x31/0x50 [ 1562.602882] __io_uring_add_tctx_node+0x1cf/0x520 13:20:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x110, r1, 0x10000000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r7}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/140, 0x8c}], 0x5, &(0x7f0000000840)=""/151, 0x97}, 0x0, 0x40010000, 0x0, {0x1, r7}}, 0x101) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x800) [ 1562.602904] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1562.602935] __do_sys_io_uring_enter+0x14de/0x1920 [ 1562.602957] ? lock_downgrade+0x6d0/0x6d0 [ 1562.641468] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1562.642022] ? find_held_lock+0x2c/0x110 [ 1562.642047] ? io_submit_sqes+0x85c0/0x85c0 [ 1562.661675] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1562.662644] ? wait_for_completion_io+0x270/0x270 [ 1562.663612] ? rcu_read_lock_any_held+0x75/0xa0 [ 1562.664550] ? vfs_write+0x354/0xa70 [ 1562.665302] ? fput_many+0x2f/0x1a0 [ 1562.666034] ? ksys_write+0x1a9/0x260 [ 1562.666822] ? __ia32_sys_read+0xb0/0xb0 [ 1562.667660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.668740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.669810] do_syscall_64+0x33/0x40 [ 1562.670586] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1562.671643] RIP: 0033:0x7fd021856b19 [ 1562.672406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.676168] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1562.677719] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1562.679172] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1562.680638] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.682229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.683970] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1562.686410] FAULT_INJECTION: forcing a failure. [ 1562.686410] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.688624] CPU: 0 PID: 10017 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1562.689699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.690987] Call Trace: [ 1562.691399] dump_stack+0x107/0x167 [ 1562.691980] should_fail.cold+0x5/0xa [ 1562.692571] ? create_object.isra.0+0x3a/0xa20 [ 1562.693283] should_failslab+0x5/0x20 [ 1562.693878] kmem_cache_alloc+0x5b/0x310 [ 1562.694508] ? mark_held_locks+0x9e/0xe0 [ 1562.695140] create_object.isra.0+0x3a/0xa20 [ 1562.695821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.696633] kmem_cache_alloc+0x159/0x310 [ 1562.697185] xas_alloc+0x336/0x440 [ 1562.697587] xas_create+0x34a/0x10d0 [ 1562.698011] ? kernel_text_address+0xf2/0x120 [ 1562.698520] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1562.699115] xas_store+0x8c/0x1c40 [ 1562.699519] __xa_store+0x164/0x2d0 [ 1562.699938] ? xa_delete_node+0x280/0x280 [ 1562.700400] ? trace_hardirqs_on+0x5b/0x180 [ 1562.700886] xa_store+0x31/0x50 [ 1562.701262] __io_uring_add_tctx_node+0x1cf/0x520 [ 1562.701798] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1562.702404] __do_sys_io_uring_enter+0x14de/0x1920 [ 1562.702956] ? lock_downgrade+0x6d0/0x6d0 [ 1562.703419] ? find_held_lock+0x2c/0x110 [ 1562.703885] ? io_submit_sqes+0x85c0/0x85c0 [ 1562.704380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1562.704921] ? wait_for_completion_io+0x270/0x270 [ 1562.705458] ? rcu_read_lock_any_held+0x75/0xa0 [ 1562.705990] ? vfs_write+0x354/0xa70 [ 1562.706422] ? fput_many+0x2f/0x1a0 [ 1562.706843] ? ksys_write+0x1a9/0x260 [ 1562.707285] ? __ia32_sys_read+0xb0/0xb0 [ 1562.707762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.708364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.708978] do_syscall_64+0x33/0x40 [ 1562.709406] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1562.709999] RIP: 0033:0x7f94eea4db19 [ 1562.710426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.712566] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1562.713450] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1562.714266] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1562.715094] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.715924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.716751] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:20:00 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 13:20:00 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f00000002c0)) openat(r2, &(0x7f0000000000)='./file0\x00', 0x1, 0x20) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:20:00 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:20:00 executing program 0: exit_group(0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@private0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000085c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/147, 0x93}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000001880)=""/26, 0x1a}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/104, 0x68}, {&(0x7f0000002940)=""/58, 0x3a}, {&(0x7f0000002980)=""/175, 0xaf}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x6, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000004000)=[{&(0x7f0000002c00)=""/21, 0x15}, {&(0x7f0000002c40)=""/35, 0x23}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/72, 0x48}, {&(0x7f0000003e40)=""/248, 0xf8}, {&(0x7f0000002d40)=""/8, 0x8}, {&(0x7f0000002d80)=""/21, 0x15}, {&(0x7f0000003f40)=""/188, 0xbc}], 0x8, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000008500)=[{&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/133, 0x85}, {&(0x7f0000006280)=""/42, 0x2a}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/1, 0x1}, {&(0x7f0000007300)=""/79, 0x4f}, {&(0x7f0000007380)=""/254, 0xfe}, {&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/101, 0x65}], 0xa}}], 0x5, 0x43, &(0x7f0000008700)) sendmsg$nl_xfrm(r1, &(0x7f0000008840)={&(0x7f0000008740)={0x10, 0x0, 0x0, 0x110540}, 0xc, &(0x7f0000008800)={&(0x7f0000008780)=@delpolicy={0x50, 0x14, 0x100, 0x70bd26, 0x25dfdbff, {{@in6=@local, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e20, 0xfff, 0xa, 0x100, 0x80, 0x3a, 0x0, 0xffffffffffffffff}, 0x6e6bbc}}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 13:20:00 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 13:20:00 executing program 2: r0 = socket(0x0, 0x0, 0x0) r1 = accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = accept4(r1, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000100)=0x80, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x400, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffefe7, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x94, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @broadcast, @initial, {0x7, 0x4}}, 0x808, 0x7, @device_a, {0x0, 0x5, @random="35fed9b4ff"}, @val={0x1, 0x7, [{0x5, 0x1}, {0x5, 0x1}, {0x30}, {0x48, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x1}]}, @val={0x2d, 0x1a, {0x8, 0x3, 0x0, 0x0, {0x0, 0x5, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}, 0x300, 0xb73c, 0x20}}, [{0xdd, 0x35, "dee15b0ba8e97d9e82884583e6161811989eb22585aa861bd986781494ee34adda5c70a47458bac5b27a155169edc6b794cd1a7f0c"}, {0xdd, 0x9, "d0e3b3256f5ef7621f"}]}}, @NL80211_ATTR_FRAME={0x33e, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @random="52572808cd45", {0x6, 0x8}}, @ver_80211n={0x0, 0x20, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x1, 0x1c, @void, [{0xdd, 0x2d, "74e9e23768d46a1d5652f522d941633c91837f30b7194e5dc1a0715e85130d6d4cf773cdeab0792942df002117"}, {0xdd, 0x2f, "24304fd4d3832cf4f86b559fb1fe4d88a0bfbef6bca4e9159abcc1ccd0fcbb7e3ce4a3d9a23f144cebb10176c94e3c"}, {0xdd, 0x31, "0d098635c184093e05fc4976e148298b94e699f92d5dd7f3a014fc793a47b12411ca8213a7297c76994937e14c917392d2"}, {0xdd, 0xb1, "aa514eb25da4914596334e103af29731e3bb5d6f08cafa92dd9ab64d374d7a72ed44b2f3b1e4939cf07a918b5579904f88a07f0fb663ef85919d747038fa918bb83970bf652c5ea01d580da181c5c76fdba6129936b88cd7207a1d860790bd82647bfcb591fb0f94efc85e32d642f61b42dbecacf9a0a3d7c024fc665019c088d26576feb28cf5bdf278a60740c9081e19707377fea72d97e68e6f4f07ac301378e1ddd1032cb6950f69c0b416e0d1bd9f"}, {0xdd, 0xe6, "a3ebb31872923e5aea7a101cd85de46df548dbcca12dfd6c574a56b4da21e2fc84c8b0f7b8510d2c6d0ec3f7d2721300438060899e161c2c4a1d3a33e633f0ca8fe4ec3e467156d6d4d8bb7f3d65824f65e9dd48bb8b7055eddd76db8f48d4d6f8e18aa75da7ccecc25f7842b7fe94e3e81c5ee9c68b7512bedcc1d32db2f72d09034d8163a80e5fa5d5866bac937063c3dcd34e7df4bda5f6a3b6458b5b564bf522d35aeb29d1fe32e9b0d5c90bf8e187e53158c63b91d6e62711685cb9814e0dba04ddd9b30c9d91a31820fa14a445481992370236b03f8bd22f6f58a6f9504be8fb616f17"}, {0xdd, 0xe8, "b4264cf8f35e7f5101b357c011ac571bb6713027110825ad2d3a932c562294ee404172bd2c390285a1f7d970e77c2191524f7a392eb0da8fcf8a3f0933b07d9c0f64a4129cc1535a09dcbe64054980f957bf3c21155114225af4bf1ac3476c011ea06628de9e456940e339c6e63115cc907da594d721431c36e598c6f770132e901c8b277afad64dc12fc7fe7ad1daf6489539c6c13d99e031934031ef1609f957d5ee3005a69841067c88c915cc1f2a28e82d94280a0aacfabd1fdff0868f73e8b46197d90db4ef86686a8e3a390bf1c91b9390267a01ab81770ff27d88c823619afead0fad3333"}]}}]}, 0x400}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/ptp', 0x410080, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}]}, 0x2c}}, 0x24008000) [ 1562.940455] FAULT_INJECTION: forcing a failure. [ 1562.940455] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.943430] CPU: 1 PID: 10031 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1562.944924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1562.946615] Call Trace: [ 1562.947147] dump_stack+0x107/0x167 [ 1562.948002] should_fail.cold+0x5/0xa [ 1562.948881] ? create_object.isra.0+0x3a/0xa20 [ 1562.949853] should_failslab+0x5/0x20 [ 1562.950695] kmem_cache_alloc+0x5b/0x310 [ 1562.951618] ? mark_held_locks+0x9e/0xe0 [ 1562.952452] create_object.isra.0+0x3a/0xa20 [ 1562.953447] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1562.954569] kmem_cache_alloc_bulk+0x168/0x320 [ 1562.955547] io_submit_sqes+0x6f76/0x85c0 [ 1562.956541] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1562.957584] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1562.958575] ? lock_downgrade+0x6d0/0x6d0 [ 1562.959499] ? find_held_lock+0x2c/0x110 [ 1562.960408] ? io_submit_sqes+0x85c0/0x85c0 [ 1562.961340] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1562.962323] ? wait_for_completion_io+0x270/0x270 [ 1562.963308] ? rcu_read_lock_any_held+0x75/0xa0 [ 1562.964277] ? vfs_write+0x354/0xa70 [ 1562.965111] ? fput_many+0x2f/0x1a0 [ 1562.965914] ? ksys_write+0x1a9/0x260 [ 1562.966793] ? __ia32_sys_read+0xb0/0xb0 [ 1562.967681] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1562.968813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1562.969945] do_syscall_64+0x33/0x40 [ 1562.970758] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1562.971906] RIP: 0033:0x7f24549c7b19 [ 1562.972723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1562.976636] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1562.978187] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1562.979644] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1562.981107] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.982560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1562.984029] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:20:00 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x225749b68f159ad8, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:20:00 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x74) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f00000001c0)) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d77cea141873a9859e2792e700", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6465ec616c6c6f622c00"]) 13:20:00 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r0, 0x10000000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r6}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000700)=""/140, 0x8c}], 0x5, &(0x7f0000000840)=""/151, 0x97}, 0x0, 0x40010000, 0x0, {0x1, r6}}, 0x101) syz_io_uring_submit(r2, r4, &(0x7f0000001400)=@IORING_OP_WRITE={0x17, 0x5, 0x2000, @fd_index=0x5, 0x4f, &(0x7f0000001380)="6df895d3fd3d9b05abb9d62c0cb9644c2d51e0e10e47563c0e7b1d6d7733bdea5e52b8441618b1496f45d010a10a4d40c012f18b3222e15c68820e80425f31d79059e59b6409b5970b93", 0x4a, 0x12, 0x0, {0x0, r6}}, 0xdbc) sendmsg$nl_generic(r1, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f00000000c0)={0x1208, 0x3e, 0x200, 0x70bd27, 0x25dfdbfc, {0x10}, [@nested={0x118b, 0x2e, 0x0, 0x1, [@typed={0x14, 0x29, 0x0, 0x0, @ipv6=@remote}, @typed={0x8c, 0x62, 0x0, 0x0, @binary="47ee4f3f1e351d9001ede4e90508581ee5d3a1350049a748f3883ff5553c63802234b55810bbd596fe3d868291aae84775e3617b1f18f9ab12ac863c36147ef6756f04d9099ddeb141dd2d5464412d248b1e5702c0e06794337186ca952ab70cc9f50dbc8a62fa57f2853260cb5e2ef43b46bb01a76d9b4ace1178d55f0fbedd8ec24296a8077538"}, @generic="babcaf87f12a190ac8ad6335e5f9a5cef2b3f710f98c4944466e3559a119aac1a829171da72c05651c15d00404c4c3b1e19983e18e6aae6266df27b87cf8bdca04835be680211c3d397b5b85e1a38ac169bce4e4681fec88293985b7d71be2e84ee4393b5a212cd663acacbb8f4490f98d2a759db1e1abca5e63052680a021d16923a3b0e45e1578949cb8f29894da881b2bcc20be787435fb73cb6d8ffca766c5172772a0d7c0cddd2665630591fb97b450dad8900539f9087448ee776db1fdd028faea19f99b8b908e8b80cf9049ce7c190cf0dd30cd7cb06bab411a59c4602021128084d4f3", @generic="46ba291e2d751782421794288fe073d0b37741aedc24de95fed53a8049b5cff6073c52669ec60e572435654205250f61bac6b5a2020dd2dc9b4e1aa4c8c1c8b14dc06f3c648f0451bb2a5d7a6b1c441bb72f09323d236a861cbafd4426ac93d3267e94fbeca37df82a7efb849c72f2ce0c4bbff2a06cf3256bac845ff25fd04a6ae0237aa309fd923201e123556ec01cb171615f3bc511310f9ff1d27d6ea19e07f25740fce1f452863ea6cebc7ac140b48634d647e4af9fc35bd1b8aa4f6107d2f231b8b88219bcbd1c9a2a711caaf82cdf3f1dd402e5c7e538284349686e2678e0424c65888517174a29382fb91b917b706ad599a1ec62edae26de7a75c4a4f4ea36709627e14355c8d89490c9893c2acc3cbbc815bd8c66a492b341898c867d3ab478c35a1b540402ae441e286611d43591b7a8cceb9a757c3725236cba43d340914bcdba199cd2a90ba507c219ba377f203a9a93833f98772c05e70766132c30056842fb01f9485e51a54c9ce498f1ada25ee3a65f2d7f1ba8158f651f5504f24465c0921feb366538cda439ce05a40cf9cd3c4b3215afd92de78872839121b53524101d5f94129d0a9f34e34dc95784eb150a00654f38075fc20cf5f61cc69529be97b0a093842b7bbe40d489e7bfa90d14a0066653f7183dc700d4c857b3bc24cf17622d5a659719d30da8cb734df981641eceac28c8fca83fb0c456d4841404445eb5cdb982ac269a1375e88f1284e7ddd75b3e08b6f6a099616ef0eea0305e38527c669764f6aacbad4afed574f4a865759383163e1efc4ad0aeb6f291a3c5da8624e5f88a53ad05a1d4d86584ee9a55aceedb2c1c567dfe9745b06075609d4eb0b216c6562ca0bce55bd71a8b6edee18d2091ffce83de9b5a1b92ecd443134025f2fd8462e45eae3a9fc6da1cba954772936fbb39500a018f6ceb1bc613485e5d409dee3f0d549904cd8d3bc02ae873487ba37b4f0fe2314cc8b67447eb7fd7b987f98fce348cfc35fec403688688c92a8bd60c3f098b6e1d111ef4c7e224b11d9e999954d93b9335c1f17ac9141b609528933cfa56699642af47d365a4397d45122132676eca64ba72040a5ab8eb4b290d5490145464d1ea757dbb81433ca060f117fc25502111b50c661ccddf4e333a38444bcf8c3af4331b7176b5b6400deefaaa9a6068572b03eb403262fc785f7b7287d2a6b131277a6578cc50ba5f307c8d3131f4f5ea0dc82081db2db21c65646e3e7c6be8dfe14572e154543fe6a23ca87596017cc8fdc3c12d672165fbbc0c108c73019a09811af4e29a1aad0562018c2f416444f511c4a927229ae74ee3f2e18035666c123ba06ae0ba6bc5922a6f4975ecd9a0b52ecd3160a721e94a637e19b479aa76491b615454c8f5acec495c4a760c7278d72fa7eb16c300c1b061fc50b3497282c0c306b852122fff392c7df4bda6d904f69e7a8f789e5751ba437eaa615a3ac731d65ab08ecba0847682fccaa0d9bc8f12a4a5735c3c658f57dda7c6450f14631822e67d641ad8f2af65956792a9e3e960479cff8ebe70361b5fdc9a23729608a708ef59c0c5476640d614492c0a7ecd4b459d62f58a503898378cbb96e728948e4c7cb80f220b8bea6ee2ca05a37215b48c2b43475549fca55b35bfbeb3b5fdc798ab7ab3bf0ae74081e1f20817c6ae9fab56f3596789b502b150ddb84c97e2438d5674099c833836ff9508a7d6610629f89678856b294aa71f4b0149436fb83b104a601d34eb352a70557c9d175d082484ba282e70828bf45edccc06b05c7c7a679c9207ddd6481f0da29a3ef357c71cc49194f4133d187381a8206f0cb5bb3642663004c08ad72873cb783a2f8ec6c366d51eb3f751294ea10ed2d6e0e348fd2fb6c368241f8a40757b405f99e84ff64de3d7f72e2ef452448e29a38d004c80a2f7e4d2f463aab46071fdcd8be1606d617af4641a7e32b26ae469da405ee39e36bb1a1e76ce8dd8f829a4b7bb3849a64359e2d4dd025abe24a62716d530ad09e7a79dbafc0c8a0a9456df5a1f1c0c29ca84ecad16bb8346bcf468c5afc8f8d51911cebfa921e8e67f3f820eac4181f00baed84f374e9f9e9a6dd48513be40e86e6a77cdd9ab0fece4c8c0974ac037b5ffd177c73f9ae6f13781e1ef9fb1678a3f789dc3491e88edf5ea0c0d6bf5528d3e10c3b5a2c4252b12ef22cfa55f6a02bd2f714e5fd8cf42e3cb1d0c48ad6bea0473c7d726aad53aa68c7ff1e5a6d8e225bb2ae7a9a33d72abec84df4858ba78a51bcc8768e5cfeb3dc52e8ad21ca913fd0635ea272d6821cf394bcf7d92f6ebfa32708229451dee330bd35807521237c71209bf059ef5b5af34844397d0708843a917578305266a7fbf6eb3cc1f506b8cc1befcadcfb1c0548c39d1f9be90f5a6e6365b2b3327e9e72e7a52f027c414182444b1f47dfb5a5b052072447d133d737c065910e1ba1f733ad6693741cfce6cc3befb5bc2380e80657277f82873cc14b2b1cd16d6506b21a387744c4887cf617a8536d226db67d32989f8b64d5013e032d2044cff213a3ed2a358a44d38e0e4b21a5f38dafb24c11b96f931ac88629935b4dd78aa80ef8de414617c01e97b346491fcc35cd5458f222a964eeecb5c9c4dea9a6a34979c4f77f3353cc5d221143823aa5eb105dd8ed70422e199386ea491fa492740a1eacaf0a8588538c838522a36300d006e91b9ab4602e6cd16790de6c600112eec96c3810b6426dfcea03e07123c760d469be6c01f089c1c169e4f64b9ec2ba222f64e7d30c6d1463e33ec8ab82abed5e7885ae5fc06335194268e0c895e2f272f653ec4df61d1271c49f98e9a7c289ebab34817f292a280e713274e989bfdb5805db5a87c48a8a5325a74b16daed9a0e0e4c201fea690597152544d279bf1556d975b3bef39c1ae236924aff27c2634e5a07ac0e14f9a263d438fbd0251aed878959295a0aab87195f7cd11038e88879664b84e7b5f21b3b6e94cac2bd096a94e0cc67112c947b6780bd53a1134b9f2228d875c845e2a8e531132d8edc56f83dc17ccb1a7a9824b9cf59e16df5a22f78284b6e7fcf106f023ccac19025cdbe23a141e389c2ba9bfb03b3437cd6fa44ea19783486054bde15774bc0b8f7a2145f98360144af124452f13a4854ee11a93c3f12f9a4cad58c73238655c0ce270dcc31a932d3d035846895c3898cc8efc24dcdf9ac307763142af60f310e51d824e093a72b6cbbfb1f2ec74d4e54b466baf75d5eaee797606399ad841aa0d99e2018ac8133c53eece546d8a7798fe1c18edb0c89c7cae33b7d4ec96e52a09035ee15458db502a189069f5a9074db85d14e7e6f9fb040d98d22b3ea9aa7fde1964d9f3b8083fc2c8a7a9831763d2e3fef771112136506ac81797c9593ea73f5d33da2d615f2ab529ab626f37c34d37259f6aa89d3263aad8550aae352b52f35805a2e61068ca4878f2ef6b57313e16c5b8b027ca3748cfeb19741c4d891fd238a43bebf00e767d9c1990026cacdfb5ed2c2623875b64372c8b5cb3d4a49fce7621bb7e8ee1d8f3d2e6210085639c8d19e2de6d7cc6d93024d16ec09642fe98ddbde9bb9f61a5272e5600e2ed68054d5c2bc9e9effa91be67dbc7913bd88dd276e88da5c4521ab54abd456c8762fad5cb6ec989e5ad0f438740637bfc9600f62e434853ef8d7cdd7f5ad31ee52480a731a218949d70cee2cd99787c1cf89fe8b51394449ba1774cb53d0585b35b172eb8ba45bdb5ba06e6532119fbd7648a6dd55465096d5c258a2b763a01ee0931246592197ba722407a4f50e9a6fef5c69ee6fe17003a33d20d624aea027b462ee17cdf9c079f5fe42a6a2ca9d8b8045c0eac6f06bdee3b491216a1927ff1879a538b2ac7c9734d93d5a72b6ca1354499a52470083eef38020eb977275251eb84faf06da43f3475decaf9c209eead9f65f968fc1cf38bb56205dae381a9f5cd106e3c2c5e803fe7c1fae50fae749ff8f7806ea2244d4a044583e3ad0bdb35c1276fec0aac7fd55f9fc80e12ef7ed2e36fdc46a732e41d12ea139bcec9bfb394628ff3531f27eeb295f30ec1093312f60a9e2a7fab5207543b8d94c085ec510243e55464896a2f8a1aed53eed8ddc75d68b110b9450ed1f20ef5b4a88fa3727063a686c3042ea6e90a59410063d1e71812348246e67257f74d580bb84593ad4cad23b2cde410fb3f406bdf8d8994acfb25484655d35410de21acd213afc03c8ae75b061e8127f43ea61229ae6bebbe99c6f786665728289d02bd810a9ba465827cbf448f19a67052e3da63c4265d7da4dfdcff9354b4a8febe57bce82e611febb52bb21923e72bd4844d1e4effce33149f481378174f8fb6645e1375121a207faee4ac95c5aca8af3b720e4060df7fd58f9d90a7883a60ae5271ae301375e16e7189be2515afabf6430ee50a8e5f02b22d404cdd0ebe8894d9c3490fa4f79b184366c9f4699a4d9813a3685c51c1c4dfd4b9cee10a4dbc494065ab985b5f40c133341fda422abbe135953517238b3a736792eace16f3bb22c68ab3141f48f667c043d79bdb84e325da1af18335628b4d356337471280b2738cf5a9e5133cf0c429dd028c13890f17c475ceeb0e8725c7f7bdaf6b28ee841ac8d18864b059f5efbd2c8aa0e2ff4a6918510d6ab199992b2162bd5c8f53d9435f45244ec6a2a4ab865bbc9c9af3138c28288366c1e6667cfa629bb8d6122374e69befb0cef156cd672b73da418a9c238b0c8a8017475fb924d255b5d3b4e5aabdf4ea3692b2cb03d07f0b34e7bcb03f784b34b81ec0144768d985db18a1640dfc1df267b4842d1321696cab5e4ea64a8ebfd2f78344ef9299b209ee41b49e931cf65073378782ec4ec0c47b60e0ad5c124e779a162d43b09e79dc52bf5f3ca6f4d164fed7d7209d025ae509f605a55015d54cbd47313f0005ebc382eee2d81eb26fda77708764ce3389c8c0b1410bcc61dfe482c2da9a58753a97489ae47b1d0c791e5d8f81f8896e7d80b39aced88f730ad2ec36977207244072701239f698c2230a52fd5fe6474fd430a26d8b9319af3fd3ade3739dc9f4ccb18ff1aad23539fb3c3326fe704ed700811ce0cb51c986104a5a9c8c8a1cc5ee92cb0369289fe00c1726257ccadc7969626e5c4406c88520b810930f57aae0d01260e98fbb6e96353462193dabc9721af3a9c34375e95b1a6cf236e798cd5b35e184faed040ba9a234e412a4c49d774647ce9ae963d9052b36b153b75c118ade684cb6c18effcec17e8b0ff79cb43a5d9ff1016a5680b5dadbf35ed98a4ddd4e38f4c87e997f135fe5f0b4e34a8367cfdf2d1d3b7becc11bcb2b3934663888016ad30e6e8b4c310c783fe1039ccd8c9514d97256c5b1b2429041e8caf45f1b584c97a755f09f1a271ef1352cfe324bfbdb4df5f55ed1b2b4a740b489ac1bab871c42231fff1f0f5824e6ead338c7a7f758c41800c197aa07e64bbb4cc5680b866ca90a65e51a9b0f74fab4917b48484f8e74ca4ed240f0ed76c9bfbea8eb3f36c5f1c23587660eaa6f7fb237bbdd059c6cad54fc1ce4971a9bf64980b9a52b0dd3cabbe6b85b844acb3be38cb400f8cf0f220e97118f1834224b2b725de870ccfb1a837f9420ceef61c8631eba2d9195134f086600064b02799d4b243f048ebf39b7926678529da7418f778becacb64afa96426ec9273fe6566835a476e33571bd20e1bbcf97e2128f03b3bb21b4f84d7dcab3bbcb9d9aa9a78e6d25b33b4769e8d339aefcba82174168190967f6ba016142"]}, @nested={0x67, 0x3a, 0x0, 0x1, [@generic, @generic="cd1411408d2b17c71958e0a47447ce832feb60fff3dbe6c1842bae013e3ff3a9941dce10c96476ccb3d533e68b3906", @typed={0x8, 0x52, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x6b, 0x0, 0x0, @pid}]}]}, 0x1208}, 0x1, 0x0, 0x0, 0x80}, 0x24000004) [ 1563.130439] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1563.206531] FAULT_INJECTION: forcing a failure. [ 1563.206531] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.209415] CPU: 0 PID: 10050 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1563.210818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.212616] Call Trace: [ 1563.213169] dump_stack+0x107/0x167 [ 1563.213934] should_fail.cold+0x5/0xa [ 1563.214741] should_failslab+0x5/0x20 [ 1563.215494] kmem_cache_alloc_bulk+0x4b/0x320 [ 1563.216394] io_submit_sqes+0x6f76/0x85c0 [ 1563.217257] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1563.218246] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1563.219220] ? lock_downgrade+0x6d0/0x6d0 [ 1563.220054] ? find_held_lock+0x2c/0x110 [ 1563.220876] ? io_submit_sqes+0x85c0/0x85c0 [ 1563.221751] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1563.222728] ? wait_for_completion_io+0x270/0x270 [ 1563.223697] ? rcu_read_lock_any_held+0x75/0xa0 [ 1563.224644] ? vfs_write+0x354/0xa70 [ 1563.225399] ? fput_many+0x2f/0x1a0 [ 1563.226134] ? ksys_write+0x1a9/0x260 [ 1563.226901] ? __ia32_sys_read+0xb0/0xb0 [ 1563.227721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1563.228786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1563.229827] do_syscall_64+0x33/0x40 [ 1563.230581] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1563.231612] RIP: 0033:0x7f94eea4db19 [ 1563.232386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.236103] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1563.237672] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1563.239103] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1563.240548] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.241982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.243414] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:20:01 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 13:20:01 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1563.543470] FAULT_INJECTION: forcing a failure. [ 1563.543470] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.546181] CPU: 0 PID: 10069 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1563.547583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.549270] Call Trace: [ 1563.549810] dump_stack+0x107/0x167 [ 1563.550555] should_fail.cold+0x5/0xa [ 1563.551341] ? xas_alloc+0x336/0x440 [ 1563.552131] should_failslab+0x5/0x20 [ 1563.552911] kmem_cache_alloc+0x5b/0x310 [ 1563.553746] xas_alloc+0x336/0x440 [ 1563.554324] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1563.554482] xas_create+0x34a/0x10d0 [ 1563.556769] ? kernel_text_address+0xf2/0x120 [ 1563.557691] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1563.558754] xas_store+0x8c/0x1c40 [ 1563.559485] __xa_store+0x164/0x2d0 [ 1563.560254] ? xa_delete_node+0x280/0x280 [ 1563.561099] ? trace_hardirqs_on+0x5b/0x180 [ 1563.561976] xa_store+0x31/0x50 [ 1563.562647] __io_uring_add_tctx_node+0x1cf/0x520 [ 1563.563620] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1563.564698] __do_sys_io_uring_enter+0x14de/0x1920 [ 1563.565708] ? lock_downgrade+0x6d0/0x6d0 [ 1563.566538] ? find_held_lock+0x2c/0x110 [ 1563.567367] ? io_submit_sqes+0x85c0/0x85c0 [ 1563.568263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1563.569235] ? wait_for_completion_io+0x270/0x270 [ 1563.570213] ? rcu_read_lock_any_held+0x75/0xa0 [ 1563.571147] ? vfs_write+0x354/0xa70 [ 1563.571915] ? fput_many+0x2f/0x1a0 [ 1563.572663] ? ksys_write+0x1a9/0x260 [ 1563.573434] ? __ia32_sys_read+0xb0/0xb0 [ 1563.574269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1563.575339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1563.576387] do_syscall_64+0x33/0x40 [ 1563.577134] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1563.578164] RIP: 0033:0x7fd021856b19 [ 1563.578914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.582616] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1563.584296] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1563.585736] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1563.587177] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.588630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.590061] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 13:20:16 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 13:20:16 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) 13:20:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:20:16 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x101}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r0, 0x9e46, 0x0) 13:20:16 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x40) 13:20:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000ff592f69ee579f7249", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='./file1\x00']) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:20:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000004c0)=ANY=[@ANYBLOB="4091565cdbfa48931fc20a1542ffd55db5ea6d18e3b27e753db9825124b9a2b5bc", @ANYRES32=r0, @ANYBLOB="0852003f00d3735540c761460f66"]) r4 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x4, 0x4c1, 0x7, 0x2}) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0xfe, 0x6, 0x7, 0x0, 0x94ac, 0x60601, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x4, @perf_bp={&(0x7f00000001c0), 0xa}, 0x80, 0xffffffffffffff01, 0x6, 0x6, 0x3, 0x800, 0x5, 0x0, 0xffffff07, 0x0, 0x4}, 0xffffffffffffffff, 0xf, r4, 0x3) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000400)={0x101, 0x8, 0x7ff, 0x0, 0x5}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x20000000000002, 0x0, 0x80000001}) signalfd4(r1, &(0x7f0000000100)={[0x1]}, 0x8, 0x800) 13:20:16 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) [ 1578.386995] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1578.387011] FAULT_INJECTION: forcing a failure. [ 1578.387011] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.387030] CPU: 1 PID: 10086 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1578.390968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.392093] Call Trace: [ 1578.392457] dump_stack+0x107/0x167 [ 1578.392981] should_fail.cold+0x5/0xa [ 1578.393283] FAULT_INJECTION: forcing a failure. [ 1578.393283] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.393524] ? create_object.isra.0+0x3a/0xa20 [ 1578.393538] should_failslab+0x5/0x20 [ 1578.393550] kmem_cache_alloc+0x5b/0x310 [ 1578.393563] ? mark_held_locks+0x9e/0xe0 [ 1578.393580] create_object.isra.0+0x3a/0xa20 [ 1578.398612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.399327] kmem_cache_alloc_bulk+0x168/0x320 [ 1578.399977] io_submit_sqes+0x6f76/0x85c0 [ 1578.400595] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1578.401296] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1578.401974] ? lock_downgrade+0x6d0/0x6d0 [ 1578.402551] ? find_held_lock+0x2c/0x110 [ 1578.403122] ? io_submit_sqes+0x85c0/0x85c0 [ 1578.403739] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1578.404423] ? wait_for_completion_io+0x270/0x270 [ 1578.405102] ? rcu_read_lock_any_held+0x75/0xa0 [ 1578.405758] ? vfs_write+0x354/0xa70 [ 1578.406282] ? fput_many+0x2f/0x1a0 [ 1578.406797] ? ksys_write+0x1a9/0x260 [ 1578.407329] ? __ia32_sys_read+0xb0/0xb0 [ 1578.407902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1578.408648] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1578.409376] do_syscall_64+0x33/0x40 [ 1578.409901] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1578.410621] RIP: 0033:0x7fd021856b19 [ 1578.411142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.413739] RSP: 002b:00007fd01edcc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1578.414808] RAX: ffffffffffffffda RBX: 00007fd021969f60 RCX: 00007fd021856b19 [ 1578.415779] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1578.416780] RBP: 00007fd01edcc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.417773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.418773] R13: 00007ffc9678b6ef R14: 00007fd01edcc300 R15: 0000000000022000 [ 1578.419813] CPU: 0 PID: 10098 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1578.421426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.423325] Call Trace: [ 1578.424059] dump_stack+0x107/0x167 [ 1578.424904] should_fail.cold+0x5/0xa [ 1578.425785] ? create_object.isra.0+0x3a/0xa20 [ 1578.426836] should_failslab+0x5/0x20 [ 1578.427711] kmem_cache_alloc+0x5b/0x310 [ 1578.428669] create_object.isra.0+0x3a/0xa20 [ 1578.429681] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1578.430852] kmem_cache_alloc_bulk+0x168/0x320 [ 1578.431907] io_submit_sqes+0x6f76/0x85c0 [ 1578.432901] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1578.434047] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1578.435160] ? lock_downgrade+0x6d0/0x6d0 [ 1578.436131] ? find_held_lock+0x2c/0x110 [ 1578.437067] ? io_submit_sqes+0x85c0/0x85c0 [ 1578.438058] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1578.439167] ? wait_for_completion_io+0x270/0x270 [ 1578.440274] ? rcu_read_lock_any_held+0x75/0xa0 [ 1578.441333] ? vfs_write+0x354/0xa70 [ 1578.442185] ? fput_many+0x2f/0x1a0 [ 1578.443016] ? ksys_write+0x1a9/0x260 [ 1578.443884] ? __ia32_sys_read+0xb0/0xb0 [ 1578.444823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 13:20:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x4b, 0x0, "a1434d16d913534f654ed1777e0a7fa37760b9e3107318c497350ee047a9f8490f847220e51cb7466d3400322e1767bc90d79831007ef1d09975e05300cb5d5e673b91f6279a08cc5b4cd61c9a449cc7"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb9dcc0d8da3a4f6f42444a1948f422c8d8d2d8bba069588783e32b713"}, 0xd8) r3 = dup(r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ac1e00017e00000100ff7f00d471ded6"], 0x10) pwrite64(r5, &(0x7f0000000100)="2e12754dfbefc88d5e", 0x9, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) [ 1578.446015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1578.447336] do_syscall_64+0x33/0x40 [ 1578.448198] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1578.449365] RIP: 0033:0x7f94eea4db19 [ 1578.450216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.454410] RSP: 002b:00007f94ebfa2188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1578.456157] RAX: ffffffffffffffda RBX: 00007f94eeb61020 RCX: 00007f94eea4db19 [ 1578.457785] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1578.459404] RBP: 00007f94ebfa21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.461024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.462632] R13: 00007ffe628af61f R14: 00007f94ebfa2300 R15: 0000000000022000 13:20:16 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r6, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fba0da3344bc9163688567feda8dba320d292f4ebefe64e99", "220c0000002d52004bde09505bf1c35930ac1d9268624c1420b156a2ac400377"}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, r5, 0x3, r6, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup(r7) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) getsockopt$inet6_int(r8, 0x29, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0xe0, 0xff, 0xfc, 0x0, 0x100000001, 0x5004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x1, @perf_config_ext={0x23, 0x2}, 0x45504, 0x4, 0x10, 0x9, 0x81, 0x9, 0x3, 0x0, 0x3, 0x0, 0x5217}, r5, 0x8, r8, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5f}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 1578.483501] FAULT_INJECTION: forcing a failure. [ 1578.483501] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.486484] CPU: 0 PID: 10087 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1578.488069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1578.489948] Call Trace: [ 1578.490544] dump_stack+0x107/0x167 [ 1578.491372] should_fail.cold+0x5/0xa [ 1578.492246] ? create_object.isra.0+0x3a/0xa20 [ 1578.493281] ? create_object.isra.0+0x3a/0xa20 [ 1578.494320] should_failslab+0x5/0x20 [ 1578.495176] kmem_cache_alloc+0x5b/0x310 [ 1578.496110] create_object.isra.0+0x3a/0xa20 [ 1578.497109] __kmalloc_node+0x1ae/0x420 [ 1578.498019] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1578.499170] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1578.500320] kmem_cache_alloc_bulk+0x182/0x320 [ 1578.501354] io_submit_sqes+0x6f76/0x85c0 [ 1578.502258] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1578.503264] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1578.504259] ? io_submit_sqes+0x85c0/0x85c0 [ 1578.505136] ? recalibrate_cpu_khz+0x10/0x10 [ 1578.506022] ? ktime_get+0x158/0x1f0 [ 1578.506780] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1578.507651] ? clockevents_program_event+0x131/0x360 [ 1578.508695] ? tick_program_event+0xa8/0x140 [ 1578.509585] ? hrtimer_interrupt+0x771/0x9b0 [ 1578.510580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1578.511760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1578.512936] do_syscall_64+0x33/0x40 [ 1578.513772] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1578.514923] RIP: 0033:0x7f24549c7b19 [ 1578.515761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1578.519795] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1578.521338] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1578.522782] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1578.524250] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1578.525705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1578.527139] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 13:20:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) dup(r1) 13:20:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setpriority(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x140, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r1, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="77ea403e64182b010482208347bc10746375b2e44e02924fc5"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 13:20:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="2e2fa017bc283100"]) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:20:30 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xcf, 0x3, 0x81, 0x7, 0x0, 0xd24, 0xc4020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xfffffffffffffff8}, 0x308, 0x2, 0xd11a, 0x4, 0x5, 0x2, 0x1, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) copy_file_range(r2, &(0x7f0000000000)=0x2000, r3, &(0x7f0000000200)=0x9, 0x8, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 13:20:30 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, 0x0, 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:20:30 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 13:20:30 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 13:20:30 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 1592.416938] [ 1592.417303] ====================================================== [ 1592.418540] WARNING: possible circular locking dependency detected [ 1592.420036] 5.10.209 #1 Not tainted [ 1592.420899] ------------------------------------------------------ [ 1592.422357] syz-executor.2/10122 is trying to acquire lock: [ 1592.423679] ffff888017390ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1592.425974] [ 1592.425974] but task is already holding lock: [ 1592.427373] ffff888017390f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 1592.429410] [ 1592.429410] which lock already depends on the new lock. [ 1592.429410] [ 1592.431339] [ 1592.431339] the existing dependency chain (in reverse order) is: [ 1592.433178] [ 1592.433178] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 1592.435127] __mutex_lock+0x13d/0x10b0 [ 1592.436863] hci_dev_do_close+0xef/0x1240 [ 1592.438532] hci_rfkill_set_block+0x166/0x1a0 [ 1592.439712] rfkill_set_block+0x1fd/0x540 [ 1592.440826] rfkill_fop_write+0x253/0x4b0 [ 1592.441931] vfs_write+0x29a/0xa70 [ 1592.442876] ksys_write+0x1f6/0x260 [ 1592.443698] do_syscall_64+0x33/0x40 [ 1592.444560] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.445676] [ 1592.445676] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 1592.446993] __mutex_lock+0x13d/0x10b0 [ 1592.447863] rfkill_register+0x36/0xa10 [ 1592.448759] hci_register_dev+0x42e/0xc00 [ 1592.449680] __vhci_create_device+0x2c8/0x5c0 [ 1592.450672] vhci_open_timeout+0x38/0x50 [ 1592.451571] process_one_work+0x9a9/0x14b0 [ 1592.452510] worker_thread+0x61d/0x1310 [ 1592.453400] kthread+0x38f/0x470 [ 1592.454166] ret_from_fork+0x22/0x30 [ 1592.454991] [ 1592.454991] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 1592.456285] __mutex_lock+0x13d/0x10b0 [ 1592.457153] vhci_send_frame+0x63/0xa0 [ 1592.458022] hci_send_frame+0x1b9/0x320 [ 1592.458905] hci_tx_work+0x10af/0x1660 [ 1592.459774] process_one_work+0x9a9/0x14b0 [ 1592.460714] worker_thread+0x61d/0x1310 [ 1592.461598] kthread+0x38f/0x470 [ 1592.462363] ret_from_fork+0x22/0x30 [ 1592.463189] [ 1592.463189] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1592.464753] __lock_acquire+0x29e7/0x5b00 [ 1592.465666] lock_acquire+0x197/0x470 [ 1592.466519] __flush_work+0x105/0xa90 [ 1592.467364] hci_dev_do_close+0x131/0x1240 [ 1592.468300] hci_rfkill_set_block+0x166/0x1a0 [ 1592.469286] rfkill_set_block+0x1fd/0x540 [ 1592.470202] rfkill_fop_write+0x253/0x4b0 [ 1592.471111] vfs_write+0x29a/0xa70 [ 1592.471910] ksys_write+0x1f6/0x260 [ 1592.472745] do_syscall_64+0x33/0x40 [ 1592.473573] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.474670] [ 1592.474670] other info that might help us debug this: [ 1592.474670] [ 1592.476242] Chain exists of: [ 1592.476242] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 1592.476242] [ 1592.478792] Possible unsafe locking scenario: [ 1592.478792] [ 1592.479982] CPU0 CPU1 [ 1592.480905] ---- ---- [ 1592.481821] lock(&hdev->req_lock); [ 1592.482563] lock(rfkill_global_mutex); [ 1592.483868] lock(&hdev->req_lock); [ 1592.485109] lock((work_completion)(&hdev->tx_work)); [ 1592.486149] [ 1592.486149] *** DEADLOCK *** [ 1592.486149] [ 1592.487335] 2 locks held by syz-executor.2/10122: [ 1592.488282] #0: ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1592.490119] #1: ffff888017390f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 1592.491893] [ 1592.491893] stack backtrace: [ 1592.492787] CPU: 0 PID: 10122 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1592.494132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.495750] Call Trace: [ 1592.496271] dump_stack+0x107/0x167 [ 1592.496989] check_noncircular+0x263/0x2e0 [ 1592.497822] ? register_lock_class+0xbb/0x17b0 [ 1592.498725] ? print_circular_bug+0x470/0x470 [ 1592.499612] ? stack_trace_consume_entry+0x160/0x160 [ 1592.500632] ? alloc_chain_hlocks+0x342/0x5a0 [ 1592.501518] __lock_acquire+0x29e7/0x5b00 [ 1592.502338] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1592.503357] ? rwlock_bug.part.0+0x90/0x90 [ 1592.504191] lock_acquire+0x197/0x470 [ 1592.504949] ? __flush_work+0xdd/0xa90 [ 1592.505722] ? lock_release+0x680/0x680 [ 1592.506503] ? lock_release+0x680/0x680 [ 1592.507288] ? lock_chain_count+0x20/0x20 [ 1592.508110] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1592.509156] ? lock_chain_count+0x20/0x20 [ 1592.509969] ? lock_acquire+0x197/0x470 [ 1592.510752] __flush_work+0x105/0xa90 [ 1592.511504] ? __flush_work+0xdd/0xa90 [ 1592.512285] ? queue_delayed_work_on+0xe0/0xe0 [ 1592.513185] ? hci_dev_do_close+0xef/0x1240 [ 1592.514037] ? __cancel_work_timer+0x2a9/0x4c0 [ 1592.514943] ? mutex_lock_io_nested+0xf30/0xf30 [ 1592.515867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.516918] ? __cancel_work+0x250/0x2b0 [ 1592.517718] ? trace_hardirqs_on+0x5b/0x180 [ 1592.518566] ? __cancel_work+0x1bb/0x2b0 [ 1592.519363] ? try_to_grab_pending+0xe0/0xe0 [ 1592.520253] hci_dev_do_close+0x131/0x1240 [ 1592.521098] ? rfkill_set_block+0x18f/0x540 [ 1592.521954] ? hci_dev_open+0x350/0x350 [ 1592.522739] ? mark_held_locks+0x9e/0xe0 [ 1592.523542] hci_rfkill_set_block+0x166/0x1a0 [ 1592.524436] ? hci_power_off+0x20/0x20 [ 1592.525205] rfkill_set_block+0x1fd/0x540 [ 1592.526025] rfkill_fop_write+0x253/0x4b0 [ 1592.526840] ? rfkill_sync_work+0xa0/0xa0 [ 1592.527666] ? security_file_permission+0x24e/0x570 [ 1592.528661] ? rfkill_sync_work+0xa0/0xa0 [ 1592.529478] vfs_write+0x29a/0xa70 [ 1592.530188] ksys_write+0x1f6/0x260 [ 1592.530912] ? __ia32_sys_read+0xb0/0xb0 [ 1592.531721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1592.532777] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.533798] do_syscall_64+0x33/0x40 [ 1592.534530] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.535545] RIP: 0033:0x7fbffd6ffb19 [ 1592.536281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.539907] RSP: 002b:00007fbffac75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1592.541419] RAX: ffffffffffffffda RBX: 00007fbffd812f60 RCX: 00007fbffd6ffb19 [ 1592.542823] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1592.544247] RBP: 00007fbffd759f6d R08: 0000000000000000 R09: 0000000000000000 [ 1592.545661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.547059] R13: 00007ffcc62413bf R14: 00007fbffac75300 R15: 0000000000022000 [ 1592.580927] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1592.643120] FAULT_INJECTION: forcing a failure. [ 1592.643120] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.646244] CPU: 1 PID: 10137 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1592.647941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.649943] Call Trace: [ 1592.650580] dump_stack+0x107/0x167 [ 1592.651454] should_fail.cold+0x5/0xa [ 1592.652385] should_failslab+0x5/0x20 [ 1592.653174] kmem_cache_alloc_bulk+0x4b/0x320 [ 1592.654076] io_submit_sqes+0x6f76/0x85c0 [ 1592.654915] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1592.655914] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1592.656898] ? lock_downgrade+0x6d0/0x6d0 [ 1592.657723] ? __fsnotify_parent+0x488/0x9d0 [ 1592.658597] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.659462] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.660454] ? wait_for_completion_io+0x270/0x270 [ 1592.661423] ? vfs_write+0x354/0xa70 [ 1592.662164] ? fput_many+0x2f/0x1a0 [ 1592.662887] ? ksys_write+0x1a9/0x260 [ 1592.663647] ? __ia32_sys_read+0xb0/0xb0 [ 1592.664491] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1592.665549] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.666574] do_syscall_64+0x33/0x40 [ 1592.667315] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.668338] RIP: 0033:0x7f24549c7b19 [ 1592.669079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.672732] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.674238] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1592.675654] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1592.677093] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.678511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1592.679924] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1592.692020] FAULT_INJECTION: forcing a failure. [ 1592.692020] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.694299] CPU: 0 PID: 10148 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1592.695674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.697341] Call Trace: [ 1592.697982] dump_stack+0x107/0x167 [ 1592.698827] should_fail.cold+0x5/0xa [ 1592.699596] ? xas_alloc+0x336/0x440 [ 1592.700358] should_failslab+0x5/0x20 [ 1592.701114] kmem_cache_alloc+0x5b/0x310 [ 1592.701199] FAULT_INJECTION: forcing a failure. [ 1592.701199] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.701909] xas_alloc+0x336/0x440 [ 1592.701925] xas_create+0x34a/0x10d0 [ 1592.701946] ? kernel_text_address+0xf2/0x120 [ 1592.701962] ? __kernel_text_address+0x9/0x40 [ 1592.701978] xas_store+0x8c/0x1c40 [ 1592.701995] ? lock_acquire+0x3ef/0x470 [ 1592.702013] ? lock_release+0x680/0x680 [ 1592.702027] ? irqentry_enter+0x26/0x60 [ 1592.702044] __xa_store+0x164/0x2d0 [ 1592.702060] ? xa_delete_node+0x280/0x280 [ 1592.702081] xa_store+0x31/0x50 [ 1592.702098] __io_uring_add_tctx_node+0x1cf/0x520 [ 1592.702114] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1592.702135] __do_sys_io_uring_enter+0x14de/0x1920 [ 1592.702153] ? lock_downgrade+0x6d0/0x6d0 [ 1592.702171] ? __fsnotify_parent+0x488/0x9d0 [ 1592.702188] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.702214] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.719338] ? wait_for_completion_io+0x270/0x270 [ 1592.720302] ? vfs_write+0x354/0xa70 [ 1592.721035] ? fput_many+0x2f/0x1a0 [ 1592.721755] ? ksys_write+0x1a9/0x260 [ 1592.722498] ? __ia32_sys_read+0xb0/0xb0 [ 1592.723306] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1592.724359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.725368] do_syscall_64+0x33/0x40 [ 1592.726100] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.727111] RIP: 0033:0x7fd021856b19 [ 1592.727842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.731454] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.732968] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1592.734373] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1592.735777] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.737180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1592.738575] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1592.739995] CPU: 1 PID: 10134 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1592.741770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.743433] Call Trace: [ 1592.743960] dump_stack+0x107/0x167 [ 1592.744703] should_fail.cold+0x5/0xa [ 1592.745461] ? create_object.isra.0+0x3a/0xa20 [ 1592.746372] should_failslab+0x5/0x20 [ 1592.747128] kmem_cache_alloc+0x5b/0x310 [ 1592.747937] create_object.isra.0+0x3a/0xa20 [ 1592.748839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1592.749849] kmem_cache_alloc_bulk+0x168/0x320 [ 1592.751132] io_submit_sqes+0x6f76/0x85c0 [ 1592.752141] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1592.753364] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1592.754526] ? lock_downgrade+0x6d0/0x6d0 [ 1592.755521] ? __fsnotify_parent+0x488/0x9d0 [ 1592.756592] ? io_submit_sqes+0x85c0/0x85c0 [ 1592.757634] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1592.758794] ? wait_for_completion_io+0x270/0x270 [ 1592.759881] ? vfs_write+0x354/0xa70 [ 1592.760650] ? fput_many+0x2f/0x1a0 [ 1592.761368] ? ksys_write+0x1a9/0x260 [ 1592.762116] ? __ia32_sys_read+0xb0/0xb0 [ 1592.762919] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1592.763965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1592.764989] do_syscall_64+0x33/0x40 [ 1592.765720] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.766731] RIP: 0033:0x7f94eea4db19 [ 1592.767462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.771104] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1592.772616] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1592.774019] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1592.775422] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.776830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1592.778231] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 [ 1592.802092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1592.824906] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value 13:20:30 executing program 5: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 13:20:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, 0x0, 0xfdef) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x180) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000540)='./file2\x00', 0x65) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f00000002c0)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000009, 0x2010, r4, 0x8000000) syz_io_uring_setup(0x78e5, &(0x7f0000000580)={0x0, 0x1452, 0x0, 0x2, 0x29c, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000880)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="2cd635ebba0186ca41dffa08f20f160c65eac17199573bbfe7b2cef945fbe4aeaad146f288edbcffef4c6076b84a0116d77edf9b52f1d12d839bd8f1a238bcee2f", 0x41}, {&(0x7f0000000700)="eef97826ad0d294751e398ca92cb4d65054ae76096ca42962d05dbc50635bb9a0b7f622541f9919efbf2ae0f2694d7ee4ac20f43a295e76038b8b43ffec11a8dce89b27de864e429b51a91eae8dbce93d010de850f5ec31ff3cc52710015af1bf0", 0x61}, {&(0x7f0000000780)="6dd4425d68a06d75a529374f87907d198a974e43b95ef9c9253a8262cb04282c0dc5e8a97f0090a097d210197322d4125ea6952c69faca31bafd268e45ce9871cd919109d3fe476b7f1e1230862fb0c43f7a23d42dee03f41f1b688712110304e8512a6459465bb8e639c5b14b6d83af7dced24f7ce5e86bb1c696bd", 0x7c}], 0x3}}, 0x1) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/252, 0xfc}], 0x6, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x10000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 13:20:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setpriority(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x140, 0x0, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) lseek(r1, 0x1, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYBLOB="77ea403e64182b010482208347bc10746375b2e44e02924fc5"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 13:20:30 executing program 6: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffffb, 0x2000) openat(r1, &(0x7f0000000180)='./file1\x00', 0x900, 0xc) pwrite64(r0, &(0x7f0000000080)="ad999a91458568811b65526a212c00fa9e03bef28f4e99dc018db4a55bd1b6504ad625bd7b8e1f3a702541f1a0d6763b15a17f4ba182267814c14691a7b2c49947d5304779b8e881732c152327cf55d14688c94735895bbb2ce9503119c3970e4c8d2a09954557a86b3eb721cfe01351f60ed8b41b6ad0", 0x77, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x40824, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:20:30 executing program 7: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 13:20:30 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, 0x0, 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1593.009281] FAULT_INJECTION: forcing a failure. [ 1593.009281] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.011670] CPU: 1 PID: 10158 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1593.013071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.014740] Call Trace: [ 1593.015281] dump_stack+0x107/0x167 [ 1593.016028] should_fail.cold+0x5/0xa [ 1593.016824] ? create_object.isra.0+0x3a/0xa20 [ 1593.017761] should_failslab+0x5/0x20 [ 1593.018526] kmem_cache_alloc+0x5b/0x310 [ 1593.019354] create_object.isra.0+0x3a/0xa20 [ 1593.020261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.021303] kmem_cache_alloc_bulk+0x168/0x320 [ 1593.022236] io_submit_sqes+0x6f76/0x85c0 [ 1593.023083] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1593.024084] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1593.025070] ? lock_downgrade+0x6d0/0x6d0 [ 1593.025920] ? __fsnotify_parent+0x488/0x9d0 [ 1593.026807] ? io_submit_sqes+0x85c0/0x85c0 [ 1593.027694] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1593.028677] ? wait_for_completion_io+0x270/0x270 [ 1593.029664] ? vfs_write+0x354/0xa70 [ 1593.030434] ? fput_many+0x2f/0x1a0 [ 1593.031169] ? ksys_write+0x1a9/0x260 [ 1593.031947] ? __ia32_sys_read+0xb0/0xb0 [ 1593.032773] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1593.033857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.034898] do_syscall_64+0x33/0x40 [ 1593.035662] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1593.036705] RIP: 0033:0x7f24549c7b19 [ 1593.037453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.041211] RSP: 002b:00007f2451f3d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1593.042752] RAX: ffffffffffffffda RBX: 00007f2454adaf60 RCX: 00007f24549c7b19 [ 1593.044184] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1593.045624] RBP: 00007f2451f3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.047052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.048498] R13: 00007ffc68f7562f R14: 00007f2451f3d300 R15: 0000000000022000 [ 1593.064006] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 13:20:30 executing program 3: r0 = syz_io_uring_setup(0x3fef, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) eventfd(0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) [ 1593.167476] FAULT_INJECTION: forcing a failure. [ 1593.167476] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.170106] CPU: 0 PID: 10163 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 1593.171485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.173147] Call Trace: [ 1593.173672] dump_stack+0x107/0x167 [ 1593.174397] should_fail.cold+0x5/0xa [ 1593.175154] ? create_object.isra.0+0x3a/0xa20 [ 1593.176073] should_failslab+0x5/0x20 [ 1593.176854] kmem_cache_alloc+0x5b/0x310 [ 1593.177660] create_object.isra.0+0x3a/0xa20 [ 1593.178533] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.179539] kmem_cache_alloc_bulk+0x168/0x320 [ 1593.180453] io_submit_sqes+0x6f76/0x85c0 [ 1593.181282] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 1593.182268] __do_sys_io_uring_enter+0x6b5/0x1920 [ 1593.183225] ? lock_downgrade+0x6d0/0x6d0 [ 1593.184047] ? __fsnotify_parent+0x488/0x9d0 [ 1593.184939] ? io_submit_sqes+0x85c0/0x85c0 [ 1593.185794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1593.186747] ? wait_for_completion_io+0x270/0x270 [ 1593.187697] ? vfs_write+0x354/0xa70 [ 1593.188456] ? fput_many+0x2f/0x1a0 [ 1593.189174] ? ksys_write+0x1a9/0x260 [ 1593.189925] ? __ia32_sys_read+0xb0/0xb0 [ 1593.190731] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1593.191786] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.192815] do_syscall_64+0x33/0x40 [ 1593.193551] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1593.194687] RIP: 0033:0x7f94eea4db19 [ 1593.195429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.199092] RSP: 002b:00007f94ebfc3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1593.200615] RAX: ffffffffffffffda RBX: 00007f94eeb60f60 RCX: 00007f94eea4db19 [ 1593.202030] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1593.203441] RBP: 00007f94ebfc31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.204860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.206277] R13: 00007ffe628af61f R14: 00007f94ebfc3300 R15: 0000000000022000 13:20:31 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000019500)=""/102398, 0x18ffe) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a"], 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, 0x0, 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000019300)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000140)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0x1}], 0x200000, &(0x7f0000000280)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1593.345331] FAULT_INJECTION: forcing a failure. [ 1593.345331] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.348043] CPU: 1 PID: 10176 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1593.349461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1593.351130] Call Trace: [ 1593.351672] dump_stack+0x107/0x167 [ 1593.352416] should_fail.cold+0x5/0xa [ 1593.353173] ? stack_trace_save+0x8c/0xc0 [ 1593.353997] ? create_object.isra.0+0x3a/0xa20 [ 1593.354931] should_failslab+0x5/0x20 [ 1593.355717] kmem_cache_alloc+0x5b/0x310 [ 1593.356555] create_object.isra.0+0x3a/0xa20 [ 1593.357456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1593.358504] kmem_cache_alloc+0x159/0x310 [ 1593.359353] xas_alloc+0x336/0x440 [ 1593.360081] xas_create+0x34a/0x10d0 [ 1593.360865] ? kernel_text_address+0xf2/0x120 [ 1593.361779] ? __kernel_text_address+0x9/0x40 [ 1593.362172] FAT-fs (loop1): Unrecognized mount option "roDir" or missing value [ 1593.362697] xas_store+0x8c/0x1c40 [ 1593.362714] ? lock_acquire+0x3ef/0x470 [ 1593.362730] ? lock_release+0x680/0x680 [ 1593.362748] ? do_raw_spin_lock+0x121/0x260 [ 1593.362764] __xa_store+0x164/0x2d0 [ 1593.362788] ? xa_delete_node+0x280/0x280 [ 1593.369166] ? trace_hardirqs_on+0x5b/0x180 [ 1593.370053] xa_store+0x31/0x50 [ 1593.370734] __io_uring_add_tctx_node+0x1cf/0x520 [ 1593.371723] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1593.372801] __do_sys_io_uring_enter+0x14de/0x1920 [ 1593.373799] ? lock_downgrade+0x6d0/0x6d0 [ 1593.374646] ? __fsnotify_parent+0x488/0x9d0 [ 1593.375546] ? io_submit_sqes+0x85c0/0x85c0 [ 1593.376438] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1593.377420] ? wait_for_completion_io+0x270/0x270 [ 1593.378403] ? vfs_write+0x354/0xa70 [ 1593.379167] ? fput_many+0x2f/0x1a0 [ 1593.379911] ? ksys_write+0x1a9/0x260 [ 1593.380702] ? __ia32_sys_read+0xb0/0xb0 [ 1593.381536] ? fpregs_assert_state_consistent+0xb9/0xe0 [ 1593.382631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1593.383689] do_syscall_64+0x33/0x40 [ 1593.384447] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1593.385500] RIP: 0033:0x7fd021856b19 [ 1593.386265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.390056] RSP: 002b:00007fd01edab188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1593.391606] RAX: ffffffffffffffda RBX: 00007fd02196a020 RCX: 00007fd021856b19 [ 1593.393069] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1593.394527] RBP: 00007fd01edab1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.395981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.397444] R13: 00007ffc9678b6ef R14: 00007fd01edab300 R15: 0000000000022000 [ 1593.457349] FAT-fs (loop2): Unrecognized mount option "roDir" or missing value VM DIAGNOSIS: 13:20:30 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822cbdac RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88804aa6f298 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d094 R14=fffffbfff0f3d04a R15=dffffc0000000000 RIP=ffffffff822cbe00 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbffac75700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f3e80d546 CR3=000000004a1e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff812ff31c RBX=ffffffff812ff130 RCX=ffff888017057928 RDX=1ffff11002e0af1c RSI=ffffffff812ff31c RDI=ffff888017057950 RBP=ffff888017057920 RSP=ffff888017057888 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032042 R11=1ffff11002e0aef6 R12=ffff888017057950 R13=0000000000000000 R14=ffff888009290000 R15=ffff88801f14e600 RIP=ffffffff84203d90 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f96be8428c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd173ec920 CR3=000000000f576000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000