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", 0x1000, 0x80000001}, {&(0x7f00000001c0)="bdaf8fee135b2a724421fbd74cd0a64384a52fbfdb60dff91c2714ae20a923e377511b6163bd37b76e1431e7c9338e365f263cfed5585ba6ea11de2267296aacae4a21672c86238a11641b5358cc0c9f82f074bdcdb96f80847f98b8d7b0649247439aa0ddd8954def065b8b1cf139ef39b577d33578708adbfd32f7628130f540a8757c31ee01f8b2e65f63f849884ed0531fcf4898f13ef357865084edc7e173747503a6c8e6a54f1c6e5b02219ecc0ba49539256f43", 0xb7, 0x9}, {&(0x7f00000012c0)="39440ad0a2b49fcfffd527771d945c4c7029ed938e59e4d8f7dce4954f63d5248fc36605b1c619b8d340b5b7dbe60354637e5cced6af41cc7254f3a3b05f83581285f027b5841d1f45d371e8f4bf65b3384720cc9eea9434964c935d031ba0f125ebf46fb67f2af4ba9e0bd90e8313fc35d0b575ffe0f25a06e2374348b6b064c8", 0x81, 0x40}, {&(0x7f0000001380)="086795b4e958b441142a950b1bb6a476878ab64380ab791f55b82fde37035f37fa9ab6bb48b742e11e2d9fc31f71c05a70716be1458e3023a05c0ea5b354b1417cca38e838656da6d0e572f980a8fd260a0cf5a80362355ebbd1a7e1c46b6679ecabac56bd6a8b598ae9e108242e3e5900b9fb271c2705b1888c7f0a51bc0e00b2609f3ba6ad76c3b4375e204fb3dee6f93f65b9891ac37f90", 0x99, 0x1}], 0x2200800, &(0x7f00000014c0)={[{@rodir}, {@shortname_win95}, {@shortname_win95}], [{@euid_gt={'euid>', 0xee01}}, {@context={'context', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '[/#]'}}]}) openat(r1, &(0x7f00000000c0)='./file1/file0\x00', 0x100, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0xff, 0x9, 0x6, 0x0, 0x0, 0x10020, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x71}, 0x12, 0x8000, 0x3, 0x1, 0x0, 0x8, 0x2, 0x0, 0xa2b80000, 0x0, 0x7}, 0xffffffffffffffff, 0x9, r0, 0x9) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r2) lseek(r2, 0x800, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000001540), &(0x7f0000001580)='./file1\x00', 0x5, 0x2, &(0x7f00000016c0)=[{&(0x7f00000015c0)="5baa623dbc5869f878426be4ea3d1354f2ba2aeab7c54a0e62390b4052c81e1072f0a318a9674528e8978262021426eefdc484770b3e16fc7b5e0e49d7656c9ab9333a8e038157282e6fa1583415d3c5904adc5be3fd0ffa9c535aec9f12a2121bf1f14d9e80a4330e8a255f4e741001b84e2f8e759b33ebebf88464840622fdd39d2589bfe1ba7b", 0x88}, {&(0x7f0000001680)="67005fb482c247e9fee55702bcd6a2b66b2ab38f0e50ac90cc59a25d03126894d2b0d126c3dce4dcfb1c352d201e16aea877e9c9f18d011e50bc0dd3b816", 0x3e, 0x4}], 0x2041090, &(0x7f0000001700)={[{@fat=@sys_immutable}, {@nodots}, {@fat=@allow_utime}, {@nodots}, {@nodots}, {@dots}, {@fat=@quiet}, {@nodots}], [{@appraise_type}, {@smackfsdef}]}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001780)) sendfile(r2, r3, 0x0, 0x100000001) 09:30:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:04 executing program 7: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/4096) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2a9193f2a69be5bf) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000001000)=""/27) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001040)=""/4096) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000002040)=""/4096) r1 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000003040)=""/136) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000003100)=""/95) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000003180)=""/151) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r1, 0x0) r2 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmdt(r2) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000003240)=""/142) 09:30:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x8001]}, 0x8) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) [ 1959.040297] FAT-fs (loop4): Unrecognized mount option "euid>00000000000000060929" or missing value 09:30:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x900}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:05 executing program 7: open(&(0x7f0000000600)='./file1/file0\x00', 0x0, 0x38) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x80000000000000}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r1 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r1, 0x70, 0x61c6, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10bf42, 0x4) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) 09:30:05 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80800) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/127, 0x7f, 0x1, &(0x7f0000000140)=""/242, 0xf2}, &(0x7f0000000280)=0x40) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r2, 0x10000000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x200, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f0000000300)={0x28000, 0x1c0, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0x9cf) r5 = dup2(0xffffffffffffffff, r1) syz_io_uring_setup(0xc02, &(0x7f00000003c0)={0x0, 0xd72, 0x1, 0x40, 0x2de, 0x0, r5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r6, r3, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x6, 0x0, r7, &(0x7f00000004c0)=0x80, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0, 0x80800, 0x1}, 0x7fffffff) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000005c0)={0x3, 0x10}) bind$bt_l2cap(r5, &(0x7f0000000600)={0x1f, 0x1, @none, 0x1, 0x1}, 0xe) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x162002, 0x0) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000680)) bind$bt_l2cap(r8, &(0x7f00000006c0)={0x1f, 0x8d4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfff8}, 0xe) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000700)={0x23c4, 0xff, 0x3ff, 0x1, 0x2, 0x2000}) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000b40)={0x1, 0x1, 0xc, 0xf, 0x77, &(0x7f0000000740)}) ioctl$VT_ACTIVATE(r5, 0x5606, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) [ 1959.105263] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1959.110484] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.6'. 09:30:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:30:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xe00}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, &(0x7f0000000140), 0x2040800, &(0x7f0000000340)=ANY=[@ANYBLOB="6175746f5f64615f616c6c6f633d3078303030303030303030303030303030392c646174615f6572723d69676eef72652c6a6f05000000000000007072696f3d3078302230303030303030303030303030322c696e6f64655f7265616461686561645f626c6b733d3078303030303062682c657569643c053706782e0abc49cc8175405dd7c4269d147d151036", @ANYRESDEC, @ANYBLOB=',mask=MAY_APPEND,smackfshat=vfat\x00,fscontext=root,pcr=00000000000000000054,\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0f44, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200", 0x2e}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) 09:30:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:05 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) pread64(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x0) pread64(r0, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:30:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) write$binfmt_aout(r1, &(0x7f0000003740)=ANY=[], 0x1920) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x4838f, r1, 0x2}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xff}}, './file1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x100000001) [ 1959.378088] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:30:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="090600000000000000003000000005003500e7ffffff0500330000000000050036000000000008000200d15cdb22bdcf046f6969843e6410faa3944cc932d2038a112ed1c50a702e33b8dd2603cab650320e2be8492a331fd1fe73b50b10e1e37c71389203bea54343783b67d24693dd5e9c7f709df9616adad37e2968b97f71e209225ef55e2194f9acf444d13dd75d3dda1132a42a077bc4f94e4a249531547054aab925f862cd11cdbd30327a49ef548e04fe0348901fd111aa89404d3f113632e36535cbd587a4db40d2716dfbbee3b5925bd4d78d1d8abcb58d3eb8f5fcf05988e0f1c2", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd5e9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x667}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x20000000) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r4 = io_uring_setup(0x2b44, &(0x7f0000000640)={0x0, 0x69db, 0x20, 0x1, 0xb}) ioctl$int_out(r4, 0x4, &(0x7f00000006c0)) io_setup(0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x480800, 0x0) fallocate(r5, 0x0, 0xfffffffffffffffc, 0x8800000) [ 1959.427289] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 09:30:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 1959.485703] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.6'. 09:30:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x1100}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 1959.533018] FAT-fs (loop2): Directory bread(block 64) failed 09:30:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x2000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 1959.555818] FAT-fs (loop2): Directory bread(block 65) failed [ 1959.557035] FAT-fs (loop2): Directory bread(block 66) failed [ 1959.558192] FAT-fs (loop2): Directory bread(block 67) failed [ 1959.559233] FAT-fs (loop2): Directory bread(block 68) failed [ 1959.562767] FAT-fs (loop2): Directory bread(block 69) failed [ 1959.565300] FAT-fs (loop2): Directory bread(block 70) failed [ 1959.568199] FAT-fs (loop2): Directory bread(block 71) failed [ 1959.577142] FAT-fs (loop2): Directory bread(block 72) failed [ 1959.581880] FAT-fs (loop2): Directory bread(block 73) failed 09:30:05 executing program 4: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback=0x7f00000b}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="836acc9659000000100000f8755c2d16b8d1b2a113f86dc76fc7062b2d130afb2c4f576048b47c7a9d7f6bf9c6f01323aa8451763956f499e5370b7c045581c53ab5a8a967b80400eaf600000000000077255693f271e3314166da164400"/110, @ANYRES32=r2], 0x10}}], 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="7f93c584e2000000000000", @ANYRES16=0x0, @ANYBLOB="00042abdd200fcdbdf25070000000800320000040000080031000920000008000b31000400000000000000000000000000000000000067bb80e29b3eca71df776d6cc88280429b6e4b7b8d525c54ebcfee66da90deb82adea6679f1a6f578fb52bd7b21469f4770b1b653ab691523e519674480bc7c6e79e4e96a878a006d03e3dfed7abdd0307c944d0ce9df10217bd9592947dfe26113424"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) creat(&(0x7f0000000300)='./file0\x00', 0x4) 09:30:05 executing program 3: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/118, 0x76) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r1, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000140)={0x401}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 09:30:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:30:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 1959.886195] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 1025 (only 16 groups) 09:30:21 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3100}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:21 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:30:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4000006}) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000006280), 0x4) sendmsg$netlink(r4, &(0x7f0000006240)={&(0x7f0000003bc0)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006200)=[{&(0x7f0000003c00)={0x211c, 0x26, 0x400, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x29, 0x0, 0x0, @u32=0x80000001}, @nested={0x2081, 0x3d, 0x0, 0x1, [@generic="6c000137fc0e780ba05fc93c9f967a33683e4e5f18ab5f7278b611638b68f020a9b353932114f11911341c4912af26e3e415b90d3801671bfc3344ad10db655c76b250e255526ed971b0ec6326d2e6569729851318ee48eafc2824fd9854b330f2b5030287a95d4fbff8356e338c2ef44c11ac2ab41566ef2d2e4c4e2bcae363aa2921a76917719a57e9d7207a07486f4c1892d90cb2058fe7641bd2da93605c01df5cf4e333d727004186512ad3952002a553242085f63bc36153b5e39d2ef292a2e3a4133ea703a279d5decab33e3b2de335bc2e0b4ba5a88142c024c5ff8037c99792a13edbca88c91a00c27488edbd1158b242a0fe7bcc296454ba2f0add49dac9017faecadce200f7fd8d012a8d44db9ef248c4b7f444f0a5ca8aa31fe5144dcb515dba1c737b6ec2b9721a3fb3a96303e96014f7c8c7203adb81b112d6bb1ae4882339578485251f25d49452bab2bfa362b9a0b82a4721b6b818c781d033c9b880fa6ab842eb357994fd012631643483ae6a14f4c1f84b039b4f3ae0d9bb4e21b122b2c5c5feaf5462265240392bf0af770a616d1be691c889ac0b8c8df74b1e6db89390498264bb18ba40e83fb74e43661642ff8c6ff5ac2c941b301f2d58fc0bb97542936bfa3a6d890a79187ace8ef3bb34624d4c9ec5b9d768d5dcffcc09a692201f16f44f02fcfc56348c29c7c839c5cbbcc743fbbdff80d21f398a1141c0d369535a8ec791cf0abeb026254fe689ccc4b106b875d7bd9128118d2b040444b107bfecaf5d99d67293946d88694f089d3ff54ed4befd7c7c7a6453b6f72fab1b95a9487a3e83016d1a5e0e5a24f8400f7791b8337eec552840acbebab3f79f7131ab5989105e554e93fae90e8129d12c59dc31f8fc9805fded21cfe5b8c7a4c25c2d05f51495154a761ec5ee755b5ab38acdc1f8435c643d8cafb7eb7bd304c9793bdfcbd3f5ee5c936224b67d5f375c017d8c72a762536d6d71dbf4bb51cb107491be85a464e0b8c2107d31da82b12120646fc2b84965376c6d24429c75f80a2cceb93624bf40c020d821f591a6165898b0077a1022dd8f5db3366c85bcac6d9df2bd09ca4ce8d316f321dede366146caa516bbe27c756d39b043c808f4fac774c7537f8d53a271cf643f7061c13350fcac686df21dbe9b7214cb3720fcf04779097e18efbec0f0046721640faa714b19107571df933d3178f7a8e8242678eed95373b82b7b795752cdf09a59a540632825f0492edbe8f96d790f37d9d3868b49cd589fbab60b1f3ca1cb33e8a127b9ba24f4262ff017c65d4cdadfd3fd7f930a0e53e6176831f9904661768ede8ca482a38200828c0db5de6395ee6ffd59a2154368c2ec3c5f54939fd60f7769bbdf04358a0a883fb31b989ccbcb538ca464e6e5631e161a6fb878a59814f11480597747b54bffae6b4c4dadcf6c14ff5fa9e8e2336c3628dc1d789c6b85afecd2ef6c2a61b2b5f6e00304362079dbeaefd7885e1111f64f057fe7512b1156fbaf2e29c114f145472a0a46ac630c7a0754547012a1b770ee1a15d0ff3d920059c1bb03404d79d5ee3f93103ef233a5cf7edb9e749f3d03ae9efce19e1df7cfadf33d9fdf0ce890e80da269dff8f59f9e57472314d54de3044e7b8edb027986e271c58097a1179d373285849058c36294bcbc62039f33a9315d32256ba7fed8130df624c242d2d26d9071a54f01146e2e4fbd50db2d935fd8daa1b0c7721717402ab37f463b655bf2394d7563848ed61c2c170c0a2a9fa09d8a29395e8a4027ad3f2e32a7dea67b7b58fb672f9014e8f5ddf99456138940ed0affae72644dcb4b5c60267555dace89964a8e539026d77afc46802baf061796aea3138168fbfc8c0b103cf820ca5a5b8772ec0b94c8874e06dbfde3f838b185084be267a1f5b3905fed04778db1d94d7e77c8066bc34fadc65eaec04a17c5bec25686321dd16907154980b53082b9791cd7ad246625ebc9756705f35f9a3b325add06a84f5ab6d2ef53f48b82c76ba2a0c190591222757629eacffeaf90d65e2737eda6f4676dd3e0d6cdd8757ec7e762d529cd54cc255101e64a977b6d4e4cc4e23f95e95bbaae9278e341255b6f47d2481ac0fe4beb9dcb7380d7e6f51b661176ef41966d2ffed6e63c01305a8fb764e776133d5e3da641493d868ef60ead74e942c9a51ff3749a609d175796154da3e8624460d44a25ee71a48f3742162edd29e964630890925a017b0a353745cab1473fdf4dbb87a0f1f1f69f1737e5c914ff17852085dc07a87e23b22ef7e61dd255f8b2d4b6f5123948d037e4c3dab66bf614338c1baf219c33881073000da6c1c68ca7abf8bb59de9ea792c726d1bff80328d836bd219bf89e2819e5a4e1653da0896ab5ca610b265f669542f2b585b770c0cdec137c37322d2b1c78857f16f13875dfda9a37ecaf7e4b6d15792d65e3447446c4237a188fa1c6567f0c565bee2ec2378a88f911f6b58db88f0960bdc360241c3a852e5c624c0a22ee832c4eec96064704f801ecbb38e9dc35da8bece98a531e1216714a9c650c805861639e1e193843dd144d4332eb3ccaaab66ef0ee54b0d55c781474d96db7dff49234507b538c6ef33a25bcaa670ba5a9d5d5d0f4eba5ca1f7469c6cf2399d44692b33ec57b2ea899087bba013dd5373c6ee4f11c80c85dffa002517360bd2512b24c7000fa49a45a6396ac671d5e37168b96bc49d548f4a2a885c7691a97c85c21825931e40ebda1bd0b2776f5812152962ae9b120082b60685ac1f82bd7f3471c4033fd80772b903bc04396e0ed75333e43426c786a92b044a14c3530347befcff2493c9068db6cb0edef7f949426f0bb3eb039f5d61291415be965ea400f7ffaab007f53ba373eb0fc5747314bbab3c4e25485d93dfbae72cce1c389115e5afcc1eec21357a8ea37677331e7fd88eea6ad28815daf229e98c2dfbb152c62251afe40390914af204715e0e859449dd510f946c66a9523db2338fba3e7683c00398d3ab86affe3285d1baa100da927ca543f27270745d4c88c7d151b9e542ccd52bc88da7fc529314ac5f0c217f0f46829e02a99ea5facadebf6f0ade328946f5b56470488b495b02a4876b95fbaae0042eb9659496a2f427dc5b4a59aa8b01838b3fc3fa9d2dde1557a9409c863bbb722d3ac2a11b40347405d5c761ef1617541e40508f91f168b6c9d80ebddc2fba1c18eea4c65699f988d4be58ea8ae7acad1217c51c2608bdcf34c8248cb808302358063703f21a64abae72e85724ec34032dad48dfab81795e55e7b600ef626d78761a432375a1ccc644ff615f83d7d9444029c56439539aa98aab89549cdbc6b86d7c1a15d254e344fa4782cf37b3321025ee5ddccb1991cdc0ff4348dc39d168c2677c40b8911f999a8b8101d8d02892ef35e415f4b23e815d0b0015768ffe33b42abdc8b5421a146bf9e5d7af7e4879d795b7e265853e7d2a8a057b989d26a452c4a32aa53d40a19f1189a53340041b380b11288f20337be38c7f17ad1e41efd2acf7d0707d27de3a7eef5c6ee756e0392d4a774b60f67ddecc579d55607ec0bfe2eda51eec2be1134079b82a61f1d241ac0cf5b220a5da4b4c2da10ca0010f5bbd29c5aeec1f437b445ad20bfc8a042697de4e76bb2e20afd7d0f72e882018474474cf78d695b373294ab958ae6f5cad09d359b12c6cdb953cf8baa1e2d38d3f53b922d56277b06810fa3d6594db6178657155b9464ff30a6ecaa77ad2ef80457e3be1ac8600ce8bed37d45ec1d99d87ae88b1cb37349610cda9f0da57ba8365775bcf081eabbabf58bc52db98e19e17c7bb4f13a7569b726a7f8a218cdf481e33fc6134934761fcd4c88c0f5890bf87fe4b5328e7b3225c30126437bff5580dba7b9575cba90b5d4536545a79f36db86044e4231391d43d46a05e5bb579e4e2e2cbe062163fb5dcd99a8a169c663425303b78fe69eec0788ee675531a66109ba7409398a658823585a5c82c0e239c3f1fb7c6e37d0176fccbe0e10dc76ea73ef938e98ebb2f33f67749c00d45ec4e6897d406c0d19d6f9b71e716e912ba784b41d039e3baa54189fe1783924e9ff594f46fef2b9321bc788cada24595b82367bf7963702de1fe65f2b5ff93bee61d3d8e4de77325d456b641ee1746cc4a5fa7dad20e6397fd7995821d3dc8a3ac0abd2aeb9522a2c8265638bd593e92514f1a31ed9d93f6fc40e30539a74d53acf5366c10c78ad6511861401da4b5d0c15317044ef3e438814daddd31fb346042d49df1c07047a45d06065d5aace448bdb7986628fa363d27fdce231e4fcc943f418aaac53175a0835a3fe25533173d40b8f8d86ad0a64f0b7de1f22419b56725ae1baccfcfc3dc223c0ea49d52e67dfe063936e028341b4b4be5dc184fc864a797d47960744a8528fdf04e049f307c16ac21464ce2e2fcb2a0b0052a1188dae50c244847826a9984f09db7af1423a34debb2ceca0ecb4ad69d00d36eb99ecfa9eebb45fdf02eae4e91d646f9e477b3d72d61a25dc6ce18d9578ff10b36b5a618e7698b24932ad06392b69e3cbf10ac30eb5e765db0f7aa533037407612ee0a03c9b48b9796d3e3ea06afadacb48a3ce3e273624dbd4d8b94ecf599147c669f7e5901afb61a3b18de921b57ce1c52fef3a85be9c0d89ee35f0c6ec2b03645d5e6c57f43a53ca18cd8aa683dad3fdc9bec4d85771c09d4bd02703ef86e549bb7fcc8b7342b83c8596167bdf4566bc9bacf33589732359b6ce78f814508f7dce9dba6668e2b134bc5ef7882962a640542599a8a9069d28a7a3b05d79ad82b3b96b03bdc6cbf3b5cd1cd3b2f967a8d2bfefb70a364ebd038b31bba76337fcb12574f8cfb6a85bd8bdcb1c358e1b46c70fd66d8d7f42f8cab4dd245091006f73a63f23fc535b92e985b7864c96717e449701e643949c5184dd011fd80ce11defdb0a1d5efce5579442956dbbce4f2bbb8a63d7b793dff17b4c5d25009659d3063604a1170c159c0d321e24b3ed3b06b38b0ef2623d3ae29a238926424388596cfff09a0d3378ee37b5719b5451c2bfed89724f1075ce14933adcdbbaf91e4fa93799112a9964e96d035c563c05c9d24355d1b03dcf6381fcc49a71f34ffff9acc1c8f5d35190779e9e862eddcdbf1ed408a91640c9f78514063c3adab90e5f7084483d4455fc1ef730dd46af83ccdff688c4fa904474d557a685faf2d43b03ff4519d171d6324afbc5aff2a5f13966639106d78b3eb92b9c8c718a79f71318cd128954b5238686a01d44bc2831dbf37734100238602289c1b5b0c2879f37890cf3e7c32bc70cc2fa1c2c0afa52fe235824b9c6494a9dd20c42ac657bf1b9e917b5294f8b1672e1db60357a896f35a14f43a9dbbc3ce8817d9bc79623c3a1a7601519858b15876d8fa15db48f250f7a63300ea681720e8868dde974105bb2f1a08dc50d97caef3c52d2da47d695c467f27875c1484f7439c126512cafcd4c903b3a3b61ca383007328aaebc266f31c4299bfb4db46f5f1966d38e4c1b09d0237c3275010b7b1dc29de291e2beb48d0b292f482095b5159a6ac758e1363669159a7555506dd3fdb05beebc00da383bf79eab384e5ae5fa8b01c93da806f581b634014b6d406defede8fb84f9b3dc9d536cf2ac32fdbcc0af2e44cea236d6b48face237cec90354d856dd8962bcef480a48fbabf2fa7a85104e2cd8d36e324fb049cc1c897cf1a5758fd75ee1f3963880f9ee22b6cecd0f3d95b884860c89dfa8478f67a52e17ced207342214", @typed={0x8, 0x2a, 0x0, 0x0, @fd=r3}, @generic="43ff556e4d6ca267caa3cafd4ba44260876e7c04657da176bb6b88b0f8dadd3069cb9df7198ccd5eeb826ce04b051aead4001b4a2c9d9f051bcb2bbcb0f0ffaec99dc41a3609802d5d97cfd76fe39edec9beadee818577d98fb0fc79bd4bdcdd033742c24173baf99e829dc71d94e60008", @generic="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", @typed={0x4, 0x47}]}, @generic="7e841ee28aa32c84f189e05703da7a5d9604d9f108ef75a4d0f78ad9c4bb79e05abcde3927b79348a9520d3675a40db36c5a0b12e44145b647fd786fdc1ce9d87df8055019d408af45bcf8388c0ae2426a94ed8635d7f591a9244141dbf7baab85bd2eaf3a84ad5554fb47d159f7edae81084a0cbb5ef07bf69764cd5c9db8d7"]}, 0x211c}, {&(0x7f0000005d40)={0x4c0, 0x1e, 0x200, 0x70bd2c, 0x25dfdbff, "", [@nested={0x36e, 0x32, 0x0, 0x1, [@generic="336f7bcb01a7dfddefb3666338fdf3b24bdbeb1e8acbbde4d45c96524b7126c0286d6495634cdb9d040e8b0c4a7305477a64dfae2e7a2ec56f4cca67f7cd6ad89c48488abb08c6279ebf72f7097a", @generic="ec4fdbe2f83a0b8bac11a687b8b63e472830cae2076efa9076de202333ca7c4f0f737a737b0155fa9a312a2a68a762960f8049813c21d8bb111da752baf16ff2c3e4d87f2b18673590cb8e410530658f0df5ac9450dca09d3a27aa2370ad9a8019b25ae1dcda4ecf89e7e0009f847da3358fb4571d75768d6835a107", @generic="bbcca428fb3aadb5aa737e2f65560a522cb0aab34c5263a54b4e0a69474a77a40901ba9d580a9df72b66f775a5feb47c6ad1d60f6334e63bce314be54034127eaf25961be8480878241a5a51976ed2724800b8aecf627f538af4635cd14119c344be423ee56bfa854ec79f98ea4e4c767596aaaf5fbac24068d3be2badc7c57557825949c9ac18049fc83c45ca3b44899cd510e0961d521674d8cabaf469b15541cde18344fea2dffeef59b26609889f4f29c3df86fe72004d5e6d4c6951bcd488f7afaa2860a7caeb8e6dbb2c5b7d4d008d2897e603ad561a874be957b773a2e6f6", @typed={0xaf, 0x8f, 0x0, 0x0, @binary="9bad50049e5a9310f1e5b6cc57befe8cb1f82a5d415eae6f0f13fbaf9d44fb7e4a5a31275760d957955545c099ebb8347763ce7a2e489a82314557b3bf2057b9af0442af3113e4fc08edf7232d025c891fc93ff657628b82942062957653dea13a3c7be3d8a712459cf1931534820bd6472fd2a0cfe5b990fee2b32d79a807d323315fb5a671f00659d25bab65fbddcf8789c49b65a442b3dac70814d282affe774316f9e4d34d5af1a889"}, @generic="beed906488f49aac540227730a2b162c1b2ad9c2a66245d01f9ba6ed89fca3266c5102042ed8f259b4c3e24c18c56519d42a591cd0826bb3ee8846895d8677361ad0", @typed={0x4, 0x2f}, @generic="ca16c0d47d9913ff3509618adf6629a01411d5078bf23bb06689e929f4585ac06dc1a830ab30ecb7c0bbec4d383cc923eb3b385983adbd7b51647afa3aa7c85e8823f42ed20de5f5eee6ca7a295c9ec3c9e46ec6d9e23cc7ac15e35c28a347e32be617e39f0a96effdabf4e5c62b1e37af7dd00d7f4aa63d88b2b1702c5281fe50799906e26188fe7c83114f1e9bd668b7600e4910f6ca87125d7082cd3c052f6c3cb4a5e7c002d7451e67f0328ac1c61e7bee36a2fa20ad221257", @typed={0x7, 0x60, 0x0, 0x0, @str='\'#\x00'}, @generic="e548b0caa4"]}, @generic="72e2c698aede38ac1cf42cb60a43722cdf4981db75194b17ccf3280fc5a350b27ba36ccf4930ff28e2368311cee6233b53643788ac9a04d21f7811ef8ebcc893670678cad7f05b05fef2890ed4d5527ab02de2b81c6cd09153fad7462d7618a9b589cab013d31f5c3004d7029c4dd2b1ad4aaf547a991f4741cc1036559266277a613d1e5df45fac8fae9386aba1945452018842d95526f79bb93434f9293f40f752769789d56563c40a402941e728d3fbcdb047eafcca4c3a15471fd33dc053604b077b9c5d1637081af78a6ee68f4c0d325d92f8be48c64a55782a23c0a22cad6e9a6d31c18b27360f54302de89ff2b5b4", @generic="ad34a6af58213422aa8b2eb6fb85e0890b3e1b0c760ae54b5caa71b70e486ada62b8ffb430c7ae6508bbb643d82e5529d00bf3a0d4ab2e3b3ae50fa00b08f4c3e3dc532a09a98e3ce4133e"]}, 0x4c0}], 0x2, 0x0, 0x0, 0x2000c000}, 0x4000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x40000101, 0xffffffffffffffff}, 0x12005, 0x0, 0x3, 0x3, 0x0, 0x8ee, 0x1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003b40)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000003a00)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000200)=""/235, 0xeb}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/85, 0x55}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000001380)=""/102, 0x66}], 0x5}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/234, 0xea}, {&(0x7f0000001600)=""/143, 0x8f}, {&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/1, 0x1}, {&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/209, 0xd1}, {&(0x7f0000001900)=""/65, 0x41}, {&(0x7f0000001980)=""/103, 0x67}, {&(0x7f0000001a00)=""/99, 0x63}], 0x9, &(0x7f0000001b40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001bc0), 0x6e, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/253, 0xfd}, {&(0x7f0000001d40)}, {&(0x7f0000001e00)=""/21, 0x15}, {&(0x7f0000001e40)=""/117, 0x75}, {&(0x7f0000001ec0)=""/70, 0x46}, {&(0x7f0000001f40)=""/99, 0x63}, {&(0x7f0000001fc0)=""/170, 0xaa}], 0x7, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000002640)=[{&(0x7f0000002240)=""/124, 0x7c}, {&(0x7f00000022c0)=""/231, 0xe7}, {&(0x7f00000023c0)=""/222, 0xde}, {&(0x7f00000024c0)=""/99, 0x63}, {&(0x7f0000002540)=""/94, 0x5e}, {&(0x7f00000025c0)=""/71, 0x47}], 0x6, &(0x7f00000026c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/85, 0x55}, {&(0x7f0000003780)=""/48, 0x30}, {&(0x7f00000037c0)=""/25, 0x19}, {&(0x7f0000003800)=""/219, 0xdb}], 0x5, &(0x7f0000003980)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x70}}], 0x5, 0x40000202, &(0x7f0000003b80)={r6, r7+60000000}) fchownat(r2, &(0x7f0000000040)='./file1\x00', r8, 0xee01, 0x100) sendfile(r0, r5, 0x0, 0x100000001) [ 1975.452004] netlink: 'syz-executor.3': attribute type 7 has an invalid length. 09:30:21 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0xc3, &(0x7f0000000040)=ANY=[]) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0, 0x179) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) inotify_init1(0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000428bd7000fddbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0400004e00000006003600018013f3083403c3b336cd9068297d729cde2334380b76b69dc201a5c038702365799195922955d188a872f397ac78a19889800ef730e70129fbbec792ba79ccdbe273722a5cb6a897d7043900e2412ef618d18330091ecc55277d5a5d7623d11ee0869cb74b1ea40a11c10648c388ac83035dc5a828131be7d22532a97203763f89"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair(0x22, 0x800, 0xff, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000001e00)={0x2798, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x8000, 0xc}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1630, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1610, 0x4, 0x0, 0x1, [{0x1128, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffff}, @NL80211_PKTPAT_MASK={0x19, 0x1, "c7214861c9735e475d1d63fc8011fc2e931a3140da"}, @NL80211_PKTPAT_MASK={0xbc, 0x1, "656e7abba52a95d03c46c462508aab7bcf688f122c0d474995fac56398d4814cc4282870aec0ad519e11047b166535e7d4fedc542f5d3802dab101d0f15af3118e7dbc8e4413de4587e9a24405258307530f1503f8263fd0f08713c65325bf2882b4cc46fe66d3a2de501736c6e0017a1ce2f5412168c5ea793da8421d7094bee4e4b632eb8af892406659ffc90fd8e941d95b3a7762590a0e614039534edcfe37b719cb586ede8b8846927bcb36872c5a41552730697011"}, @NL80211_PKTPAT_MASK={0x3f, 0x1, "e4029931be8b787528e8cbc0cb06d4402e76cda617a28bf56152d0c8f326b44245dd0b65e518613d61bb662834649bfd969968c218b18052b1cb78"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_PATTERN={0x7e, 0x2, "98da80e487af7a30fa171a27ac71943b2d82bc4d844ed1245645b2b81e8c69b5c060efc1b099ba0075afb90f08ff31afdb72c3844e257265a25b99589d150de1083243af135a29b007c64c639a5dc77104c9c5969adeb109d1ae815cdf7b073e4db52f48bd4de475d387e3b69976323ae10393224abb8ba11ba1"}, @NL80211_PKTPAT_PATTERN={0xbc, 0x2, "86946cafe2053068a26cb64e6e447ccf91c62a664639aa159578a14e8b977222a3d6a28f174ece33a514e440f1c26fb440d4f7fd61930846ac66796260c26400b8c7b5eaa2db6ab3361237643b9536ab8550acbe8acf30a3acbe694578c2e8d67f96e3e2b519f2ed8e756fa719b19ed56fd3ea7d4f98cd7b3f35ea20aefd089af1d8fc37e0cc96f62f7d04ea8436658e305408a0de4b8e522dc3f0cc4e0fdd4240f35db2f24baeb3630182ed17c1475b9efff19914630ec2"}, @NL80211_PKTPAT_MASK={0x49, 0x1, "95e99962c2d1566239f691aacd57a803fae2cd7ff7ea3520cb8bfcad4de944d2fef02ec6a0836c6f8cf68a88c7b6fc64e5d95c51e181d73804517f9f0a0ca4bbfc56e9cdd2"}, @NL80211_PKTPAT_MASK={0x5f, 0x1, "4fae61db2eb3f2d03d9cf3e63760d01201cee221c999e6cbe97de3d68dc360bf1498466b8cd97ad3c9d20f45b97bec654b7b7cee61f535b0a97795161f232d807a8d8736e63a3b913238be92357c9321553bc8db51d2078073adda"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0xd9, 0x1, "00e5d415c6973931ee57d64803e8fd648628f18364ef660e5e434662df2b2f9bb526eaa286d652735758c7478b89486ec76f49558990908f9a5deafbc15a8d11151caa229365ce0fb08cdeec0e826f986f5b50f732d067a113fa086ba726ed89d35343a9a70d490f3092f1007d92bd4d647e99af51c6a316d5f95ad90e2c72ea1425d23d94e23c3c41e542661aa53a4b13921b92397a0039af120cd56bd7c9ad5220dc432f0d06f4a84c77e910bc2413ecaf4d0fe868965f646940e93b9db0917f17c28897950f407077c272cb263003118f5c292e"}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x3c, 0x2, "44ccc151a1c03ece3f5b6896879ec1d0fde21bc4c29d1e00d7a4aa0c572164cdaad9f4147d540ff621eb3244de53261bd1651833a3486bab"}, @NL80211_PKTPAT_MASK={0x101, 0x1, "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"}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xb2, 0x2, "8faeb7279b6141107baeec348a7807df27498be267a7a540e5f4cb2ba4188d7ee777122451b3e5c005738587cfff91b8f879d3f5a74043a3180016f156c8e0fb344954c9958d124265bfe2dd810641580dda7f63950824d73c3634b50fab57a6b0f14ae3a6c1fc54e1d81caf35389853b8930e23f1ce1eca93a86035ec472804e5bf07944b0845b50c31501486351f27f9bca485d40be500c8ac8e0ddfc2512a2383d1e7663e51ce03882ba09997"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x954, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x938, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x10f, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x19, 0x30, 0xa}}, @rann={0x7e, 0x15, {{}, 0x9, 0x7f, @broadcast, 0x1, 0xe69b, 0x3f}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @perr={0x84, 0xe9, {0xdd, 0xf, [@not_ext={{}, @device_b, 0x3, "", 0x21}, @ext={{}, @broadcast, 0x10000, @device_a, 0x20}, @not_ext={{}, @device_b, 0xffff7fff, "", 0x1f}, @not_ext={{}, @device_b, 0xfe6b, "", 0x22}, @not_ext={{}, @device_b, 0x3, "", 0x1d}, @not_ext={{}, @device_b, 0x7ff, "", 0x28}, @not_ext={{}, @device_a, 0x3f, "", 0x5}, @ext={{}, @broadcast, 0x100, @device_b, 0x2a}, @not_ext={{}, @broadcast, 0x4, "", 0x28}, @ext={{}, @device_a, 0xf6fc, @device_a, 0x2a}, @ext={{}, @device_a, 0x2, @broadcast, 0x29}, @not_ext={{}, @device_a, 0x4, "", 0x42}, @not_ext={{}, @device_b, 0x80000000, "", 0x8}, @ext={{}, @broadcast, 0x8, @device_b, 0x17}, @ext={{}, @device_a, 0x9, @device_b, 0x26}]}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x9}, @NL80211_ATTR_IE={0x104, 0x2a, [@challenge={0x10, 0x1, 0xb7}, @peer_mgmt={0x75, 0x18, {0x1, 0x8000, @val=0x8, @val=0x24, @val="73573fbccd1d2754f4452297c8db987c"}}, @link_id={0x65, 0x12, {@random="90e62576bdcc", @device_b, @broadcast}}, @peer_mgmt={0x75, 0x18, {0x0, 0x8, @val=0x2, @val=0x2d, @val="4b70cce9c716400c6c13d3606c1863a3"}}, @preq={0x82, 0x72, @not_ext={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x7, @device_a, 0x2, "", 0xc7d, 0x9, 0x8, [{{}, @device_a, 0x1}, {{}, @broadcast, 0x7f}, {{}, @device_a, 0x800000}, {{}, @device_a, 0x3f}, {{0x1}, @device_a, 0xffff}, {}, {{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}]}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x4, @broadcast, 0x7, @device_b, 0xe78, 0x1, @device_a, 0x74d1}}, @rann={0x7e, 0x15, {{0x1, 0x69}, 0x0, 0xfd, @device_b, 0x10000, 0x100, 0x40}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x113, 0x2a, [@tim={0x5, 0xd3, {0x1, 0x79, 0x7, "d8075014054d325065d8b4e2655ac29a0e1af712e982927e1ed1aa10e2dbbe6f1905bc32bb6578c2cbc8b7d6b4af9d85fa9fd1d64e5431ef5f9f9de3fe16e6ee21a2e4466889114f7efdd918364ac92280a1fcb0178b480647209baf50bce2e0526c59cb2a1193ffb5f92b78c4f4c1a6426e603fb50cee7705f9679b0152b50c997f6afff6220c9d97a7e5904c8922811a385310a32b32c39c81d0b33c79ea9207f9746a6ebfdc71535f3ab71ca2e9847eabcf2d2955ecb32c59bd3c2172e11aa731092cbcd03a1176c65c3283e3a400"}}, @peer_mgmt={0x75, 0x8, {0x0, 0x3, @val=0x1, @val=0x32, @void}}, @cf={0x4, 0x6, {0xff, 0xff, 0x1, 0x6}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x21}}, @rann={0x7e, 0x15, {{0x1, 0x59}, 0x6, 0x9, @device_b, 0x3, 0x4, 0x98}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x5d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x103, 0x2, "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"}, @NL80211_BAND_2GHZ={0xf4, 0x0, "35f59e5d01b7448988690d7d79285dccf3517e5e23502a2002a8d2608e4009a38de94bfc0af063146d711679daafcb64db8152640c437163bbcd30e4c653b6fe4477d63ba04d90772c299fe309d44b1008cbf6d6c13b291662104eb4abc1dbee7303955ad099d2c38cce63d8cd2699c4a3271d775adf0bd5089b885c509e98f710c18c03ccb5988eb710dd378b7382892ae28f4458070ed5d51cd27b3396bde0248f5e32e157ff814c1cc45b9877f2e0131afd6865e9a97ab81e440b4b4346fa75937230393ae8b1b436356e04d74a10d37ef70f441dfc9559eaffd14a31bf23f29fd7e84cd8be510111fd531e0fde63"}, @NL80211_BAND_5GHZ={0xaf, 0x1, "29a803fe1ea4c1035b6aed8c29d81c2d0f21c573aebadcc0dcc5330768c49a7e3de0f294b91da19113ad2ab879cf44c9ee6acb77a7e5a5ad8579f2a8497544b3bfe65a01be0a7173f75595b4b2e218bee36f78e956486dd32350d9076a738817ec77f22c84f696c5e6c1cff6d64144af816b6f01d3c606789a159cea13e6ec0eb9f0a8164972054e0304311812bd0477314ff49de3de3937acc50329e1389793ca36e595d291e7eb2b929e"}, @NL80211_BAND_5GHZ={0x43, 0x1, "0e8f8a119a2ba845cdb4d91d89a4652fc1f5ade4f08dc119c6477edb5c093afb23f677d73bbdb2067e64f845ef76b74ece5c27252620dbc5b3b586cf05aab0"}, @NL80211_BAND_6GHZ={0x3a, 0x3, "54733aac98a0018418a0fc8629a87d1b88c101867e232806e98aa777b2fcd29b8f89f50c391dd9f8a4ca720891d0bc6d3384fee78a39"}, @NL80211_BAND_60GHZ={0xbb, 0x2, "90e3df90b77da3c5056fdb0e2a36ba1593a8728a95e3d1d829c0ba3c6262acac2595f458c0932a20f0d666bb791d8488bac0694439aac3584578646c2acca074e000aafd1ff392d9134e55f9916fd0831341616207101c27fee8e71ed74f232662bf8f2322d1b2de86837c1f0076daec1d2581a931ef36f03cda648186280bf6608579dc6633fb335e94f612993eb9a21fde3ebc5b0796b9d04a33ee227728bc905985b1172786bced64f5353b140f04bf7fd328d956aa"}, @NL80211_BAND_2GHZ={0xa8, 0x0, "0e4606df395fb09aa365ef9545cb270cb98559745cdefdcd12535f3cf6d3e2dc172148a2ed0315927ba115a07c8c8eef92055f96f7081ddfd6846ba0ab4e12328c7c263fc63ec1457d95d265824946016eab77a18fb52ac276a09564dd5728e7e987bc2790fc919a7346a7437709f7e78b0bafaa4339b65c1cfe17ac1aae82e9893f49fb697b4604156ff75fae3cffea68ac9309991e4b8f32a0bd928d1e99c380d99bfa"}, @NL80211_BAND_2GHZ={0x8d, 0x0, "0ed0475d2cd196357e2820c9019619264893396595dde3e652d6736eee7d554010f8a74dec9872a0fe23e47b0fa24cf5cb2a34d63ac11baa28a3f2a44534f51c33a3e4301ffcdb67d0d2d9cc8b001a2cb7d50021f9ac6d6404a1a25d0c5f851bae40212894a56e452c9bb1cb479bc535030fe6a3e0ca4cc715e486f70aa513df08385a7f78470cd817"}, @NL80211_BAND_5GHZ={0xb0, 0x1, "41e9947bd895c9ebb5fbd76d32c6d0e654e864e59ac4ca815bd94e64ec5f9c0a314b583487f3f685c736da6cc50a9dfc23383665626fc8e36fb164a4ab84539cf9c5cb6c7df3818f03bdac7ddfc83f522837358512524d5b92d019b8d6aecb03fdfa306193af1608203c76e92ad5c932f7a62c6d9c48d07e956c436d45bceae166b3cf8a84c08e7e435b131c798995c039171ef9f4dfb3616ca01340b8a79841ad85885d1377b939e780ffcd"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xd32}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x7bc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x7b8, 0x4, 0x0, 0x1, [{0x220, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x61, 0x1, "682f4d89b114aad8ef747aaa950c1c7bfd95d860f63ed311873a13ad14870202fac690235c94ad7cdf3b93b969931cf15b602f0a473f86ea2c129e68ba3efff5b1994158fa6d8586ef99b5b49bbf9ec3bdc8e3839845dfca82d1965879"}, @NL80211_PKTPAT_MASK={0x80, 0x1, "7aa7951dc27fc2cb2b13ec4c69c85b8484958331573abcfd40ffe02f3089a92ad8816b4c9a2ded9f4cd2d6a694d8e631cd7cde69f2ab68098e86bcbd08380d33c55dfee066ccf01a1d1871cca3f1b8963819f1e8832d9979910c6539de5fed6278b7d39fa59d2aea5863920783fb8deca0e8fd0556d930f49710cae4"}, @NL80211_PKTPAT_MASK={0x95, 0x1, "3b215daf888a2d24307e706224c86e41ba57c9ac92d9986877482e6f7094838c447e583f9b413d063910e5143e306f835d820edd9017d8b7f49237293db701f49bad183d23ecdef5b04d38050aad330427e17592c4c28ac40fa6fcf994baae828e4b5f0222997dfa91ea41de45151aeec3583b82c607e87b6ca6f3ac22ae7d4863c63ba3d03583b816265dab2e97046e9e"}, @NL80211_PKTPAT_PATTERN={0x95, 0x2, "35b1e96fa2ffc0e6f35e67a0099f61a8c4527c29f55516a8cc03fb4f57da6b7f151228cfcc0d6c4420c93afbc2c520e03d51c0ba02696ec774730600a242d944f2e1a4c4491d253380e9707eef7107bf4ef647a0912e78e6394652e200b04764e2f853419b1a86e07f9b5f72f7ed70ac3ea90c92c12dcc134d4b7408deae556cc72764a47a7ca3f7d6ea4df68717972f45"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ea}, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "abd05b86e705ddd64c73ac4c00025072fe14c7739dd273b3ef53712bcfc62f989c48b0"}, @NL80211_PKTPAT_MASK={0xeb, 0x1, "a3898582a5bc1c744e75b67e4a0aba1820243c52f3991b1afa218b13972552a244cfd10908267a4994b2a7081ce7c4472dc337ae1015518aeae90d8f063eb4d6e698af91058a0094bccc591e9afc69b2961d7fe3165c923586c36e6eed313f4b6d1fcda1bbb6b241aa3aedb1069f7e27d149bc07fa5285e07fd0a0fd193a888c2b28cde803bfe88d0adb017bf769fcb2459ff5f229112eb141f8f8cb6dde94ca565c11b4bde9bf6e7a9001a8a3957f9d2853ab03b26a2ba002ab0d2761d034e6e89784ee794d974abd0d849ec32e4cef2f778f877495d10ffb9a481c5dab8fe1a96a950d5161c6"}, @NL80211_PKTPAT_MASK={0x54, 0x1, "7c2504bbe340d08c47cfcb3eb009b1a30c84990391a19b5224b1a679d8c7d5289186cf10e1408677416935b172619573fb58f31e2bd16f571b7a90acbee316d7a7cb4e9cd98a808b9772d94bb74c2502"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}]}, {0x3f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x86, 0x1, "08462dda68513b378c02dcd6b023c65ec5b48351b477772ee0f100a49f1aafee6cdfb4951a1e524a499c9576591ba71d275f64d3fe4dd5385a3b1f122c63575839941108ccf9e350cffce2b8482ab6b5ae0ebc679d182e5483d23dbe4f83581474824434a7593d5dec97c0f69adc1f2f57cc923df9bc0da1b3f2710a59237681031e"}, @NL80211_PKTPAT_PATTERN={0x46, 0x2, "aa7d31dc6d3bdfb15d44a2d5bf0ad9eda9efb4e38410335b250e8de43caebd756ef964640e458b4e46dfd65c88ac4fed0dae47de06f98e315223f12c46088e36808b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_MASK={0xf7, 0x1, "a0abdca6e4429ec0bc3b77de7bc64bec32a6e8f3adf33ffae8da8cd0fe9586a1bf541e99b59d257851439f803471b63d09218deaa1598831078bebeaf6dc9fb1ee0a4de791c844eb9a18a81d6dce7198baf48925f6415e7ebf75e8da1063b305f251b87d3ba0496a54d57079258837bf45e9425dc7024aef08cb999b0961b6b0aaed96df22fbc0d434922418f9d39ef1c2f2c06efd9bf078e2153efbe7e803784a9d9e5f74c1ae69eb5fc6e4c2d93cde41b00cac92e64f9e4eeb212557a3b6e54326759ad91f807ea7506eb403704bd2e5755d93784e66906cd9cc76a3aa294d76179dfae3ab6edffa4a92418829aefbfa340f"}, @NL80211_PKTPAT_PATTERN={0xba, 0x2, "419c3ec490c69bba1e4f5b8acb4c07ee4a382f083889153bbc088735c5eb0956ca8cd9a5681ead2251f66418b2af223bb966d4a0c9d337ab71f82b1d4ea0b719ed95c432dbeb8f04de491f71706a6a718e022d532b8e1212847e483f84e66fbc096fc397fd7b307bd0cb30f145dd38093f017f4deaaf6a511854664e42c6bd43a57145e8b294e8af3bf4b4426f84523635a502ed459842b287c44602e8598689b8e4d98f70017fe3c3975f88ac895d5897ab58193933"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9ed}, @NL80211_PKTPAT_MASK={0x8c, 0x1, "3360f4ee1e3af386e126dfbec48fd52f8c64b70bcc32c4cfa42333ac16d163da13b00e73cfe10815e5370e37d602dbc5ab8c878bfd96ca61ed6c3e693b896de5441cafb1eaced27119ebfbbd96697ca94c9020f83ae2253205f0a08c9869211118e3aec98762de8da787b504aaa401f6021216ef80f0b6e0e5f350fe24ab80f2da0b19dbcdc0126b"}, @NL80211_PKTPAT_PATTERN={0x5, 0x2, "cf"}, @NL80211_PKTPAT_MASK={0xbe, 0x1, "cf1f2fbdef2a628ade45a3aa34e8ea8ae2eaadd663c379233040c6129510ff14d48b6fbe70b1090373ba1800e326a6b69eef9e093d25950ecba08cdd221f9cde8df6874dff6e550f46d3f49e32d551a80109bb736ce88ea0e72b49d24072bbbccd3f269ecd5d4f98c48633ab39ca584d695756805bbe8b3a5ada4753cdfcfd4fd5ea9d74770501b9856409c2b17cb1df6a2487c165913147064945f052acf55cd35953b3839683f9856bc62472714a6439740b12fa19d14f8b27"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x2798}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0xffffffc0, 0x4) 09:30:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r2, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001e00210c000000000000000007000000080000000000000014000700fc0200"/48], 0x30}}, 0x0) [ 1975.486296] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1975.491161] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 1975.522029] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.6'. 09:30:21 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 09:30:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x4000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 1975.671716] EXT4-fs (loop4): Unrecognized mount option "" or missing value 09:30:37 executing program 6: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:37 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000100)=""/197) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0xb0002010}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) shmdt(r2) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x10000) r3 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77f, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) r4 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000002c0)=""/184) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000380)=""/220) 09:30:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:30:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xc805}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:37 executing program 2: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x6, 0x80, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x65, 0x0, 0x80, 0x2f, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0xb, 0x70, [@loopback, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp={0x44, 0xc, 0xc3, 0x0, 0x6, [0xcad, 0x200]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x7, 0x8, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x8, 0x393}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x294, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x50}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'syztnl2\x00', r3, 0x4, 0x4, 0x7, 0x7, 0x2, @local, @local, 0x1, 0x49, 0x101, 0xf9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x700, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004804) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000900)={0x794, r5, 0x511, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x20, 0x3969, 0x2, 0x7fff, 0x3, 0x3, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x2, 0x3, 0x1b, 0x3, 0x12, 0x9, 0x6c, 0xb, 0xb, 0x18, 0x30, 0x30, 0xf0028f3086bc0f14, 0x6, 0x5]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x9}, {0x6, 0x8}, {0x7, 0x2}, {0x7, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x4}, {0x7, 0x6}, {0x1}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x3}, {}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {}, {0x6, 0x5}, {0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x2}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x1}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x7}, {0x1, 0x8}, {}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x7, 0xa}, {0x2, 0x8}, {0x6}, {0x7, 0x4}, {0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x2}, {0x4, 0x9}, {}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x6}, {0x3}, {0x2, 0x9}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x4}, {0x5, 0x2}, {0x4}, {0x7, 0x3}, {0x1, 0x1}, {0x7}, {0x5, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x4}, {0x3, 0x9}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x48, 0xc, 0x4bba399426bde7bf, 0x1b, 0x0, 0x12, 0x4, 0x36, 0x48, 0x9, 0x36, 0xc, 0x18, 0x1, 0x36, 0x0, 0x18, 0x6, 0x18, 0x4, 0x9, 0x6c, 0x16, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x14, 0xc33a, 0x2, 0x17de, 0x7ff, 0x2, 0x32, 0x2]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x18, 0x12, 0x5, 0x60, 0x1e, 0x4, 0x2, 0x1b, 0xc, 0x60, 0x16, 0x12, 0x5, 0xc, 0x6c, 0x3, 0x4, 0x35, 0x30, 0x1b, 0x9, 0x12, 0x1b, 0x3, 0x3, 0x5, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x1, 0x1f8, 0x97b, 0xffff, 0x0, 0x21, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0x18, 0x30, 0x48, 0x16, 0x48, 0x16, 0x1, 0x2, 0x1, 0x74, 0x0, 0x0, 0x2]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x4}, {0x4, 0x1}, {0x4}, {0x0, 0x6}, {0x4, 0x8}, {0x5, 0x1}, {0x3, 0x2}, {0x5}, {0x4, 0xa}, {0x5, 0x3}, {0x6, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x5, 0x86648108786e4723, 0x12, 0x4, 0x36, 0x30, 0x18, 0x9, 0x2, 0x18, 0xc]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0xa}, {0x6, 0x7}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x7, 0x6}, {0x3, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x3}, {0x6, 0x2}, {0x7, 0xa}, {}, {0x6, 0x8}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x4}, {0x2, 0x8}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x2}, {}, {0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1ff, 0x9a, 0x5, 0x40, 0x467, 0x0, 0x400]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x1, 0x6, 0x3]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0xb, 0xc, 0x30, 0xc, 0x4, 0xb, 0x64, 0x12, 0x36, 0x30, 0x2, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff93, 0x0, 0x6ea9, 0x4, 0x83d, 0xb10, 0x401, 0x7]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x1}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x9}, {0x7, 0x4}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x7}, {0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {}, {0x0, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x9}, {0x6, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x7}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x5}, {0x2, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x6, 0xa}, {0x7, 0x8}, {0x1}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x4, 0x1}, {0x5, 0x6}, {0x7, 0xa}, {0x5, 0x3}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1dd, 0x5, 0xaf86, 0x9, 0x5, 0x4, 0x5, 0x1d74]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x0, 0xffff, 0x40, 0x9, 0x1ff]}}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x3, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0xa}, {0x4, 0x3}, {}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x5}, {0x6, 0x8}, {0x6, 0x8}, {0x4, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x7}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0x2}, {0x0, 0x7}, {0x6}, {0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x35, 0xfff, 0x81, 0x54, 0x3f, 0xfff8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xce, 0x0, 0x3f, 0x6, 0x1, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac0, 0x1, 0x9, 0x7, 0x7ff, 0x80, 0x1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xd54, 0xff, 0x0, 0xa839, 0x1ff, 0x101, 0xfffd]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x6}, {0x7, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x7}, {0x1, 0x3}, {0x4, 0x1}, {}, {0x2, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x100, 0x2, 0x3ff, 0x1, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x8}, {0x2, 0x3}, {0x5, 0x9}, {0x5, 0x4}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x8}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x7}, {0x7}, {0x0, 0x9}, {0x5, 0x9}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x7}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x1, 0x16, 0x0, 0x18, 0x12, 0x60, 0x1, 0x18, 0x1b, 0x36, 0x30, 0x16, 0xc, 0x3, 0x48, 0x1, 0x9, 0x30, 0x16, 0x48, 0x16, 0x6c, 0x12, 0x36]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x6}, {}, {0x6, 0x5}, {0x3, 0x3}, {}, {}, {0x1, 0xa}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x4}, {0x2, 0x9}, {0x3, 0x4}, {0x3}, {0x0, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x24, 0x6, 0xc, 0x2, 0x4, 0x1b, 0x6c, 0x16, 0xc, 0xc, 0x18, 0x6, 0x5, 0xb, 0x12, 0x1b, 0x60, 0x1b, 0xc, 0x18, 0x5]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x5}, {0x5}, {0x6, 0x6}, {0x2, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x7}, {0x4, 0x1}, {0x5, 0x2}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x3, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x80, 0x7, 0x9, 0x0, 0x3, 0xd9d, 0x3f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0xdc95cdb6da979c32}]}]}, @NL80211_ATTR_TX_RATES={0x27c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x24, 0x16, 0xc, 0x24, 0x5, 0x17, 0xc, 0x6d, 0x4]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x6, 0xc, 0x48, 0x18, 0x6, 0x30, 0xb, 0x3, 0x12, 0x12, 0x4, 0x36, 0x5, 0x1b, 0x1b, 0x24, 0x4, 0xb, 0x0, 0x13a35ecf36481323, 0x60, 0x6, 0x5, 0x30]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x5, 0x18, 0x3, 0x36, 0x18, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x7}, {0x7}, {0x6, 0x6}, {0x5, 0xa}, {0x3, 0xa}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x3, 0x6}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {}, {0x3, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x4, 0x8}, {0x6, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x3}, {0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x8}, {0x6, 0x7}, {0x4, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x6, 0x6}, {0x2}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x8}, {0x2, 0x6}, {0x0, 0x5}, {0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x5}, {0x6, 0x8}, {0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x5, 0x2}, {0x1, 0x3}, {}, {0x2, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x6}, {0x2, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x8}, {0x7, 0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x3}, {0x4, 0x5}, {0x3, 0x2}, {0x4, 0x4}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x4}, {0x5}, {0x5, 0x6}, {0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0x1}, {0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x9}, {0x7}, {0x6, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0x8}, {0x1, 0xa}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x2}, {0x1, 0x2}, {0x4}, {0x3, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x3, 0x5}, {0x2, 0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x3}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x7, 0xa}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x2, 0x5}, {0x1, 0x9}, {}, {}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x8}, {}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x1f, 0x7, 0x401, 0x800, 0x7f, 0x81]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x1f, 0x18, 0x4, 0x6c, 0x1, 0x6c, 0x1b, 0xb, 0x1, 0x1b, 0x2, 0x6, 0x6, 0x2, 0x3, 0x61, 0x6, 0x1, 0xb4bf4575cb04f3e8, 0x17, 0x1b, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x30, 0x36, 0x9, 0x36, 0x30, 0x1b, 0x9, 0x12, 0x2, 0x7e, 0xb, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0xa}, {0x4, 0x6}, {0x0, 0x9}, {0x1, 0xa}, {0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x3}, {0x5}, {0x7, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x6}, {0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x6}, {0x4, 0x9}, {0x6, 0x5}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x8}, {0x6}, {0x2, 0x5}, {0x2, 0x7}, {0x6, 0x8}, {0x2}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x16, 0x5, 0x1, 0x12, 0x24, 0x374b10e2c5601f9a, 0x24, 0x6, 0x24, 0x4, 0x3, 0x1, 0x6c, 0x3, 0x6c, 0x16, 0x6, 0x36, 0x16, 0x10, 0x18, 0xc, 0x18]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xaef6, 0x0, 0x4, 0x5822, 0x81, 0x4da0, 0xff01, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x4, 0x8000, 0x9, 0x2, 0x2, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7fff, 0x81, 0x0, 0xff, 0x9, 0x7, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xea, 0x6, 0x3, 0x2, 0x2, 0x3, 0x7, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x5, 0x1}, {0x4, 0x7}, {}, {0x3, 0x6}, {0x6, 0x1}, {0x3}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x2, 0x9}, {}, {0x4, 0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x2}, {0x6, 0x4}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x7}, {0x1}, {0x3, 0x5}, {0x4, 0x1}, {0x7, 0x6}, {0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0xa}, {0x6, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x7}, {0x5, 0x9}, {0x3, 0xa}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0x1}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x5}, {0x4, 0x6}, {0x3, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x27, 0x8001, 0x2b4a, 0x9, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5c2f, 0x9, 0x5, 0x1ff, 0x8, 0x8, 0x0, 0x8]}}]}]}]}, 0x794}}, 0x40) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x118, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x2}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe8, 0x5b, "3417d34879460e0881b363597b50d7b84b6bd59e23cf7140bc143b2ef159b911c7702d7c7bdac0d7df93f0c90232314c39d99cc0b4e82fc0d70c3dc6a00526ad0ad3248c336623e5ebc5336849d55ed918358eea217d078ad12d580522572e31c601a1a9e76e8ec0f31796d1a35c9b761e021b6b1306a96d0c5ddadca5557c77d4610f4c7407c3a1f6501675c8ae6eb7881d30a2f260b5538d077fca718fae60c8aa26ae3cfdb3e90ac6124a70ae50bae130e744c7468d012f17d41b19b0873e1310995335717247dc6f2b844d225ae3b848db31bdf0ff0df821d2b0e112693918e97c6e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r6) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), r6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x30, r8, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x5, 0x3, 0x5, 0x8}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000084}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x20000850) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40448c5) r9 = accept(r6, &(0x7f0000001700)=@tipc=@name, &(0x7f0000001780)=0x80) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) 09:30:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 09:30:37 executing program 4: r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x100000001, 0x1, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000, 0xffffffff}], 0x8a0000, &(0x7f0000001500)=ANY=[@ANYBLOB='data_errid,dont_hash,seclabel,smackfsfloor=//,mask=MAY_EXEC,audit,\x00'/78]) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x2, 0x5, 0x8000, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001640)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) setxattr$incfs_size(&(0x7f00000016c0)='./file0/file0\x00', &(0x7f0000001700), &(0x7f0000001740)=0x4, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a087092", 0x6e, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) mount(&(0x7f0000001580)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000015c0)='./file0/file0\x00', &(0x7f0000001600)='nsfs\x00', 0x20000, &(0x7f0000001680)='ext4\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000001780)='./file0/file0\x00', 0x0, 0x184) dup2(r0, r0) ioprio_set$pid(0x3, r2, 0x4004) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1293) 09:30:37 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xff03}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 1991.232123] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz-executor.4: bad orphan inode 301979167 [ 1991.234718] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 09:30:37 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r1, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x204100, 0x0) close_range(r0, r4, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x200000, 0xa2, 0x4}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r5, 0x8, 0x0, 0x0, 0x2}, 0x5c46) 09:30:52 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:52 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r3, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r1, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x204100, 0x0) close_range(r0, r4, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x200000, 0xa2, 0x4}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r5, 0x8, 0x0, 0x0, 0x2}, 0x5c46) 09:30:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 09:30:52 executing program 6: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:30:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0) r4 = getpgid(r1) sendmsg$nl_generic(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e00)={0x16fc, 0x38, 0x300, 0x70bd2a, 0x25dfdbfd, {0x16}, [@generic="8ce7dc0d2897d57a119f256d33673b4d8058ed9516656159e5c5e56837c334b8f08d", @nested={0x1, 0x46}, @typed={0x8, 0x16, 0x0, 0x0, @uid=0xee00}, @generic="49ab011ec060aaaafb5b569e91aedd45123ea8de0451b60c0dd86ccd6c749e25e526fc6850f9e46392543ba5f77ed38124c0a72d9357808e913188e90c73c3a66e4065c293f36e2e2b2f3052129a158e8224fdf33aaf6cd98bebf074705e08d658f2b0aaa5f1ca28abfa712368338c3c7306b2e079e61222e1121c6a582bf582725cdbc5b1dc96c74bf86e537ecd91aa3b3f047e4ee09ebdb3a5db0a8f74dd7a27", @generic="21ae908e3ad2fbc9680294834353159fbb21ea893d1111c379d146800255ec4a2554f17f13cae27a3751d802eef6dcf7943c31955cc7cb9575b1af5a31eaef1b83409884f79db7fdacb7fc4013ddde12e6eba47ff6e3a682d9e0578f673c57c1450a91c1cc4b58", @nested={0x336, 0x6, 0x0, 0x1, [@generic="bb545b94bed2f4238158bacc26b1318c5affcac8dbb48d9c3a638a71a10471e4644b96550ffdb3d7b2a548a46cf8f02d19342ca4e7ab8d8ceabec57b988d5454715bca6a44d00e731cdf9c50e94a7b4d5c9accc551a6f2ee823eb48317839b06cdd204", @generic="c5fa008ef31c8b0f465bd51b60c268aeb726846cdf7a4b43f9eaf5bc7c9fa60ed5fdac3688113e8e7828c4660ad8bb73f5487a43ec9fc83da01b7211a21d9c6b01f53c8116a320257de89aed22651d97a5f9b705cc4b1a1b8fd66f0cbe2585e5a332a77134853348fb81459c99527ccdfd48639125ad4bb3c8bd4a89404a508ce3643c886c83765a1f6334102ebbc9563d75e2beaa45c7c526", @generic="a9a858803721a3d3117b946570ccb13cad482ad537557d661da0345e7566", @typed={0x6, 0x3f, 0x0, 0x0, @str='U-'}, @generic="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", @generic="23fbbef7b2201b9490ee0d804dac81621d5d2c8e4f531e8d7cbd2edb027328f4c69d9c835c9bcf2bbda9535a0175f2fdf9ff4373fb45f6617af73224324fed205a55f49dd907b55d4ce2ca00b5373dc6bdcb3ec4c9bb93394b80fb160b339438010c38916e45d29033a7c3e38c307cff2cc5ca287f44d0", @generic="80ce15a3a13f19543cd3564d20e475fb3d488bfbad07ff9e1c25cc12d7caf5e1ab6b3d68ed879b47085ca4adeb0bb6eee11a5aab3b4e015f6b65f5efc77caaed014ad1fde85254bd1eae2a164db489d56aeea2f8a615aecbf9fe22fda7a01a17f610d840d7243ddf89c1312eb11fc38924af676d71c6c279815818fd376fabe73dfc618046dce7ea78d55b9cc08375e9972b8639d131dc5f842a"]}, @typed={0x8, 0x3e, 0x0, 0x0, @pid=r1}, @generic="166a71aefef1003ff86fe500a32b4b29537666611330a36bc7c043bf73fdbbec9e3e2b37a688ac00ebd64cd0003e744263e5dd3a20112dbfa65a38169fb3d16f632e40a258089ec08f311479039406faeae5f4e86daf326cb32103f307a861bc", @nested={0x1210, 0x28, 0x0, 0x1, [@generic="65889de2c59f7bc36bbf15313e91df48f754e9dd0f01673ab5a1e18c2173cf0fccc74c64e4388d8ec6eafa690561ac3d53451e28bb4f7390544b73847c1fcdf37602e4fd45a2e07b81c6a698b3302592f650a8b59ac0ba0aec6942", @generic="624529dce07124fc9f5d31911c7f6009ebe07f72bd8b89b7a975c5e5700923dcc16ef3669af360a9c4df60ad9f5bf743e637227bba5b2a43cde52f6d6503335cedecc463", @generic="703afd3b9d721aa1e05a7de97981cad2100325b76ecee84279b2fd2c04c175dfe75c36de57c11c3ceef8569a7d82a092a090742c8e3f9eaa7dd5363a89c8a8970d00b29c3e27335c6ae28c16eff69200fa2e58f02e6310ad64e5453643f5c9bc12c5cb96a93a9f00802fe0109cc663a090dd3f8c26524f7cbf8df5542be822de1b3af9a8fb7372bfc936b39bfd434b90aa02b50e0bbb7b309fe17a52f7e75d420f8c46e6a16c58fa785d167f72b0ebfce3bf0547939e718d95db91d05f3d2f51e1c816ae9954", @typed={0x5, 0x32, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x1f, 0x0, 0x0, @pid=r1}, @typed={0x4, 0x93}, @typed={0x0, 0x38, 0x0, 0x0, @pid=r4}, @generic="4a6b434d554619b9005f3f2e5a8067daf52a38031e0be59c0ad6390bbb5b7a4eae7a239423b53e35eca18bfb5d1bc084262f56532f49b13e91ab8d2f7d60d2f66235c4ba18dea0b463318b5995126e51f730e806a84489e7cc228e9bc8e58498d3730fd41545bc26ebb97f89e1a2b0cc80edb54ea803c2b50162e6e2441d71c588c209a36d0d8eac9275ffd8c2b5b7cba14a30"]}]}, 0x16fc}, 0x1, 0x0, 0x0, 0x81}, 0x40000) unshare(0x48020200) 09:30:52 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 09:30:52 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044084) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) utimensat(r1, 0x0, &(0x7f0000000700)={{0x77359400}, {0x77359400}}, 0x0) syz_open_dev$vcsn(0x0, 0xef03, 0x240000) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x83, 0x6, @remote}, 0x14) openat(0xffffffffffffffff, 0x0, 0x80000, 0x11b) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x11800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xa57a, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4000762, &(0x7f0000000000)={0x0, 0xf65e, 0x0, 0x3, 0x331}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd, 0xb4, &(0x7f0000000740), 0xd, 0x1d, 0x1, {0x0, r2}}, 0x80000000) writev(r3, &(0x7f0000000080)=[{&(0x7f0000001380)="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", 0x1ea}], 0x1) 09:30:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x34000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x40000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x1ff, 0x4, &(0x7f0000000200)=[{&(0x7f00000004c0)="bc176686b4b7a93a63f75c3e35c232b9f4a86b120688a32255353443353a934e7a4dbbc5dee3345d66b5dcb60eb2b9528ee574b29e48bf6f03dd8c8eb71cf6e3a1b76bd0d10405c9cf30682774a172eff756b0e535997d11550006e8338bc3efe90fa9014598f6628cf26326f5cff66989b1591a3624128ab2c42df79820ca82a53a444f46d53afeb62fa7996bf4e6c812239b722bf071df40bd46268135355dac0bf191e141be843fdfe06655a7178797890b613f2e1ed8dcf07973e52ee7c984c8e1", 0xc3, 0x100}, {&(0x7f00000005c0)="8734a5b502dff6591ae366936a54fc12600b65086c2aa4e890f9d7cebf40a6864b89978fe4bf4dca5cacb2f2229bc8363d6eed35edaaa6914979165709b08465ba865d6c35cdd68a81a52c2ad82ea4d20bdea5397f1d1b77ad54cca82c7b8411622d887969b2658f3e52279ca3fb84576ca85872d577998729c7b38ef6adf2f40ddcc31cd57366a9c3bad766f65e918513bbccf355ebaa539a84d27e6005acd926b4db2b34c672081722b4343cb68a2fc9f22395663258f79646b5", 0xbb, 0x936}, {&(0x7f0000000680)="9e6e232a88c4626b277fc81522afe35b2292072d08a33c1dd0bcdd2d9ef9eff0034ecf03685848e2703e657878caf9708bda6fa64542f55392e04f654a7bf936ee90aa184a1fe56c73c0ecb7fb9b860b9719266ade02eca825a6a1705d44982534269967c6cf3869b64763aa11d0da7fb333f03179ed4d19dae84fb7cd029e114143050696035c0dccf5c018fa9b6e474437ea83b9af7082a8295577c3d5ee5e376ca36f320546a7aa709bfaeff1", 0xae, 0x2}, {&(0x7f0000000140)="a1c95848cba5f7424c84f9a4456bb1dd2e5f324dcb9f636e9f80333bf91b616df43b5d529dc7484574c19cc0fdb0dc3da627b49449e114b9025578ef8c50eb4c7f1bea186d99e18344b17bdae4f73f55b5b9c78f803da95e6146401a6f3f273051", 0x61, 0x3}], 0x1, &(0x7f0000000740)={[{@data_ordered}], [{@measure}, {@euid_lt}, {@permit_directio}, {@fowner_gt}, {@subj_type={'subj_type', 0x3d, '/[!'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@measure}, {@permit_directio}, {@uid_gt}]}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000800)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r2, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "dd722e32162db827ed6f3fc6d73425297a20a08a5c4477d6d731308a201d0763b5b267b8db2e5d811fb29b034305d3d47654dbd72b641f61dd467ec58b3cfd33"}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r4, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}, 0x40, r4, '\x00', @a}) r5 = openat(r3, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="ff0f0000000000002e2f66696c653100"]) open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x9101) sendfile(r2, r5, 0x0, 0x100000001) 09:30:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) 09:30:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044084) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) utimensat(r1, 0x0, &(0x7f0000000700)={{0x77359400}, {0x77359400}}, 0x0) syz_open_dev$vcsn(0x0, 0xef03, 0x240000) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x83, 0x6, @remote}, 0x14) openat(0xffffffffffffffff, 0x0, 0x80000, 0x11b) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x11800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xa57a, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4000762, &(0x7f0000000000)={0x0, 0xf65e, 0x0, 0x3, 0x331}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x6000, @fd, 0xb4, &(0x7f0000000740), 0xd, 0x1d, 0x1, {0x0, r2}}, 0x80000000) writev(r3, &(0x7f0000000080)=[{&(0x7f0000001380)="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", 0x1ea}], 0x1) 09:30:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) [ 2007.056456] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 09:30:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x80000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:30:53 executing program 4: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)={@local, @multicast2, 0x0, 0x4, [@remote, @rand_addr=0x64010100, @local, @remote]}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000300)={0x1, 0x3, 0x1000, 0x98, &(0x7f0000000180)="98d6a7641ee10b0a42e79c5df8362dd28d1f9960c4e7f8804f3ad107e850b8c00a144432ca99d3d49331dbf602f0fd36204c7782adffc33650fa805b45b70a1fcd9a4c8b329c95ad76396f649c938ecd4ebe07a91f97f9330e2b9c5d7333e76501091a36e24f5767926eb6bf3b911713d7260b066ee1af840d3acc50e92b616d8496d5672718c3a3352be69c0d427906d0c8bb09260463a5", 0xb5, 0x0, &(0x7f0000000240)="16bebf0d56a03484ca5febeeb3fd8dce7919223774dd075203a1fa13838aa9eea3d33626acd11315bc7a94ea7dd561559e043f59043af6912b0f93bdc8fb65941f4cd0a52e0ec3d771e5da6d7445a185da7b144d828c042909e9e23481188c31dee53594a0c74a10ca7b29fdde08756097b2b13f691fa19420cb5ab06f4e284388236f96564876bc0797d1754b28e046cfd4b02de4935d8fc4ab344a9dbc9e69bcad9ebf55da4a1f7c18545845d87eeefdafa14f11"}) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10, 0x800) sendto(r0, &(0x7f0000000400)="3faf289c100dbbe3213ea30aa10efcd2ca00f5b26f3ea97258f1e524ee93ba665f425ec5fa2c5c2d31a65260f601068b4cc80bd5cc4a6319dcb67db0b11185866581006f83d9ec2804d661660ab01e431efb02419435d6", 0x57, 0x40080c0, &(0x7f0000000480)=@in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2b}, 0x80) r1 = eventfd(0x78b3) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000580)={0x6955, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @local}}}, 0x108) recvmmsg$unix(r2, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)}], 0x1, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000007c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/99, 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/155, 0x9b}], 0x1, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000a40)=""/232, 0xe8}, {&(0x7f0000000b40)=""/103, 0x67}, {&(0x7f0000000bc0)=""/119, 0x77}, {&(0x7f0000000c40)=""/68, 0x44}, {&(0x7f0000000cc0)=""/58, 0x3a}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/93, 0x5d}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/84, 0x54}, {&(0x7f0000002e00)=""/71, 0x47}], 0xa, &(0x7f0000002f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000003580)=[{&(0x7f00000030c0)=""/233, 0xe9}, {&(0x7f00000031c0)=""/229, 0xe5}, {&(0x7f00000032c0)=""/228, 0xe4}, {&(0x7f00000033c0)=""/187, 0xbb}, {&(0x7f0000003480)=""/207, 0xcf}], 0x5, &(0x7f0000003600)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000003740), 0x6e, &(0x7f0000003a40)=[{&(0x7f00000037c0)=""/214, 0xd6}, {&(0x7f00000038c0)=""/228, 0xe4}, {&(0x7f00000039c0)=""/35, 0x23}, {&(0x7f0000003a00)}], 0x4, &(0x7f0000003a80)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x6, 0x2, 0x0) timerfd_create(0x8, 0x80000) write(r7, &(0x7f0000003c80)="954a45712957ad9a04d590575b85728a911e417c208dab667c8109b10ac5f2b3310259f1012ebe865034c56b49f0616ed5ace58cbd12534d398659ef4e930f70daf89822330b73adef5875de", 0x4c) readv(r8, &(0x7f0000003ec0)=[{&(0x7f0000003d00)=""/186, 0xba}, {&(0x7f0000003dc0)=""/36, 0x24}, {&(0x7f0000003e00)=""/92, 0x5c}, {&(0x7f0000003e80)=""/12, 0xc}], 0x4) r10 = pidfd_getfd(r5, r4, 0x0) ioctl$TCSETAW(r10, 0x5407, &(0x7f0000003f00)={0x7ff, 0xfff8, 0x7f, 0x7, 0x18, "464464fbe563fabf"}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000003f40)={'virt_wifi0\x00'}) dup3(r6, r3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f0000003f80)={0x1000, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @private=0xa010101}}}, 0x108) 09:30:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x200000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2007.488641] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 09:31:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x400300}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:08 executing program 7: set_mempolicy(0x8000, &(0x7f00000000c0), 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x16be, 0xef) r0 = fork() tkill(0x0, 0x3) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x4) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) r2 = fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000080)=ANY=[@ANYBLOB="b42b9d783efcaa3561"], 0xa) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x8, r2) ptrace(0x8, r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) wait4(0x0, 0x0, 0x20000000, &(0x7f0000000540)) 09:31:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:31:08 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2022.925359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:31:08 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x5, 0x4, 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x28}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r3, 0x4, 0x0, 0x52, 0x0, 0x24, @empty, @mcast2, 0x0, 0x80, 0x402, 0xa273}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000006c0), 0x7}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5e, 0x10031, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c74547, 0x0, @perf_bp={&(0x7f0000000140), 0x18}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r5, 0x0, 0x0) 09:31:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) [ 2022.963267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:08 executing program 6: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) [ 2022.977071] FAULT_INJECTION: forcing a failure. [ 2022.977071] name failslab, interval 1, probability 0, space 0, times 0 [ 2022.978908] CPU: 0 PID: 13724 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2022.979839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.981016] Call Trace: [ 2022.981416] dump_stack+0x107/0x167 [ 2022.981955] should_fail.cold+0x5/0xa [ 2022.982472] ? getname_flags.part.0+0x50/0x4f0 [ 2022.983084] should_failslab+0x5/0x20 [ 2022.983601] kmem_cache_alloc+0x5b/0x310 [ 2022.984145] getname_flags.part.0+0x50/0x4f0 [ 2022.984733] getname_flags+0x9a/0xe0 [ 2022.985227] do_mkdirat+0x8f/0x2b0 [ 2022.985735] ? user_path_create+0xf0/0xf0 [ 2022.986294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.987016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.987692] do_syscall_64+0x33/0x40 [ 2022.988204] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2022.988935] RIP: 0033:0x7f7635ef0b19 [ 2022.989469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.992016] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2022.993120] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2022.994126] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2022.995083] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2022.996030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2022.996977] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:31:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x1000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 09:31:09 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080)=0x5, 0x4, 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x28}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r3, 0x4, 0x0, 0x52, 0x0, 0x24, @empty, @mcast2, 0x0, 0x80, 0x402, 0xa273}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000006c0), 0x7}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5e, 0x10031, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c74547, 0x0, @perf_bp={&(0x7f0000000140), 0x18}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r5, 0x0, 0x0) [ 2023.056306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:31:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2023.092974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 2) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:31:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x2000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) 09:31:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) [ 2023.191288] FAULT_INJECTION: forcing a failure. [ 2023.191288] name failslab, interval 1, probability 0, space 0, times 0 [ 2023.193131] CPU: 1 PID: 13746 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2023.194102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2023.195233] Call Trace: [ 2023.195627] dump_stack+0x107/0x167 [ 2023.196155] should_fail.cold+0x5/0xa [ 2023.196666] ? create_object.isra.0+0x3a/0xa20 [ 2023.197291] should_failslab+0x5/0x20 [ 2023.197853] kmem_cache_alloc+0x5b/0x310 [ 2023.198435] ? ksys_write+0x21a/0x260 [ 2023.198953] create_object.isra.0+0x3a/0xa20 [ 2023.199550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2023.200219] kmem_cache_alloc+0x159/0x310 [ 2023.200759] getname_flags.part.0+0x50/0x4f0 [ 2023.201331] getname_flags+0x9a/0xe0 [ 2023.201865] do_mkdirat+0x8f/0x2b0 [ 2023.202352] ? user_path_create+0xf0/0xf0 [ 2023.202916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2023.203661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2023.204357] do_syscall_64+0x33/0x40 [ 2023.204874] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2023.205583] RIP: 0033:0x7f7635ef0b19 [ 2023.206120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2023.208512] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2023.209460] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2023.210465] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2023.211384] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2023.212302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2023.213195] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:31:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) 09:31:25 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) 09:31:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x112) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) r5 = socket$unix(0x1, 0x6, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000200)={{r5}, "d8d247b678d6b6d71ae215f308a4f4275c8fa325ccbaea673e4eee87bafb3058bf2eae25c37097f35064dd6231380b9efcae27d02c57422b3b5a27576a9f4e5815ce7e038cdb22f81f4cf0cf3be474ad4e55f2f20b8cf9d0d66d60d35dc3c473bf08ca171b003b22af81620e54da87423ebca351b8088c55d13c73ac24e88b8f37e2cc7215fb9ed7e64f2aa8a5eb614580df4a1e67a6b7d06d789b10e407e7f02112b715591bdff4d7cdc8edbd65f2afbf08168697fd224bffd4a7307864c26c882b40146efac80678f023ca67fd05170659d0c458189b91d512347f3982f12e03f96302a0041a6b9f0d1c299b266f941b21d791c099ee8cbc52c4fb3265eb3f3106af82e7faaccb1491bf7013b148c305343e6010563c89b8b5fe15a10d5b5d42f7627a3e8a8861dcbbb93454ce9a287843d301fd1abb65a8061a30bc6884860d51c0fd70046f1cf02888d44a1371b1eb1b695133524836410158c5af929f8571004f89fc8e3513cdae602f97f336d247266546f2029d04da7abc7c248505d3c91c746850d57e514fed357d89aef663106255e4f35c0a71f3df62f908dae6957bfebb18be9fb60bce1d0abc52d1bd87c09c1ffd8de2caa3cd346e0538c5595089e105746e41e2313bbfaf8330e20cdefaff5b0e2568af10c0510a4e3598066059b5a447034a410145ed659b9bc2a001abd422147a967254136fedd68f9efe56459a33294bca3f2fdf9f23f0319c939c78379468bbe6c32f20f410329b8961a7e02aeb593dd70ba4f7befb4bdf15060629dfe8badfa3d1ddf953ce3e36f6ccc62faffa52c8129d24445fa6d89bb600c97c9bac8feb1dd48c805bebffa37bfc4a8433d2e227ea2a621957f4616aa3bafb1415251c44e7f57362bc361b2bc74bf501f64b29b689f6ee68b7dceeb430230282f0eda0bf9200baac76459f1cd8060b318f65e1bf16552abde3af9ddd7c8735ea6ef0c6a4b86f8d792ff0687f16457d908bb33afec8047a252f42c3dfc007980d2c33be7cfa97b36daf6cd36bbc7143c1c772710ac43f965feaf9b03a96dd8640a3d40bedbb1bae7ae0fd4aa383b2c11463ea7b2f598a4922db5dab3b824ebe5f5b20ca276e153f0487d09b54f4091bc7b84c036283ed3b1f44be7730a1a16701b0ef4372d969e1b62c3d35cdd04309008ce189bffa0f70ea167c6a65a68be8e70641baecb69e5977085ad83e87f531d02b1d938998e9e81d3fcbfeb1eb3e027ec293e2396474e318186d956ec500fdf3768f64a6cc49d22e1cf08aeac5f0c338d5f7484371ef9ef482e7995638b7305442ed5da42faff0e2354b90b38e89f2269ae09834074c962b15a85e307c01f9363af8ed55d9cc3d3bda5e885bb5e98ca3f6d1a53c9ccddef4e1ab6749e594d0b481948393fb4be6a1a32df582622082a516ab66ce15353275c2e3028a212c5985fcbc93aba4c7e9cb859d501c610b735e3361775df9fd587e90e0957195d2d7a065cf8f0b099f50feb30a017e61d3041b23c7726b1194ad8d2a93f40f3602fa1da5f8f28eb3dbaece1bc7d9f86ed2efde22a05c1f314e22e0d8ec0c0963fdd0821a2f8d852ce67ef89bf98c75d1236d696593d87a4dc70add2d72678813931e2c6a1cd1b945086ba114634caa74cc29dcdc316f0877a94325fd5a2781b68b1f733328c05be19633fd9b5b834f570233cc00d2d97b79bc2f4bce35ee0bafd80e26f97d07835f6a66ed20771201ea78160e5c563cd54b4c2ffa72f68a4fa7abea83ee1f882f328a3696d1cf60986ce816c1a222541693b6f85de74249ce886d52110af86b7c233ff215245fc17f125617c775c2614b1b314018bced1c6661de9bff116e604062742287c154c056782edf04d3244c89a3bd0d006a8676bdefa495cb8d94d136aaa7f39787dbcd8aedbd429ef1b1e6aea961568fcc656b5caa30e753c89dd0b6aa7b70fd3d83288e57225d2ba3e557fb9a6bea05c9364e817eedea25b668f65c6789e74f9ba5a2082a7a94cf1cae8fab2226bf97df4a311dee7dccb6be66f06917e89459a267bfce0c9f7326b5ee1576f93a0d3c58739a0a4489d35fe9935c726562da6e16cde6da4ab157d1badbb66cf742837e5ab5e5d802e76c8c9ec1fd081e1d7b4beafce04f406ae3bf7b3763fa1ed17fb97e6a25994f9d3c59af00c784c584982da977f5d8587b94edf1a32d73c9ba6b08be838f3d810c8c51c063183b18586d1b774448d250ee8191d0b7aafc0d40680333299da6ea49e3619857b748d5895eb02d6008d8de724aab77f363e66bdc1db57b8966eeb747423e5b845c8a76932ddb2c1c82cc671e8e1bb440fbcab302f901ddd3f4bd612ec2c3fb32f1609beb699d0fcab5af5482090dec28d307f0141612e290b4d90a249739c70e3c4286d1f4da5fb8429ff0dd5bee571a8521b83ac86c45af7123cbdc218e564273415d7833a835e5e86c2db2f238f3c20ea93a6f3f08e07e56f96d68dec1ed8c94fb7563e398e2a76059a42cc348bd0dc975b2614379a6117e97db60de17e83b92449051ce1a1401ba7c9c836a3c2b887b4040f4cf67629783a5b066a28d6af9278dde30a88b7fd1847ab6971be9a8fc3863884753df110194ef7d3b7170b059e6dd8744d73ad394c10a8e010b8583ed6d4bfecde746f3772e9146308455a4e37087265ef242153c087945ce0fb801bcd077bcb7abe9c84983e3ab031da08914805d3ed58abb569e296deb413296e748bc941da9ebd4248588a554e94e96a2be5f7eafe4ac9dedb01aa2964cc388ebadbde5a4dc60c140cb15edd0d730248c27d1309d293706f06e3ec8452908c573ad3e0dac487dfcdf8466665918d7a9a1ea1e753222bedbad838680740137fa6f7d37b72134fbc3e213c44fd770e281aead77e05e46bbe6e166df8a364e869305fdb28c7e9e8e278dae0cfe056fe253d088fbe1a21b63e6354972cd5607375c6820661ecf62ae034164a987612223b9aaa605578103933ddcf151d45a61faeca8145305ae06fd55a5f92d10a8ca5aba854a7233cf97fb91bee84f860dda1d75f9d1563a419166b1c5a57a8985d220cf1b19f7e8d02ad2232e111bd3d12d95ee5734118e9ea7d9bde4f44414b7cfa2cbed9f91911e7c5a19342d5e66179f95c58a06a4ca5bcc992827549ed2e9d98b1e0d47373378d2b88dddc2987d0c5ff3e56488f18432972b15d9e52c9ff608ec03f8640ddaf916e68cc69433bbe96225c4d274f10f8a4934a16b615c90a50c3bfe09acbfbe88160f5b7b25b2b52c335f399c34cf2f1b27b301955289ab6757dcdcd5783e0f04b147c30c761b3ab0f8a8d616de313550e22344648b43df3635c825e9fd1bdb82b3fa90aaa2be4eb3256be1c7731bb7b9c57d394f5a882c353878e2273a58e3577d2112575f76c99312078642018bb3279fff5d28418dffedaf68876f205e356aea1ce5824a1f3020a1bbc9cb547d7f2f2309e325c201980e429e45473d1298d276e1ad52a5ffd215c25426b95bea8f5e05c34d9063bfa4979bf439a9fb8dca284d0eaf642fcde4a0f8918ddbddbef4ea24bb81d660a6438129ff7dfae4e52f5abd5281b4025218e0299ed34cb4f82b83e5ea0b124e3988a538f9c88331f3a0f337e722518604f3dd689526abc691649ae8d750269112838d5d57ec606d656c58532da36fd41acfd46f1d50891486eb5881ad274872dd745388a249c0355464570fbdd0c8eb0cb8e16d2f38a220b43c107d76dca36ff196bf95a71a8f3e547afe75ab5e9f2ee5be7bbbcc7ee0d9c7d682e5a4afc1645d7c397666d70e3de22ece8b8634a79b0fe406240cd1a8d63f2e9719ed5e4a2cd18153445a656fd0acfe83c360e6d477975cf9092e46599b42c09fcfcc86a67fb6a89d707cda702b8eba2759968136dfe9cc7fb411ee0bff35cf5c8ffed354deb953b6c1c8ada7d2c58f1ebc48e993f2347771161856b20c7284d6347a3776f81709e783f48c72dd4517a8defe1f3870b551273afe84ce28fc4e6d8d5f0e76f058eecc6987a26ee3fa0a365376b413be0f1fe28043bb7452f29703836806889b7311d8c07315b597ee7f013e0e73bc7c2ec7d7784d74beb244dfae8cb12932257cb1c41d6c39e462de3c531fd8f20156251ec91fcf444f5e6d6fa1b17641b129d94c165898a2f61ee9cb88c9a9b025dc9f0e75e14d7db640733310f1cfebbfeb7a4519cf4af5cec3b1c1e191a99800097a84a7bf2522d88b8865c400fcaf405da3cc9572ec5580b27f993ec1e123e51c4949baa5f6bfdbfbdeb65a26b7bfc3c4ded67ce73c810e6a35a0b97974811d740fd9f4718a93022452f5b228a06eac948b43b90f5c6094c4a545fab7e1cddc75cb2dcb3ba9ade85d6da41c6b2b8e82f7144cec1c74a77f5cf2249c7b3cc33e44d4f9e75ef6627f2cd7e42ff2d44d15b9029048e1fe3ea05a814c5456051c09dbb3543b7794bfcaaec27264ec4920c2f504d3ffd141d0a5b153381695ae02af3618591a5944170076c779252a70ff8414dab27b210b30b1b4cbc6c2ce55e615ccf9aebb33a821b67d09414d35f0f1230351f297172b0eb20ba4cb43cec198d7cba35cb24908ec168300c23e586e4d08f19f3a1a4edab4602d0586da6f5f9bde251b1e8861f0cc2f4888017fe270a388439883c0217d04fdbd29ac41e15a5f5ad2a9e5fb89b8e5574d98ccb9a6d7bfadeff5631e4fd7fa64ae23d5b8130e75e543f1854de855b6fbd6854415c63e874c931d699d48151ad9761794feb3ec626d6cc49300fe0a7fa7b52b4fb39a4f90a2f7988bbaaf0b9d3545bcf6a178dc673f4a3074a66137b14a13de5881cf8d7c1521e49bd72f03069c0fc56b50630b819177472c0dfd5510f8a200c0c575a425f20724e5c3a1fcb2fbfa81fdcd9cdf83be9333bc33bfdd7f82a44ccf4a2bd5dd8289ddd16e2e495eb9a5fd0b805ba9ac6d51ca286be48be9c0f6ea5357f4f7f3bd537d67791f82ec4ff4c053e2174b6fa42d0f6959e9922a13ce9ca73851b111c5b87131762003e7eb181310cb2893967f27520d650d9e334570f13a9d11cc1a4ad517c3b5457e87a8090f7a5e623fd8c828749c234471af86ed13e7d6b5c34ed2881086f7393ed6687b70c406f6ea24a496dcd80e9307f015b72d71bbb673af264c43407b3d7f19eadc55e4c8281c6c05b2d18dfd45420dc2873b6e1e41e688fcca8dea8302c2cc75ef58d910629c6af1e04eb0d680ddec640ab4e2d67cf18e79a6c3344982a4d56cebc69c3b0139e26ac7000b43b9037bdfd3deb0f0a1e9f53cc0247c9d32fd7eda03f1a1265048dfb936dd184803ee130c7c1762f7c97c6ba27225c9f9acb5319b142e00e805f6a62ad5ad97c0be378262166ee57e5216cf847ee08b8b641944dedf955e758d37c7ddbe662d651f42b965f55a6146bc19b799d019e924901b503eea3b34085fa9a3e6ed32ca0cbd32940ba9cb4ed3ccb047c968628eebfdf8d2dc8c73ee573650a174eda799e7e8066d1ef17df0a7769a73683c199cfa8b9804ae3f646f521515cd81d0323fc93422d66682a90e8ba0e8ca5cfa16efdcd440a7bce55df4822cb6cbcced4fdad2d9b8bea3fb346da04eeae9fd0f49ebf8ec9ab7637b9fb295c2de5ffb3d3ac43254024b8a973b7a378a92dcd90252bbba4f5738c19bc97f29cc09283f6d34caded5e34791b95c7271b3cc5d009ed1b4484c0a8b22d2e768c5034b0ee3ea9e32c64fbcaed49bd4f4758d2be9ae4ebb7039bc70327de4143b825dd6d562b83b134a68e49ce82bafdf894b6b"}) r6 = fsmount(r2, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)=0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x5, 0x2, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2d}, 0x47032, 0x0, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r9 = openat(r6, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$dupfd(r8, 0x0, r6) sendfile(r1, r9, 0x0, 0x100000001) sendmsg$nl_generic(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x29, 0x804, 0x70bd29, 0x25dfdbfd, {0xb}, [@typed={0x8, 0x33, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) 09:31:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:31:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:31:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x4000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006c00), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x0, 0x3f, 0xa, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x700, 0xdf7, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000015c0)={'sit0\x00', &(0x7f0000001540)={'ip6gre0\x00', 0x0, 0x2d, 0x36, 0x3, 0xc6, 0x12, @loopback, @mcast2, 0x700, 0x700, 0xfffffff9}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001600)={{{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@initdev}}, &(0x7f0000001700)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001840)={&(0x7f0000000200), 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x98, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8008800}, 0x4000000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000007280)={&(0x7f0000006bc0), 0xc, &(0x7f0000007240)={&(0x7f0000006e80)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x30}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup2(r9, r8) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/87, 0x57}], 0x1, &(0x7f0000000200)}}, {{&(0x7f0000000240), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/220, 0xdc}], 0x1, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/201, 0xc9}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/202, 0xca}, {&(0x7f00000009c0)=""/29, 0x1d}, {&(0x7f0000000a00)=""/21, 0x15}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000cede6765b8c95e0b44fceb0a969801cb4e69ec8df061b01d065fae7054908c1231b41811cd622d362d1285aded25c450f1a3733419f74632b3b716a7a0243f80c121", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xf8}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000c00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/34, 0x22}, {&(0x7f0000000d40)=""/116, 0x74}, {&(0x7f0000000dc0)=""/121, 0x79}, {&(0x7f0000000e40)=""/188, 0xbc}], 0x5, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}], 0x5, 0x12243, &(0x7f0000001200)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x11042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r11, &(0x7f0000001200), 0x0, 0x0, 0x0) sendfile(r8, r11, 0x0, 0x100000001) 09:31:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2039.328801] FAULT_INJECTION: forcing a failure. [ 2039.328801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2039.332239] CPU: 1 PID: 13778 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2039.334014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2039.336144] Call Trace: [ 2039.336823] dump_stack+0x107/0x167 [ 2039.337787] should_fail.cold+0x5/0xa [ 2039.338756] strncpy_from_user+0x34/0x470 [ 2039.339755] getname_flags.part.0+0x95/0x4f0 [ 2039.340813] getname_flags+0x9a/0xe0 [ 2039.341704] do_mkdirat+0x8f/0x2b0 [ 2039.342502] ? user_path_create+0xf0/0xf0 [ 2039.343356] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2039.344409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2039.345464] do_syscall_64+0x33/0x40 [ 2039.346228] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2039.347265] RIP: 0033:0x7f7635ef0b19 [ 2039.348022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2039.351769] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2039.353325] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2039.354786] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2039.356245] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2039.357693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2039.359161] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:31:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x8000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:31:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x9000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:25 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) 09:31:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:31:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 4) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:31:25 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x1, 0x3df}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4000, @fd_index=0x8, 0x7fff, 0x80, 0x101, 0x9, 0x0, {0x1}}, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 09:31:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xe000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:31:25 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 09:31:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) [ 2039.889960] FAULT_INJECTION: forcing a failure. [ 2039.889960] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.892894] CPU: 0 PID: 13810 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2039.894301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2039.895969] Call Trace: [ 2039.896504] dump_stack+0x107/0x167 [ 2039.897246] should_fail.cold+0x5/0xa [ 2039.898026] ? __d_alloc+0x2a/0x990 [ 2039.898772] should_failslab+0x5/0x20 [ 2039.899549] kmem_cache_alloc+0x5b/0x310 [ 2039.900365] ? __d_lookup+0x3bf/0x760 [ 2039.901154] __d_alloc+0x2a/0x990 [ 2039.901891] d_alloc+0x46/0x1c0 [ 2039.902565] __lookup_hash+0xcc/0x190 [ 2039.903345] filename_create+0x186/0x4a0 [ 2039.904178] ? filename_parentat+0x570/0x570 [ 2039.905066] ? getname_flags.part.0+0x1dd/0x4f0 [ 2039.906026] do_mkdirat+0xa2/0x2b0 [ 2039.906744] ? user_path_create+0xf0/0xf0 [ 2039.907604] do_syscall_64+0x33/0x40 [ 2039.908361] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2039.909395] RIP: 0033:0x7f7635ef0b19 [ 2039.910161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2039.913889] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2039.915443] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2039.916883] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2039.918333] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2039.919773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2039.921215] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:31:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x11000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2055.117590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:31:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) 09:31:41 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000800000b6fe8c90005000600000000000c0002800800038004000180"], 0x28}}, 0x0) 09:31:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x30000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getpgid(0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:31:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000900), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c7edaa6222771ad3f6b1daa553eda4476393824a47f9cebf9e1c98f53707b4c303cde47e50265b7674dab4f93ee559d776fb160d31292a23e46473974c953d0f6efeaa13d8b42808ee9c4286489f7562", 0x50}, {&(0x7f0000000300)}], 0x2, 0x2, 0xc86, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2055.125852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 09:31:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 5) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:31:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:31:41 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:31:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x31000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2055.193761] FAULT_INJECTION: forcing a failure. [ 2055.193761] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.196643] CPU: 0 PID: 13850 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2055.198077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.199774] Call Trace: [ 2055.200310] dump_stack+0x107/0x167 [ 2055.201065] should_fail.cold+0x5/0xa [ 2055.201850] ? create_object.isra.0+0x3a/0xa20 [ 2055.202793] should_failslab+0x5/0x20 [ 2055.203559] kmem_cache_alloc+0x5b/0x310 [ 2055.204385] create_object.isra.0+0x3a/0xa20 [ 2055.205284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2055.206344] kmem_cache_alloc+0x159/0x310 [ 2055.207188] ? __d_lookup+0x3bf/0x760 [ 2055.207971] __d_alloc+0x2a/0x990 [ 2055.208688] d_alloc+0x46/0x1c0 [ 2055.209368] __lookup_hash+0xcc/0x190 [ 2055.210160] filename_create+0x186/0x4a0 [ 2055.210979] ? filename_parentat+0x570/0x570 [ 2055.211879] ? getname_flags.part.0+0x1dd/0x4f0 [ 2055.212833] do_mkdirat+0xa2/0x2b0 [ 2055.213552] ? user_path_create+0xf0/0xf0 [ 2055.214424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2055.215486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2055.216541] do_syscall_64+0x33/0x40 [ 2055.217305] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2055.218353] RIP: 0033:0x7f7635ef0b19 [ 2055.219114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.222855] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2055.224400] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2055.225842] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2055.227300] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.228744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2055.230207] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:31:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) 09:31:41 executing program 2: r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400032, r6}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) r7 = syz_open_dev$vcsa(&(0x7f0000000840), 0x401, 0x28180) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000000880)=0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x7f, 0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffff046, 0x2}, 0x0, 0xc5c1, 0xfc9, 0x2, 0x2, 0x7, 0x0, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xe, r1, 0xa) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r8, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) 09:31:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x40000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:31:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @private0, 0x4}, 0x1c) getsockopt(r2, 0x5, 0x3f, &(0x7f00000000c0)=""/144, &(0x7f0000000180)=0x90) fallocate(r1, 0x2, 0x40, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 09:31:41 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) 09:31:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x7ffffff7}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 6) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:31:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200", 0x5f, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4080, 0x48) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r5, 0xffff) r6 = socket$unix(0x1, 0x2, 0x0) dup2(0xffffffffffffffff, r6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r3, &(0x7f00000002c0), 0x3) sendfile(r0, r1, 0x0, 0x20d315) socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES64=r1], 0xfdef) getpgid(0x0) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x108) 09:31:56 executing program 7: syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000005c0)) 09:31:56 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) 09:31:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:31:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xc8050000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) 09:31:56 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) [ 2070.187730] FAT-fs (loop7): bogus number of reserved sectors [ 2070.189186] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2070.203441] FAULT_INJECTION: forcing a failure. [ 2070.203441] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.206778] CPU: 0 PID: 13898 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2070.208354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.210253] Call Trace: [ 2070.210848] dump_stack+0x107/0x167 [ 2070.211689] should_fail.cold+0x5/0xa [ 2070.212560] ? cgroup_mkdir+0x254/0xf50 [ 2070.212733] FAT-fs (loop7): bogus number of reserved sectors [ 2070.213467] should_failslab+0x5/0x20 [ 2070.213512] __kmalloc+0x72/0x390 [ 2070.214858] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2070.215693] cgroup_mkdir+0x254/0xf50 [ 2070.215725] ? cgroup_destroy_locked+0x710/0x710 [ 2070.219629] kernfs_iop_mkdir+0x14d/0x1e0 [ 2070.220555] vfs_mkdir+0x493/0x700 [ 2070.221354] do_mkdirat+0x150/0x2b0 [ 2070.222168] ? user_path_create+0xf0/0xf0 [ 2070.223116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.224280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.225427] do_syscall_64+0x33/0x40 [ 2070.226257] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2070.227388] RIP: 0033:0x7f7635ef0b19 [ 2070.228210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.232277] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2070.233951] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2070.235529] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2070.237100] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2070.238675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.240242] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:31:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:31:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xeffdffff}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:31:56 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:31:56 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @private2, 0x8}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r2 = openat$incfs(r1, 0x0, 0x220001, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x31b) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x68) renameat2(r3, &(0x7f00000001c0)='./file1\x00', r2, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000880)=""/4096, 0x1000) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x100}]}, 0xc, 0x3) 09:31:56 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) move_mount(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x20) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0xcaa00, 0x181) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000000)='cpuset_v2_mode') openat(r1, &(0x7f0000000240)='./file0\x00', 0xd0080, 0x40) 09:31:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000002740)={0x0, 0x2, 0x8, 0xfffffffffffffc01, r2}) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:31:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 7) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:31:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xf7ffff7f}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2070.481319] option changes via remount are deprecated (pid=13920 comm=syz-executor.2) [ 2070.483636] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" 09:31:56 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) [ 2070.516634] option changes via remount are deprecated (pid=13920 comm=syz-executor.2) [ 2070.518599] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 2070.601939] FAULT_INJECTION: forcing a failure. [ 2070.601939] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.604893] CPU: 0 PID: 13931 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2070.606512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.608548] Call Trace: [ 2070.609151] dump_stack+0x107/0x167 [ 2070.609976] should_fail.cold+0x5/0xa [ 2070.610863] ? create_object.isra.0+0x3a/0xa20 [ 2070.611909] should_failslab+0x5/0x20 [ 2070.612767] kmem_cache_alloc+0x5b/0x310 [ 2070.613693] create_object.isra.0+0x3a/0xa20 [ 2070.614696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2070.615838] __kmalloc+0x16e/0x390 [ 2070.616656] cgroup_mkdir+0x254/0xf50 [ 2070.617521] ? cgroup_destroy_locked+0x710/0x710 [ 2070.618603] kernfs_iop_mkdir+0x14d/0x1e0 [ 2070.619541] vfs_mkdir+0x493/0x700 [ 2070.620347] do_mkdirat+0x150/0x2b0 [ 2070.621170] ? user_path_create+0xf0/0xf0 [ 2070.622110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.623305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.624471] do_syscall_64+0x33/0x40 [ 2070.625317] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2070.626477] RIP: 0033:0x7f7635ef0b19 [ 2070.627320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.631433] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2070.633131] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2070.634732] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2070.636314] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2070.637897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.639509] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:32:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) 09:32:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 8) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:32:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffff, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x0, 0x9, {0x2, 0x6f5}, 0xcca7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x6, 0x3f}, 0x3, {0x1, 0x1f}, 0x83, 0x2, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0xe4, 0x0, 0x18, 0x0, 0x0, 0x16000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8, 0x8, 0x0, 0x1, 0x5, 0x15d, 0xffff, 0x0, 0x101, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 09:32:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getpgid(0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:32:13 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) 09:32:13 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x82050043, r1}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "ca32b54dcff8484c", "2038bbe51676d4c6a2cd99035078205e", "b128f306", "23042be4f5b0e4a5"}, 0x28) 09:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xff030000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2087.283635] ALSA: seq fatal error: cannot create timer (-22) [ 2087.311926] FAULT_INJECTION: forcing a failure. [ 2087.311926] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.313862] CPU: 0 PID: 13944 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2087.314852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.316025] Call Trace: [ 2087.316406] dump_stack+0x107/0x167 [ 2087.316941] should_fail.cold+0x5/0xa [ 2087.317454] ? create_object.isra.0+0x3a/0xa20 [ 2087.318109] should_failslab+0x5/0x20 [ 2087.318716] kmem_cache_alloc+0x5b/0x310 [ 2087.319294] create_object.isra.0+0x3a/0xa20 [ 2087.319911] kmemleak_alloc_percpu+0xa0/0x100 [ 2087.320558] pcpu_alloc+0x4e2/0x1240 [ 2087.321068] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2087.321724] percpu_ref_init+0x31/0x3d0 [ 2087.322301] cgroup_mkdir+0x28b/0xf50 [ 2087.322892] ? cgroup_destroy_locked+0x710/0x710 [ 2087.323556] kernfs_iop_mkdir+0x14d/0x1e0 [ 2087.324109] vfs_mkdir+0x493/0x700 [ 2087.324581] do_mkdirat+0x150/0x2b0 [ 2087.325060] ? user_path_create+0xf0/0xf0 [ 2087.325651] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2087.326374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2087.327074] do_syscall_64+0x33/0x40 [ 2087.327565] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2087.328266] RIP: 0033:0x7f7635ef0b19 [ 2087.328796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.331330] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2087.332389] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2087.333358] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2087.334277] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2087.335254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.336288] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:32:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xfffffdef}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:13 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x46842, 0x0) io_setup(0x0, &(0x7f0000000080)) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000280)={0x3, 0x2, 0xa, 0x2, 0xa43c, 0x5}) creat(&(0x7f0000000140)='./file0\x00', 0x98) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '.\x81'}], 0xa, "5b34547b4e37bc14bed2ebc023e4deea1c5fdf168bb1cff79566fbc390bf502dc476cd5ec347940c55cc3663ef6ea14e32cfb7f1104fffd2b4abc1f711be0290dea7b9299e876702bdbc1c352fcd3bf40a08ea74a94a52b7ed0b79a80ccab5391c2dc62e1093f027bf5b98466589d84d7390b2f7b4369277e8a9995a1b017750faa17115a3ae13357fb034acf3a636a321fddc553863235b0a80e5697920fd50f13acdb98293c181cebe65c3"}, 0xc1) syz_io_uring_setup(0x3de4, &(0x7f0000000640)={0x0, 0x1, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000006c0), &(0x7f00000003c0)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r3 = accept(r1, &(0x7f0000000300)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000100)=0x80) fcntl$setstatus(r3, 0x4, 0x400) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000050000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000ff7f00000500000000000000ffff00000000000008000000000000000104000000000000000000000000000000000000000000000000000000000000090000008100000000000000feff00000ee4ef3e000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b30f00000000010000000000870000000000000000000000000000eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003019b2561b2a3510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c500000000000000000000000000000000000000000000000000000000003000000400"/513]) 09:32:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) [ 2087.439149] ALSA: seq fatal error: cannot create timer (-22) 09:32:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 9) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:32:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffff7f}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2087.565164] FAULT_INJECTION: forcing a failure. [ 2087.565164] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.566989] CPU: 1 PID: 13972 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2087.567902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2087.569025] Call Trace: [ 2087.569395] dump_stack+0x107/0x167 [ 2087.569908] should_fail.cold+0x5/0xa [ 2087.570432] ? create_object.isra.0+0x3a/0xa20 [ 2087.571073] should_failslab+0x5/0x20 [ 2087.571599] kmem_cache_alloc+0x5b/0x310 [ 2087.572140] ? mark_held_locks+0x9e/0xe0 [ 2087.572716] create_object.isra.0+0x3a/0xa20 [ 2087.573315] kmemleak_alloc_percpu+0xa0/0x100 [ 2087.573929] pcpu_alloc+0x4e2/0x1240 [ 2087.574510] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2087.575176] percpu_ref_init+0x31/0x3d0 [ 2087.575706] cgroup_mkdir+0x28b/0xf50 [ 2087.576263] ? cgroup_destroy_locked+0x710/0x710 [ 2087.576904] kernfs_iop_mkdir+0x14d/0x1e0 [ 2087.577473] vfs_mkdir+0x493/0x700 [ 2087.577970] do_mkdirat+0x150/0x2b0 [ 2087.578488] ? user_path_create+0xf0/0xf0 [ 2087.579058] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2087.579768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2087.580474] do_syscall_64+0x33/0x40 [ 2087.580988] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2087.581691] RIP: 0033:0x7f7635ef0b19 [ 2087.582225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2087.584727] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2087.585763] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2087.586744] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2087.587693] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2087.588681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.589631] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:32:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) 09:32:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x4000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) 09:32:28 executing program 2: mknod$loop(&(0x7f0000000400)='./file3\x00', 0x1000, 0x0) pivot_root(0x0, &(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000380)='./file0\x00', 0x108) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@alg, 0x0) chdir(0x0) r0 = openat2(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x40040, 0x82}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x22002, 0x100, 0x9}, 0x18) getsockname(r0, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="14005241db8866027a76dd61f84e4ccfae0000290000000b17fa3e9c5decf35d4b792a4ab9bf4275339e1f1a3d47ff2b47dac981bb139d1d0f9179d830ab267fb81e170295085c496b6ba22ab8c90c26761c21509b1ba62aa1cddc6e6b7c80603ba517f95740fd294099959af2d7d693ad709b4fc3d7059fb5ecbce4d5caa01686ac0d87f6afbf7da31336b492a2bd19ebd6a879b820358eb5c5b4df5343a62cd7e95562144b86ad719cabc4cd1ce8e539bbdfc13a47c3b9abff368dc85a11defe739c0c178e1e2059510d10f54324a336c7c6565946f90ef742e3a987dc32caa882b6bc928cf80496c06ec2ff5f0f7a3dc0464401bf3eaaf3e9d4bce61269aec16c18bfff8d9b9958edf634ffacb8ee640921b8f4a0046fe6654aaa56d7461c11710efd3c50d0d134f61d25048f09a7ad7ec507f6fe8af2710bdbf1e3dd156439a99846c56d14a4f8759cc06a77ad7d94e4"], 0x18}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001ac0)={'gre0\x00', &(0x7f0000001a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8000001000000d79000000014a01002800000000c2299078ac1414aaac1414aa441067800000000000006e3400000e4094"]}) r2 = creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/34, 0x22, 0x101, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) creat(&(0x7f0000000180)='./file3\x00', 0x84) 09:32:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:32:28 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x284000, 0xc1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = syz_open_dev$evdev(&(0x7f0000006000), 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000001c0)={0x3, 0x1ff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8aa3, 0x2}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0x14) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x5, 0x2, 0x8, 0xa0, 0x0, 0x3, 0x20000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000640), 0x19}, 0x10003, 0x8, 0x4000101, 0x3, 0x0, 0x10001, 0xfffe, 0x0, 0x7ff, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) sendmsg$nl_generic(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2896000000521416f6000000000eef415bfe64868d7dcca7163b78b0d6a9ae7c48dabf679d39b5fb677d869bd05610f5981fc1722822d9393083940fd12d78f590bc391c7cd9a76f95ef1e3aba7bbf5a0c91baae1140d172fe69b7eec436e1dea3a67ad4ffc1f329d7a6"], 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) 09:32:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 10) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2102.930017] FAULT_INJECTION: forcing a failure. [ 2102.930017] name failslab, interval 1, probability 0, space 0, times 0 [ 2102.931867] CPU: 0 PID: 13995 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2102.932810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2102.933978] Call Trace: [ 2102.934377] dump_stack+0x107/0x167 [ 2102.934928] should_fail.cold+0x5/0xa [ 2102.935465] ? percpu_ref_init+0xd8/0x3d0 [ 2102.936043] should_failslab+0x5/0x20 [ 2102.936603] kmem_cache_alloc_trace+0x55/0x320 [ 2102.937324] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2102.937992] percpu_ref_init+0xd8/0x3d0 [ 2102.938551] cgroup_mkdir+0x28b/0xf50 [ 2102.939105] ? cgroup_destroy_locked+0x710/0x710 [ 2102.939801] kernfs_iop_mkdir+0x14d/0x1e0 [ 2102.940369] vfs_mkdir+0x493/0x700 [ 2102.940859] do_mkdirat+0x150/0x2b0 [ 2102.941381] ? user_path_create+0xf0/0xf0 [ 2102.941967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2102.942716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2102.943426] do_syscall_64+0x33/0x40 [ 2102.943934] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2102.944639] RIP: 0033:0x7f7635ef0b19 [ 2102.945168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2102.947766] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2102.948836] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2102.949834] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2102.950869] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2102.951845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2102.952857] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:32:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:32:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x8000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 11) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:32:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2103.078005] FAULT_INJECTION: forcing a failure. [ 2103.078005] name failslab, interval 1, probability 0, space 0, times 0 [ 2103.079803] CPU: 1 PID: 14007 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2103.080736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2103.081857] Call Trace: [ 2103.082252] dump_stack+0x107/0x167 [ 2103.082904] should_fail.cold+0x5/0xa [ 2103.083489] ? create_object.isra.0+0x3a/0xa20 [ 2103.084148] should_failslab+0x5/0x20 [ 2103.084663] kmem_cache_alloc+0x5b/0x310 [ 2103.085211] create_object.isra.0+0x3a/0xa20 [ 2103.085798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2103.086485] kmem_cache_alloc_trace+0x151/0x320 [ 2103.087149] ? cset_cgroup_from_root+0x2a0/0x2a0 [ 2103.087792] percpu_ref_init+0xd8/0x3d0 [ 2103.088330] cgroup_mkdir+0x28b/0xf50 [ 2103.088847] ? cgroup_destroy_locked+0x710/0x710 [ 2103.089477] kernfs_iop_mkdir+0x14d/0x1e0 [ 2103.090033] vfs_mkdir+0x493/0x700 [ 2103.090560] do_mkdirat+0x150/0x2b0 [ 2103.091071] ? user_path_create+0xf0/0xf0 [ 2103.091629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2103.092331] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2103.093034] do_syscall_64+0x33/0x40 [ 2103.093538] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2103.094235] RIP: 0033:0x7f7635ef0b19 [ 2103.094758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2103.097227] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2103.098253] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2103.099245] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2103.100204] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2103.101157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2103.102107] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:32:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x20000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:32:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x7fffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x101540, 0x182) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xffff, 0x2, 0x9, 0x6, 0x7d8e}) 09:32:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r3, &(0x7f00000000c0)="a3", 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r4, 0x0) mq_timedsend(r1, &(0x7f0000000200)="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", 0xfa, 0x1ff, &(0x7f0000000080)={0x77359400}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) dup2(r3, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x200f5ef, 0x0) 09:32:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 12) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:32:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x40030000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:44 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) 09:32:44 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) 09:32:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) [ 2118.988361] FAULT_INJECTION: forcing a failure. [ 2118.988361] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.990198] CPU: 0 PID: 14026 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2118.991192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2118.992403] Call Trace: [ 2118.992907] dump_stack+0x107/0x167 [ 2118.993425] should_fail.cold+0x5/0xa [ 2118.993965] ? create_object.isra.0+0x3a/0xa20 [ 2118.994616] should_failslab+0x5/0x20 [ 2118.995187] kmem_cache_alloc+0x5b/0x310 [ 2118.995758] create_object.isra.0+0x3a/0xa20 [ 2118.996389] kmemleak_alloc_percpu+0xa0/0x100 [ 2118.997013] pcpu_alloc+0x4e2/0x1240 [ 2118.997562] cgroup_rstat_init+0x14f/0x1f0 [ 2118.998152] cgroup_mkdir+0x709/0xf50 [ 2118.998684] ? cgroup_destroy_locked+0x710/0x710 [ 2118.999355] kernfs_iop_mkdir+0x14d/0x1e0 [ 2118.999924] vfs_mkdir+0x493/0x700 [ 2119.000419] do_mkdirat+0x150/0x2b0 [ 2119.000913] ? user_path_create+0xf0/0xf0 [ 2119.001486] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2119.002211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2119.002947] do_syscall_64+0x33/0x40 [ 2119.003461] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2119.004160] RIP: 0033:0x7f7635ef0b19 [ 2119.004676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.007231] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2119.008277] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2119.009261] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2119.010230] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2119.011219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.012197] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:32:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x100000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14830}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x2, 0x7, 0x5, 0xd2, "e213c6a3eb7b8708ccc1f5feedd0ba60d1a07bae3d06a7ee0b56fb494565523858dff93427f2510db04abaaee94cf4f74f4fb2a0b87c5c1f501009be2b1cc1f76e101185e1d09e9e7cf307cfe8ba6f04443979c141c9144e51ff279ed1840d8a0650a092bbed127cb76b32bb1a20ffaec8c1a70ddb18c727bab6b2403b90354a8428e031a09537e8feb62bc5f225b329d4d3f9f34af44b2c816422a4695261977ed9a1edb2610c5df7b3d871e69ebd0da9748d73e7818d9c1571b2759cedf6201cdc42991d974380faf70ad957df61546cfc"}, 0xdb, 0x2) fallocate(r1, 0x20, 0x0, 0x8000) 09:32:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001240)=ANY=[@ANYBLOB="01020000000000a0c27e9d001800000433a69dbe56f9f2907e1bbde73499af90e0dac296c9a598bf370240e1a5ba16d20867abccd4a8be00949c04db4f7b44c1b1d71377a886a9075475cea3352e79fd2e9d0300c12d7b5d6f71dfbdd82bae19bcd911d7aacc785dcfd64f693d517e10b3a4e2bc1f5fdf002c751d029b3dbd4286f005d62298d7d883ec599aa7f7e413bc13d5339979158859d28673863f1c5faa00a5cc960b040065c6203d919cccc3c3ef07163f91c15aec603d5554b6694ae7cb0f5a629ef68621947cacf99795ee2ff9bca4f41ea1d44aa2257b1e04620a42756340b501660a7729012b64d72300"/252, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x200000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:32:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) socket$unix(0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bind$unix(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffd) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) lseek(r5, 0x0, 0x3) syz_open_dev$hiddev(&(0x7f00000001c0), 0x8, 0x40501) getsockopt$netlink(r4, 0x10e, 0xb, 0x0, &(0x7f0000001140)) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x100000001) 09:32:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 13) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:32:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:32:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2119.356270] FAULT_INJECTION: forcing a failure. [ 2119.356270] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.358186] CPU: 1 PID: 14067 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2119.359177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2119.360338] Call Trace: [ 2119.360720] dump_stack+0x107/0x167 [ 2119.361250] should_fail.cold+0x5/0xa [ 2119.361781] ? create_object.isra.0+0x3a/0xa20 [ 2119.362434] ? create_object.isra.0+0x3a/0xa20 [ 2119.363095] should_failslab+0x5/0x20 [ 2119.363630] kmem_cache_alloc+0x5b/0x310 [ 2119.364196] ? mark_held_locks+0x9e/0xe0 [ 2119.364772] create_object.isra.0+0x3a/0xa20 [ 2119.365384] kmemleak_alloc_percpu+0xa0/0x100 [ 2119.366011] pcpu_alloc+0x4e2/0x1240 [ 2119.366569] cgroup_rstat_init+0x14f/0x1f0 [ 2119.367219] cgroup_mkdir+0x709/0xf50 [ 2119.367761] ? cgroup_destroy_locked+0x710/0x710 [ 2119.368427] kernfs_iop_mkdir+0x14d/0x1e0 [ 2119.369014] vfs_mkdir+0x493/0x700 [ 2119.369510] do_mkdirat+0x150/0x2b0 [ 2119.370027] ? user_path_create+0xf0/0xf0 [ 2119.370606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2119.371361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2119.372105] do_syscall_64+0x33/0x40 [ 2119.372639] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2119.373344] RIP: 0033:0x7f7635ef0b19 [ 2119.373868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.376440] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2119.377529] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2119.378540] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2119.379765] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2119.380761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.381776] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:33:00 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) 09:33:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x300000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) write$cgroup_devices(r1, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x3648}, {0x0, 0x0, 0x1000000}}}, 0x400000) 09:33:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) 09:33:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 14) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:33:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x2000001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x2) 09:33:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2134.820120] FAULT_INJECTION: forcing a failure. [ 2134.820120] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.821946] CPU: 1 PID: 14088 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2134.822895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2134.824226] Call Trace: [ 2134.824584] dump_stack+0x107/0x167 [ 2134.825095] should_fail.cold+0x5/0xa [ 2134.825674] should_failslab+0x5/0x20 [ 2134.826178] __kmalloc_track_caller+0x79/0x370 [ 2134.826801] ? kstrdup_const+0x53/0x80 [ 2134.827489] ? kmemleak_alloc_percpu+0xa0/0x100 [ 2134.828259] kstrdup+0x36/0x70 [ 2134.828683] kstrdup_const+0x53/0x80 [ 2134.829176] __kernfs_new_node+0x9d/0x860 [ 2134.829757] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2134.830397] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2134.831013] ? pcpu_alloc+0x12a/0x1240 [ 2134.831569] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2134.832302] kernfs_create_dir_ns+0x9c/0x230 [ 2134.832919] cgroup_mkdir+0x318/0xf50 [ 2134.833426] ? cgroup_destroy_locked+0x710/0x710 [ 2134.834078] kernfs_iop_mkdir+0x14d/0x1e0 [ 2134.834639] vfs_mkdir+0x493/0x700 [ 2134.835143] do_mkdirat+0x150/0x2b0 [ 2134.835673] ? user_path_create+0xf0/0xf0 [ 2134.836254] do_syscall_64+0x33/0x40 [ 2134.836776] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2134.837480] RIP: 0033:0x7f7635ef0b19 [ 2134.837983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2134.840627] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2134.841744] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2134.842733] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2134.843807] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2134.844817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2134.845796] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:33:00 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:00 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="014344303031", 0x6, 0x8000}, {0x0, 0x0, 0x80000008800}], 0x40c2400, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 09:33:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x400000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:00 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x400000000000, 0x200, 0x8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r2, 0x9e46, 0x0) getdents64(r2, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77b6f6a6e7e5d07025fa944f9b27f96fdf6770bc41f6d9d0735e294ef7c779c112efb9fbbb2a0a77bde35f2e17a81f517480be1dbe4c425760dac60dd6bd2d34c3ebcd7f3572cb2f3c306f206495e9ce8740e8cd3c416aadfed603905e32fa13a894721007ae9f1eed6abf9ee2f1f4d56eac6e948500875d0e304d7b27832eadc8ab1f5f2d242e142ce200b0f5b7df840d5135b56593df750afedf7e2c66e34861da2725b4cd7b0343cfd183fb26426f011100"/191, @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=none,smackfsfloor=:,seclabel,\x00']) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x3a}}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYBLOB="1d0001"], 0x340}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r5, &(0x7f0000000200)=0x6, r2, &(0x7f0000000280)=0xfff, 0x8001, 0x0) 09:33:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 15) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:33:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2135.084203] 9pnet: Insufficient options for proto=fd 09:33:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x800000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:01 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) [ 2135.119620] 9pnet: Insufficient options for proto=fd [ 2135.134191] FAULT_INJECTION: forcing a failure. [ 2135.134191] name failslab, interval 1, probability 0, space 0, times 0 [ 2135.136130] CPU: 1 PID: 14114 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2135.137136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2135.138292] Call Trace: [ 2135.138676] dump_stack+0x107/0x167 [ 2135.139231] should_fail.cold+0x5/0xa [ 2135.139782] ? create_object.isra.0+0x3a/0xa20 [ 2135.140457] should_failslab+0x5/0x20 [ 2135.140996] kmem_cache_alloc+0x5b/0x310 [ 2135.141579] create_object.isra.0+0x3a/0xa20 [ 2135.142231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2135.142969] __kmalloc_track_caller+0x177/0x370 [ 2135.143653] ? kstrdup_const+0x53/0x80 [ 2135.144213] kstrdup+0x36/0x70 [ 2135.144668] kstrdup_const+0x53/0x80 [ 2135.145198] __kernfs_new_node+0x9d/0x860 [ 2135.145791] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2135.146453] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2135.147149] ? pcpu_alloc+0x12a/0x1240 [ 2135.147703] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2135.148428] kernfs_create_dir_ns+0x9c/0x230 [ 2135.149054] cgroup_mkdir+0x318/0xf50 [ 2135.149590] ? cgroup_destroy_locked+0x710/0x710 [ 2135.150266] kernfs_iop_mkdir+0x14d/0x1e0 [ 2135.150852] vfs_mkdir+0x493/0x700 [ 2135.151387] do_mkdirat+0x150/0x2b0 [ 2135.151904] ? user_path_create+0xf0/0xf0 [ 2135.152489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2135.153238] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2135.153966] do_syscall_64+0x33/0x40 [ 2135.154493] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2135.155242] RIP: 0033:0x7f7635ef0b19 [ 2135.155784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2135.158343] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2135.159421] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2135.160462] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2135.161460] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2135.162454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2135.163477] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:33:01 executing program 7: mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20004, &(0x7f0000000380)={'trans=unix,', {[{@cache_loose}, {@privport}, {@access_client}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@seclabel}]}}) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r6 = eventfd2(0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0xa3, 0x0, 0x6, 0x1}, 0x0) r7 = timerfd_create(0x1, 0x80400) ioctl$FIOCLEX(r7, 0x5451) dup3(r3, 0xffffffffffffffff, 0x80000) fchown(r1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 09:33:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x900000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0}}, 0x0) 09:33:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xe00000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:01 executing program 2: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\x00'}, {}, {}, {}, {}, {0x20, '\x00'}], 0xa, "f8501e7b3de6b8b6c60d636805cafc7cba7687f365d621fa20bba3d4492df5e2fe970f9cd25ae1d8049b4dc24feaa2f59c641fd9e7a2cfba9e393fffbd577a36b5ed1546d136f8e11d860928605a2b0c5e7ae0ddda44342dc4a004ad50e770"}, 0x72) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x440080, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x30, r1, 0x65528000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0xa0, 0x0, 0x0, 0x0, 0x2}) r3 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x56, 0x84, 0x2, 0x3, 0x3, 0x4, 0x3b6, 0x40, 0x80, 0x7, 0x9, 0x38, 0x1, 0xf4, 0x3, 0x5}, [{0x6474e551, 0x9, 0x200, 0x5, 0x5, 0x81, 0x80000000, 0x4}], "30048b6209d0de58c290672dad2c7894f58e331eaf0598022730f9b5e56ecdd3d6a07a7504e8c5954d2dd381b18e8d748ce911bc1b96334f69ca4942b71a5914bfa642abd770178cdb1fb24a309754a618f2f190d25be821892cbeb42a269adb85095ae522c8eed6b2e9dbe2c7d0df122fa6678a9efb2d50e7c3e3d60f53a2976dc1f6581e0c4272fcbcbd784946f5e9f56b8f26ebe744f0153955eb26ce1d57c2e70ab8128f8008acf87791658f2a2cce", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x829) open(&(0x7f0000000300)='./file0\x00', 0x1012c0, 0xe) io_uring_enter(r3, 0x5c33, 0x0, 0x0, 0x0, 0x0) [ 2135.363025] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,,errors=continue 09:33:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:16 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:33:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/159, 0x9f}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) fcntl$setflags(r2, 0x2, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000001) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="ee43a404fbce1529634a89631557", @ANYRESHEX, @ANYBLOB=',msize=0x0000000000380000,']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) open_tree(r3, &(0x7f00000000c0)='./mnt\x00', 0x9001) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="04", @ANYRES16, @ANYBLOB="000827bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4) getpid() unshare(0x40000000) unshare(0x48020200) 09:33:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x1100000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:33:16 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a087092", 0x6e, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1293) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x25, 0x19, 0x5, 0x1a, 0x3, 0x3, 0x5, 0x36, 0x1}) 09:33:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 16) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2150.697315] FAULT_INJECTION: forcing a failure. [ 2150.697315] name failslab, interval 1, probability 0, space 0, times 0 [ 2150.699073] CPU: 0 PID: 14166 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2150.700006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2150.701113] Call Trace: [ 2150.701469] dump_stack+0x107/0x167 [ 2150.701970] should_fail.cold+0x5/0xa [ 2150.702492] ? __kernfs_new_node+0xd4/0x860 [ 2150.703075] should_failslab+0x5/0x20 [ 2150.703627] kmem_cache_alloc+0x5b/0x310 [ 2150.704185] __kernfs_new_node+0xd4/0x860 [ 2150.704751] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2150.705409] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2150.706036] ? pcpu_alloc+0x12a/0x1240 [ 2150.706610] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2150.707327] kernfs_create_dir_ns+0x9c/0x230 [ 2150.707927] cgroup_mkdir+0x318/0xf50 [ 2150.708472] ? cgroup_destroy_locked+0x710/0x710 [ 2150.709111] kernfs_iop_mkdir+0x14d/0x1e0 [ 2150.709679] vfs_mkdir+0x493/0x700 [ 2150.710164] do_mkdirat+0x150/0x2b0 [ 2150.710662] ? user_path_create+0xf0/0xf0 [ 2150.711233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2150.711961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2150.712668] do_syscall_64+0x33/0x40 [ 2150.713177] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2150.713869] RIP: 0033:0x7f7635ef0b19 [ 2150.714400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2150.716921] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2150.717969] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2150.718942] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2150.719919] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2150.720880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.721844] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2150.777332] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz-executor.7: bad orphan inode 301979167 [ 2150.786102] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 09:33:32 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:33:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3000000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:33:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffcd7}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r2}}}], 0x28}}], 0x2, 0x0) 09:33:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:32 executing program 7: syz_emit_ethernet(0x2c5, &(0x7f0000000640)={@multicast, @broadcast, @void, {@mpls_mc={0x8848, {[{0x1}, {0x2, 0x0, 0x1}], @ipv6=@gre_packet={0xc, 0x6, "bd260f", 0x287, 0x2f, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@srh={0x84, 0x4, 0x4, 0x2, 0x9, 0x20, 0xd27, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}, @dstopts={0x84, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @dstopts={0x2, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x80000000}]}, @dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x65}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x12, 0x0, [0x7ff, 0x3ff], "83bfc4c14494e156c4bb60a71d8299bfe401"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3f, 0x7f, 0xfff], "63c01bb40e21731402057a9184ce25fa3689f3f748f25c2425ff688bf3253a70af0bc9a0652dec95db77a660285762c3a4a9b7851042c0f8400bbd888b1a54b27139211a30377fd640"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x0, 0x200], "672fa4d6cdbc72dd8991a90b911403db28e3713597c3843d4f8c200a0b6f13a73b7008cf08233bef1b156827df00e0981f82a4c9138d9ab0ec6332d3fd7dba136fe2955d18174280a5c4ba68c2f1174afad169365701577dfe6c4aa83a7456946c04f133dcd6354c6a9d635b4c564ef8c39acb34d360d6be30a985e4bf842262e4ea44b127fb1d5f39f764ae7e61ef1dc26c636dd70ea7696922edf5b22554792f179eaee4396164375cd9ecc6841dbdc3d8e5f37bf5f727a6a7c431a262ccb0d707dac6661865b817db71aa45f638467177da4c2c688b149b4015662ba2f451629371c6a14616ca2b6ae56a691c06"}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, {0xe05}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x6, 0x2, 0x0, 0x0, 0x4}, 0x2, {0x100, 0x81, 0x0, 0x7, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x1, "9a12cffbe4c14e3fd833013c91fb09d5d1c215f7141c9e2cf6609fbe60558fa36f02d30efe292bb7c1a4dd826324aeb69bf302c59ead5d072120cb86dde0ec0496a17d88992a875d4cbce2064ee1b33c21b1b18d04467ee143412b79d2a34a7d8f47e1c60aca3eb916bd40ea2b1189ca0095b5b6407146d690"}}}}}}}}, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000), &(0x7f0000000540)={0x0, 0xfb, 0xdd, 0x6, 0xfb, "d30673c6da6adbbecc91c99880447406", "150796fd2243e24aee3f557caa817ae259003625ecbeb2ebc53c999d4b6ed68ef93d9d8ff665679d55c7862981ddfc0ccb4f4eb9b1170b6f111b42dcd9e4ca8418679fc9240643fb2b9065e40e1bf14c872e4fe4295dc718441eb5dcbbf0c1a6c72a31dad1753a5a3839e12eeef819d11175fb49afd6e079ea712901ab703a3dab19da53b2e2db5ddb25407da72c65e0a4900a59db9b62a5cc4033b1d89b6caea691b1916953650918bbfc7678f8ab484feccf7b86c0b8f120e62bbd18c6682838587af0710f4931"}, 0xdd, 0x1) write$tun(r1, &(0x7f0000000140)={@void, @val={0x1, 0x0, 0x5, 0x1ff, 0x80, 0x400}, @mpls={[{0x6}, {0x1}, {0x4, 0x0, 0x1}, {0x6}, {0x8001}, {}, {0xffff}], @ipv6=@udp={0x7, 0x6, "10602e", 0x3a6, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x89, 0xc, 0x1, 0x6, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x7}, @dev={0xfe, 0x80, '\x00', 0x42}]}, @routing={0x6, 0x8, 0x0, 0x80, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast1, @mcast1]}, @dstopts={0x2f, 0x2a, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x40, 0x2, [0x74, 0x8, 0x3, 0x5d]}}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x8, 0x2c, "a0ab8785922d0d2ab3035ad4456f292b203a735e2d664972844922e6e6d91b4b3ab6f87db61f3095990aac94"}, @enc_lim={0x4, 0x1, 0xff}, @generic={0x9, 0xde, "2f86edaa6767e588e008e648ae0a97aed6ea17ec8896125cf5ff3c42f85ccbab64a23fa41f6b0c01a2870cfae0c9913ef302b7263e31a7c78a51aaf7b8da43f3333ed300c4ac4261208c148e955a26b628e6f4490fcfe18459da7ffb95f810000b46087ffb90bd618f502258859f4c91691b4df14630789abce104856770de9f6a116091cf2f5413222587a256861aa44cfc96656e617a390f30e537cc66607b4cfb874d7fdabfce715a49e0231e88c3a6d3a06c7a124f9cc6ac8bf55cc1a6f573d3e28a3f22d9b4ef11f57411216fe81143c08abb926e157c605a8f6be5"}, @hao={0xc9, 0x10, @remote}]}, @hopopts={0x33, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x400}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x1, 0x1, [0x100, 0x4, 0x2, 0x8, 0x400, 0x1f, 0xe3, 0xfff]}}]}, @hopopts={0x33, 0x5, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0xfff7, [0xfffffffffffffff8, 0xfffffffffffffffe, 0x2, 0x1]}}, @pad1]}, @dstopts={0x1, 0x3, '\x00', [@ra={0x5, 0x2, 0x9}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @hopopts={0x67, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], {0x4e22, 0x4e20, 0xb6, 0x0, @opaque="c311d453eaaedd376088ee2e2d9c887615eb641af6e59bbab436e245eea50aad031a905a9e059cf5bbcaccbf9307044278f78d4cc16efe7a764e8f74f8ccf0d3ea599a761c8d6749a2bc62d924283389f3d0ccdd05140bccdb30e0ca23ccaa0ef77ba9f3821fdfe606e5c299fe91bb3f86437c8cdd372ff19c56f5ebe4de5d094872c589a2966e6c257537df69904ca6cfb1fd1979583bad95c942fe90177fdd4c213b5a310d087f5a989c3bf49c"}}}}}, 0x3f4) 09:33:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 17) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2166.365097] FAULT_INJECTION: forcing a failure. [ 2166.365097] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.366955] CPU: 0 PID: 14195 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2166.367914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.369058] Call Trace: [ 2166.369437] dump_stack+0x107/0x167 [ 2166.369984] should_fail.cold+0x5/0xa [ 2166.370537] ? create_object.isra.0+0x3a/0xa20 [ 2166.371204] should_failslab+0x5/0x20 [ 2166.371767] kmem_cache_alloc+0x5b/0x310 [ 2166.372332] create_object.isra.0+0x3a/0xa20 [ 2166.372937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2166.373592] kmem_cache_alloc+0x159/0x310 [ 2166.374161] __kernfs_new_node+0xd4/0x860 [ 2166.374750] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2166.375426] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2166.376121] ? pcpu_alloc+0x12a/0x1240 [ 2166.376663] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2166.377397] kernfs_create_dir_ns+0x9c/0x230 [ 2166.378026] cgroup_mkdir+0x318/0xf50 [ 2166.378556] ? cgroup_destroy_locked+0x710/0x710 [ 2166.379240] kernfs_iop_mkdir+0x14d/0x1e0 [ 2166.379855] vfs_mkdir+0x493/0x700 [ 2166.380425] do_mkdirat+0x150/0x2b0 [ 2166.381053] ? user_path_create+0xf0/0xf0 [ 2166.381634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2166.382366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.383119] do_syscall_64+0x33/0x40 [ 2166.383707] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2166.384412] RIP: 0033:0x7f7635ef0b19 [ 2166.384974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.387607] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2166.388695] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2166.389739] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2166.390746] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.391846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2166.392842] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:33:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x3100000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x20, r1, 0x201, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x20}}, 0x0) 09:33:32 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2c, 0x0, 0x48, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x17) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x311b008, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r3}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xf7, 0x3, 0x0, 0x0, 0x100000, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x1004, 0x10, 0xffffffffffffffff, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:33:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 18) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:33:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x20) openat(r1, &(0x7f0000000440)='./file0\x00', 0x80, 0x4) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x330, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="f72e1afa6030c46b4626ed01363be4a00d540cb313e412d7ceb781245c4409c3fa7ed175f4041dba4e2e226d82e77c51bb674b027768d8866387ea14d893b2fa66a97a1c9bd9472336e8a3a19ac7566edf514dafb079b6413091ae55a0b019a8a250f311285acc2559164fffb16526d9ccdf6f8a073b3ebdb716d1d1c99be7b31994793a69c8c339b012397f052d91115ccdf29b6f1f60d6e343f1b20ceeba1997d5bfd4eaac2eaca5910b90f09fb027db28fb1034374803430406a365a4a6d135d2814b46be2258728ca437875c47171993484e902b1269f4d98610fe94a6c8671580867e11f680d287470f0098aea4a969b8d387", 0xf5, 0xff}, {&(0x7f00000001c0)="265e1f6cb1411cc46927256cebbe9f3bcca0ad921c08fe50c27fc58467cffa9623d5e5b354df6868e187c75406101676f1dea9681b590ad5078c155d09c22d0749cacba97f56fdd69ad3ca5296a4222aa82bd1e64841beb39a8a", 0x5a, 0x7}], 0x0, &(0x7f0000000280)={[{@noauto_da_alloc}], [{@pcr}, {@appraise}, {@fowner_gt}, {@uid_eq}]}) pwrite64(r2, &(0x7f0000000300)="4eec31c524008e05f4da12c56568123dcc2fb7b61feea61c254d528ff4db7dab8fa23ee372ec9ddeb7bd59afd314c1ed224d37a07f6f067098abcbbb846c08262f200a0656daf5bc7dfd182bdfc11721cf79f019d8999474730886bb494a133ce2af369fc83c82ef157a567b0d2533f14b3e43302b50d6f904256e312da59ebf1de99fc776c065a0bacc1d6128a240e09cbad9d3d87d457a60cbe4dedaa38185d1b5b9173a9e0d96333453db223e85cc9239d326db1836758e1b1bdd927f385eab2d7c1e3d84936c05998445223c0b7deef7a3d25b8c42131059", 0xda, 0x40) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000400)={0x0, r2, 0x5, 0x7, 0xfffffffffffffe00}) 09:33:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x4000000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2166.663092] FAULT_INJECTION: forcing a failure. [ 2166.663092] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.665249] CPU: 0 PID: 14230 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2166.666179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.667295] Call Trace: [ 2166.667699] dump_stack+0x107/0x167 [ 2166.668227] should_fail.cold+0x5/0xa [ 2166.668758] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2166.669530] should_failslab+0x5/0x20 [ 2166.670051] kmem_cache_alloc+0x5b/0x310 [ 2166.670608] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2166.671385] radix_tree_extend+0x231/0x490 [ 2166.672007] idr_get_free+0x623/0x8f0 [ 2166.672544] idr_alloc_u32+0x170/0x2d0 [ 2166.673072] ? __fprop_inc_percpu_max+0x130/0x130 [ 2166.673724] ? lock_acquire+0x197/0x470 [ 2166.674262] ? __kernfs_new_node+0xff/0x860 [ 2166.674877] idr_alloc_cyclic+0x102/0x230 [ 2166.675506] ? idr_alloc+0x130/0x130 [ 2166.676034] ? rwlock_bug.part.0+0x90/0x90 [ 2166.676649] __kernfs_new_node+0x117/0x860 [ 2166.677250] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2166.677885] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2166.678525] ? pcpu_alloc+0x12a/0x1240 [ 2166.679066] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2166.679820] kernfs_create_dir_ns+0x9c/0x230 [ 2166.680429] cgroup_mkdir+0x318/0xf50 [ 2166.680950] ? cgroup_destroy_locked+0x710/0x710 [ 2166.681616] kernfs_iop_mkdir+0x14d/0x1e0 [ 2166.682195] vfs_mkdir+0x493/0x700 [ 2166.682689] do_mkdirat+0x150/0x2b0 [ 2166.683181] ? user_path_create+0xf0/0xf0 [ 2166.683784] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2166.684490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.685206] do_syscall_64+0x33/0x40 [ 2166.685719] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2166.686425] RIP: 0033:0x7f7635ef0b19 [ 2166.686926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.689413] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2166.690458] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2166.691433] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2166.692423] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.693411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2166.694430] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:33:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 19) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:33:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:48 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:33:48 executing program 2: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/121) msgctl$IPC_INFO(0x0, 0x3, 0x0) r0 = msgget$private(0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}}, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000002c0)=""/54) getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000140), 0x6e, 0x0, 0x0, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000016c0), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/54, 0x36}, {&(0x7f00000017c0)=""/189, 0xbd}, {&(0x7f0000001880)=""/191, 0xbf}, {&(0x7f0000001940)=""/169, 0xa9}], 0x5, &(0x7f0000001a80)}}], 0x2, 0x0, &(0x7f0000001c40)={0x0, 0x989680}) msgrcv(r0, &(0x7f0000000040)={0x0, ""/2}, 0xa, 0x2, 0x2800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1cf, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) renameat2(r4, &(0x7f0000001a80)='./file0\x00', r3, &(0x7f0000001ac0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="3f000000070000002e2f66696c653000fcf7bbbbcf42b192e0bdb62d09ae52d3fe3d374137ce83c9196a73c1936dbbd7f10e755039bffed840df0657da06ea25c1a632d113c339368e5fce117bf072010000000000000045a585428b0fa659c98c388324566a7edb09e219ccd2ab82ec9ec2469e48b5a94f836139023a3c5b9eb586859ced65d98e39f75ad12588f6"]) sendfile(r5, r6, &(0x7f0000000300)=0x10001, 0x9) 09:33:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xc805000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:48 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', 0x0, 0x8, 0x0, &(0x7f0000000140), 0x2040800, &(0x7f0000000240)=ANY=[@ANYBLOB='auto_da_alloc=0x0000000000000009,data_err=ignore,journal_ioprio=0x0000000000000002,inode_readahead_blks=0x0000000000800000,bh,euid<', @ANYRESDEC, @ANYBLOB=',mask=MAY_Aat=vfat\x00,fscontext=root,pcr=00000000000000000054,\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff0f44, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0xa, 0x6, 0x0, 0x80000000, 0x4, 0x1}, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200", 0x2e}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000011300)) openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x8a880, 0x8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x200401, 0x80) 09:33:48 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x0, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) [ 2182.096169] FAULT_INJECTION: forcing a failure. [ 2182.096169] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.098029] CPU: 0 PID: 14251 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2182.099033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.100244] Call Trace: [ 2182.100638] dump_stack+0x107/0x167 [ 2182.101169] should_fail.cold+0x5/0xa [ 2182.101716] ? create_object.isra.0+0x3a/0xa20 [ 2182.102381] should_failslab+0x5/0x20 [ 2182.102934] kmem_cache_alloc+0x5b/0x310 [ 2182.103517] create_object.isra.0+0x3a/0xa20 [ 2182.104180] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2182.104899] kmem_cache_alloc+0x159/0x310 [ 2182.105506] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2182.106332] radix_tree_extend+0x231/0x490 [ 2182.106948] idr_get_free+0x623/0x8f0 [ 2182.107013] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2182.107499] idr_alloc_u32+0x170/0x2d0 [ 2182.109315] ? __fprop_inc_percpu_max+0x130/0x130 [ 2182.110005] ? lock_acquire+0x197/0x470 [ 2182.110583] ? __kernfs_new_node+0xff/0x860 [ 2182.111222] idr_alloc_cyclic+0x102/0x230 [ 2182.111850] ? idr_alloc+0x130/0x130 [ 2182.112386] ? rwlock_bug.part.0+0x90/0x90 [ 2182.113157] __kernfs_new_node+0x117/0x860 [ 2182.113926] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2182.114609] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2182.115288] ? pcpu_alloc+0x12a/0x1240 [ 2182.115882] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2182.116636] kernfs_create_dir_ns+0x9c/0x230 [ 2182.117290] cgroup_mkdir+0x318/0xf50 [ 2182.117841] ? cgroup_destroy_locked+0x710/0x710 [ 2182.118530] kernfs_iop_mkdir+0x14d/0x1e0 [ 2182.119136] vfs_mkdir+0x493/0x700 [ 2182.119638] do_mkdirat+0x150/0x2b0 [ 2182.120184] ? user_path_create+0xf0/0xf0 [ 2182.120802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2182.121569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2182.122303] do_syscall_64+0x33/0x40 [ 2182.122863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2182.123596] RIP: 0033:0x7f7635ef0b19 [ 2182.124185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2182.126849] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2182.127981] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2182.128993] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2182.130021] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2182.130987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2182.132023] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2182.152279] FAT-fs (loop7): Directory bread(block 64) failed 09:33:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xeffdffff00000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2182.163864] FAT-fs (loop7): Directory bread(block 65) failed [ 2182.170716] FAT-fs (loop7): Directory bread(block 66) failed [ 2182.172198] FAT-fs (loop7): Directory bread(block 67) failed [ 2182.189775] FAT-fs (loop7): Directory bread(block 68) failed [ 2182.192327] FAT-fs (loop7): Directory bread(block 69) failed [ 2182.199248] FAT-fs (loop7): Directory bread(block 70) failed [ 2182.221706] FAT-fs (loop7): Directory bread(block 71) failed 09:33:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2182.227979] FAT-fs (loop7): Directory bread(block 72) failed [ 2182.238659] FAT-fs (loop7): Directory bread(block 73) failed 09:33:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xf7ffff7f00000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:33:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:33:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 20) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:33:48 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8058a9, 0x0, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x13, r1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000480)={@private2}, 0x14) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RWSTAT(r2, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f00000002c0)={0x8001, 0x0, 0xffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c6531009e98054b08f8f3f87a8493538bbd2ee12a373bfc5a3b48bc6d8a5e1b7c6568eb0e65d69f059cf63e2b429c417c39902750053a9b52b44533e2d9e52280df2ddfdd36de4330ad546525aaa83bc7d66433e577a99af4e1e5cb0dabeca42f3316edccb1d44b54cb6cbd34bcb29e58d93b470610c99a2b9ec803106c53d2b916e817695f36f807cb81d5677b320593a271529934daf3cd4a9f2b52698d2984619119958af96eee59ae299ad1510a74d4e4cf2e45e3cb062f4cef3167ca902171dc7ca9ee855d897a72f2d6ae77c6a627a400"/233]) pwrite64(r3, &(0x7f0000000040)="311809e79d125e50144476b4c465d16848", 0x11, 0x101) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r2}) 09:33:48 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) [ 2182.423832] FAULT_INJECTION: forcing a failure. [ 2182.423832] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.425703] CPU: 0 PID: 14282 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2182.426702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2182.427919] Call Trace: [ 2182.428303] dump_stack+0x107/0x167 [ 2182.428833] should_fail.cold+0x5/0xa [ 2182.429388] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2182.430225] should_failslab+0x5/0x20 [ 2182.430781] kmem_cache_alloc+0x5b/0x310 [ 2182.431371] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2182.432192] idr_get_free+0x4b5/0x8f0 [ 2182.432762] idr_alloc_u32+0x170/0x2d0 [ 2182.433332] ? __fprop_inc_percpu_max+0x130/0x130 [ 2182.434033] ? lock_acquire+0x197/0x470 [ 2182.434612] ? __kernfs_new_node+0xff/0x860 [ 2182.435235] idr_alloc_cyclic+0x102/0x230 [ 2182.435879] ? idr_alloc+0x130/0x130 [ 2182.436424] ? rwlock_bug.part.0+0x90/0x90 [ 2182.437026] __kernfs_new_node+0x117/0x860 [ 2182.437656] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2182.438343] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2182.439016] ? pcpu_alloc+0x12a/0x1240 [ 2182.439585] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2182.440352] kernfs_create_dir_ns+0x9c/0x230 [ 2182.440998] cgroup_mkdir+0x318/0xf50 [ 2182.441551] ? cgroup_destroy_locked+0x710/0x710 [ 2182.442248] kernfs_iop_mkdir+0x14d/0x1e0 [ 2182.442851] vfs_mkdir+0x493/0x700 [ 2182.443375] do_mkdirat+0x150/0x2b0 [ 2182.443912] ? user_path_create+0xf0/0xf0 [ 2182.444498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2182.445259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2182.446008] do_syscall_64+0x33/0x40 [ 2182.446545] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2182.447293] RIP: 0033:0x7f7635ef0b19 [ 2182.447864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2182.450487] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2182.451595] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2182.452653] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2182.453673] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2182.454683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2182.455726] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2182.603571] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.6'. 09:34:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:34:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xff03000000000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 21) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:34:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x24, 0xffffffffffffff01, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_io_uring_setup(0x5c49, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x27b}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$sock_bt_hci(r4, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) write(0xffffffffffffffff, &(0x7f0000000180)="4c4ac5535b41197f579ff5284c7c62c3c216c1809f0efb59a1c16612c9404c88627341c5bc65da58b2", 0x29) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xfffffffffffffeff, 0xaec, 0x5, 0x9}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fdatasync(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 09:34:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:34:04 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0010005e00c5d50000000000000000000002000500008092000000d80854e2cd7ee8c33b08c9dfd80ae48f411de42019360640e9f31f24efaf32f2a71f2ee77247c534a04344c4802ed680e887de63cca203a6048d8d8d82ddc9a06ced9813c2bd2cdff306fbce1286bb3b01b465069c"], 0x1c}}, 0x0) readv(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4f165ef950897abc501db08a12bc8e4f59f1504a8dbc8f48ff7cbeecb13c89fc181d7dc43e5a30baa92e4d7c97443e69f916d0319506d1688653c3c5fafbba6bd1a1dd773cb5ad70a81213754ef5f10756d4cf8546ef94c8fc736124b2f59bba856337f0a998faf6725244e81ebfa8e17a6d6490d5abe6d72ed5680cb5f65ae69d46855e52e4e97f02eb0227e4f141f755c64a93ace3d94bf3e6da17ebbbdb918b8950e2d71021918c2ac6de99a9bc1a4692d8b1355a3daf5b7ca930398ac22972148e6ed9612e77528a26f9ec0d741", @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x14}, 0xc885) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fc0000004c412c60fdb7d3a3127a5bc50f71b84a794b9565830e0377", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00a60000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0005000000080001007063690011000200303030303a30303a31302e300000000008000b0020040000"], 0xfc}, 0x1, 0x0, 0x0, 0x40004000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="c2080000be7481072a6191205c02df558c2ce1be23b7689179006fe73435c684d60b1e42e84739f2493a80386c892680cee7", @ANYRES16=r2, @ANYBLOB="100027bd7000fcdbdf25090000000e0001006e657464657673696d0000000f0002006e65746465052907d831a07673696d300000080003000000000008000900070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000800090000000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090008000000"], 0xa0}, 0x1, 0x0, 0x0, 0x60000000}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x240, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x94}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xf3b}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfffe}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x250}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa828}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffa6b44e}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4000000}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0xcb}, {0x5}}]}, 0x240}, 0x1, 0x0, 0x0, 0x2000a811}, 0x30044010) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = gettid() kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 09:34:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffff7f00000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2198.091203] FAULT_INJECTION: forcing a failure. [ 2198.091203] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.093099] CPU: 1 PID: 14295 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2198.094083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2198.095261] Call Trace: [ 2198.095638] dump_stack+0x107/0x167 [ 2198.096200] should_fail.cold+0x5/0xa [ 2198.096765] ? create_object.isra.0+0x3a/0xa20 [ 2198.097433] should_failslab+0x5/0x20 [ 2198.097974] kmem_cache_alloc+0x5b/0x310 [ 2198.098548] create_object.isra.0+0x3a/0xa20 [ 2198.099176] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2198.099915] kmem_cache_alloc+0x159/0x310 [ 2198.100527] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2198.101311] idr_get_free+0x4b5/0x8f0 [ 2198.101876] idr_alloc_u32+0x170/0x2d0 [ 2198.102435] ? __fprop_inc_percpu_max+0x130/0x130 [ 2198.102938] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2198.103137] ? lock_acquire+0x197/0x470 [ 2198.103158] ? __kernfs_new_node+0xff/0x860 [ 2198.105520] idr_alloc_cyclic+0x102/0x230 [ 2198.106112] ? idr_alloc+0x130/0x130 [ 2198.106645] ? rwlock_bug.part.0+0x90/0x90 [ 2198.107263] __kernfs_new_node+0x117/0x860 [ 2198.107884] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2198.108596] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2198.109263] ? pcpu_alloc+0x12a/0x1240 [ 2198.109895] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2198.110638] kernfs_create_dir_ns+0x9c/0x230 [ 2198.111278] cgroup_mkdir+0x318/0xf50 [ 2198.111846] ? cgroup_destroy_locked+0x710/0x710 [ 2198.112568] kernfs_iop_mkdir+0x14d/0x1e0 [ 2198.113132] vfs_mkdir+0x493/0x700 [ 2198.113633] do_mkdirat+0x150/0x2b0 [ 2198.114175] ? user_path_create+0xf0/0xf0 [ 2198.114808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2198.115600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2198.116325] do_syscall_64+0x33/0x40 [ 2198.116856] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2198.117575] RIP: 0033:0x7f7635ef0b19 [ 2198.118120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2198.120799] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2198.121153] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2198.121915] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2198.121924] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2198.121941] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2198.126182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2198.127213] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:34:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 7: ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000340)={{'\x00', 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x68070, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x53}, 0x2c, {[{@cache_none}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_measure}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x65, 0x32, 0x56, 0x62, 0x33, 0x37, 0x61], 0x2d, [0x36, 0x37, 0x35, 0x64], 0x2d, [0x39, 0x38, 0xcf83e2e38fb51b75, 0x63], 0x2d, [0x65, 0x30, 0x34, 0x66], 0x2d, [0x35, 0x62, 0x30, 0x33, 0x66, 0x38, 0x61, 0x33]}}}, {@dont_appraise}, {@euid_eq}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40140, 0x20, 0xe}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', '-\\/!+,^\\'}) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) pwritev2(r0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000100)="1dcbee420c49eb6f280c43c3048c96b5ecc73a", 0x13}, {0x0}, {&(0x7f00000001c0)='L', 0x1}, {&(0x7f00000000c0)="3ecc1a07aef85a00a6f1f8d88086bf", 0xf}, {0x0}], 0x6, 0x1f, 0x0, 0x1) r4 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0x4000007ffffffc) 09:34:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0xffffffff00000000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x20, 0x3f, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000010100000400000000000000002000000000792ff7250000000000000000000000909daa80d4a433"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4, 0x0, 0x0, 0x8000]}, &(0x7f00000002c0)=0x78) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8000, 0x2, 0xa9, 0x0, 0x9]}, &(0x7f0000000240)=0x54) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000007c0)="3f7623c0fd5713364c", 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) ioprio_set$uid(0x0, r3, 0x4007) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x105000, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x40, @mcast2, 0x9}}, 0x0, 0x0, 0xc, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) 09:34:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 22) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:34:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2198.399263] FAULT_INJECTION: forcing a failure. [ 2198.399263] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.401195] CPU: 1 PID: 14340 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2198.402127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2198.403252] Call Trace: [ 2198.403618] dump_stack+0x107/0x167 [ 2198.404135] should_fail.cold+0x5/0xa [ 2198.404664] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2198.405513] should_failslab+0x5/0x20 [ 2198.406059] kmem_cache_alloc+0x5b/0x310 [ 2198.406675] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2198.407444] idr_get_free+0x4b5/0x8f0 [ 2198.408020] idr_alloc_u32+0x170/0x2d0 [ 2198.408556] ? __fprop_inc_percpu_max+0x130/0x130 [ 2198.409230] ? lock_acquire+0x197/0x470 [ 2198.409774] ? __kernfs_new_node+0xff/0x860 [ 2198.410382] idr_alloc_cyclic+0x102/0x230 [ 2198.410967] ? idr_alloc+0x130/0x130 [ 2198.411488] ? rwlock_bug.part.0+0x90/0x90 [ 2198.412098] __kernfs_new_node+0x117/0x860 [ 2198.412686] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2198.413343] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2198.413995] ? pcpu_alloc+0x12a/0x1240 [ 2198.414556] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2198.415310] kernfs_create_dir_ns+0x9c/0x230 [ 2198.415959] cgroup_mkdir+0x318/0xf50 [ 2198.416501] ? cgroup_destroy_locked+0x710/0x710 [ 2198.417163] kernfs_iop_mkdir+0x14d/0x1e0 [ 2198.417730] vfs_mkdir+0x493/0x700 [ 2198.418230] do_mkdirat+0x150/0x2b0 [ 2198.418731] ? user_path_create+0xf0/0xf0 [ 2198.419319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2198.420070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2198.420808] do_syscall_64+0x33/0x40 [ 2198.421348] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2198.422067] RIP: 0033:0x7f7635ef0b19 [ 2198.422610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2198.425282] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2198.426344] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2198.427328] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2198.428319] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2198.429331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2198.430339] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:34:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:34:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x20, 0x3f, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000010100000400000000000000002000000000792ff7250000000000000000000000909daa80d4a433"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x4, 0x0, 0x0, 0x8000]}, &(0x7f00000002c0)=0x78) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x8000, 0x2, 0xa9, 0x0, 0x9]}, &(0x7f0000000240)=0x54) socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000007c0)="3f7623c0fd5713364c", 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) ioprio_set$uid(0x0, r3, 0x4007) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x105000, 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x40, @mcast2, 0x9}}, 0x0, 0x0, 0xc, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) [ 2198.607132] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.6'. 09:34:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:34:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x2}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 23) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:34:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2198.789393] FAULT_INJECTION: forcing a failure. [ 2198.789393] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.791353] CPU: 1 PID: 14370 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2198.792386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2198.793526] Call Trace: [ 2198.793911] dump_stack+0x107/0x167 [ 2198.794442] should_fail.cold+0x5/0xa [ 2198.794992] ? create_object.isra.0+0x3a/0xa20 [ 2198.795645] should_failslab+0x5/0x20 [ 2198.796205] kmem_cache_alloc+0x5b/0x310 [ 2198.796793] create_object.isra.0+0x3a/0xa20 [ 2198.797425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2198.798151] kmem_cache_alloc+0x159/0x310 [ 2198.798745] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 2198.799545] idr_get_free+0x4b5/0x8f0 [ 2198.800132] idr_alloc_u32+0x170/0x2d0 [ 2198.800685] ? __fprop_inc_percpu_max+0x130/0x130 [ 2198.801422] ? lock_acquire+0x197/0x470 [ 2198.802000] ? __kernfs_new_node+0xff/0x860 [ 2198.802625] idr_alloc_cyclic+0x102/0x230 [ 2198.803224] ? idr_alloc+0x130/0x130 [ 2198.803759] ? rwlock_bug.part.0+0x90/0x90 [ 2198.804402] __kernfs_new_node+0x117/0x860 [ 2198.805024] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2198.805703] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2198.806371] ? pcpu_alloc+0x12a/0x1240 [ 2198.806939] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2198.807690] kernfs_create_dir_ns+0x9c/0x230 [ 2198.808360] cgroup_mkdir+0x318/0xf50 [ 2198.808942] ? cgroup_destroy_locked+0x710/0x710 [ 2198.809792] kernfs_iop_mkdir+0x14d/0x1e0 [ 2198.810517] vfs_mkdir+0x493/0x700 [ 2198.811033] do_mkdirat+0x150/0x2b0 [ 2198.811560] ? user_path_create+0xf0/0xf0 [ 2198.812188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2198.812934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2198.813676] do_syscall_64+0x33/0x40 [ 2198.814200] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2198.814931] RIP: 0033:0x7f7635ef0b19 [ 2198.815466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2198.818101] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2198.819220] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2198.820290] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2198.821286] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2198.822337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2198.823344] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2198.833103] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:34:20 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000001c0)}], 0x2}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/197, 0xc5}], 0x2, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000680)=""/116, 0x74}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/16, 0x10}], 0x4, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/195, 0xc3}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x4, &(0x7f0000002ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xa0}}], 0x4, 0x2101, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x78}, {&(0x7f0000000100)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000002c80)={[], [{@euid_gt={'euid>', r0}}, {@obj_role={'obj_role', 0x3d, '{'}}, {@fowner_lt={'fowner<', r1}}, {@audit}, {@permit_directio}, {@appraise_type}]}) 09:34:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000380)=""/191, 0xbf}], 0x3, &(0x7f0000000480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}, 0x40000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r0, 0x4, 0x5, 0xffffffffd8e76972}) r5 = getpid() perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x2fc, 0x18, 0x10, 0x70bd2a, 0x25dfdbfe, {0xb}, [@generic="584adfc8605afc39b204929efdbd98ca1f05e1722a8c8028d4e4eeeb8d9db1ff00adeb9c9962f2", @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1b8, 0x93, 0x0, 0x1, [@generic="41ac9ed491f93f671fa23691d1e0f49e0947c8e8a24930a2ca8018bfade632b2038aa66a19a8412e1a0bd05123a9acdb739e9799edfd5e756ff4cc06cfb8b50c05266420f7e370a5eb4fc434d733c8a9be7070ca2df0c5b2fdf626ab711ee597a477f0d6080473b1b6e9be3e857b232a7855c79237241681e3286c7b28ca4f58f1f9fd4b1648730b215f8742fd1616f249cfd0f70091bd3ee1a52debe935509681d5e970ea87729a53a9f6503dda68dc2cac919ba6aa070cd8fce4ff3d36b7de13abb6d628d6cad58c662ac8", @generic="8c484b", @typed={0x8, 0x7c, 0x0, 0x0, @pid=r3}, @typed={0x14, 0x59, 0x0, 0x0, @ipv6=@local}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x9}, @generic="aa030642d903958ce15d266412e8a6083c7a35500738cd1704d2976fde0cde8fdf6abe7835e94a675664ed207146f4e37cc98ef6a7ef7e195b34232cc80dfbe02aae4d4d6b944809162bcef48dec12da1e09928b1fed1edce88fc268de17c6aa2863d6ad27924dd99100971ef58632c6c8930f522195b7535fcd754e473ae38097e63c49a920d792d69120636f6a476e7f37244ef704a6a362f5fe6014c76c46", @typed={0x8, 0x67, 0x0, 0x0, @u32=0x80}, @generic="ae2e9ee58f7fc9952dbd59150fafd87de061ba491b"]}, @typed={0x8, 0x6d, 0x0, 0x0, @fd=r4}, @typed={0x7, 0x8, 0x0, 0x0, @str='.\x88\x00'}, @nested={0xf0, 0x53, 0x0, 0x1, [@generic="786d6583be60c54b12f2af9aa609ea66d1ea6a2a2b749846b14c1f32cfccb94ccce8cd575482a4d6ce163e87a181515b88350e0e2150ec050421661742a81250977e0d5fc821d5d8b5263fef9c8088223acc4e072aac39b36b15ba8b6441c250d30b9d0141a698d04fd3018b592ae88bf2c3c781071794a4a817f1f854f061132c0e5c1eceb982033e48070ebe5f554029c1a9ba8f61a07b7a843f3fc20e67a1c60e72b28d0d4676c8284b0652a2482aa388b94ffd6cd17cdfac1f0628e507b0693b1f42607706da8dc9bf05ad7da281c9b0b944234d4801e23300d783ceb81dfe05cd48", @typed={0x8, 0x5f, 0x0, 0x0, @pid=r5}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x885}, 0x50005) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x1c, 0x16, 0x69844ea0a6ddcd11, 0x0, 0x0, {0xa, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FICLONE(r6, 0x40049409, r0) 09:34:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:20 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:34:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 24) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2214.623829] FAULT_INJECTION: forcing a failure. [ 2214.623829] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.625675] CPU: 1 PID: 14399 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2214.626652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2214.627806] Call Trace: [ 2214.628226] dump_stack+0x107/0x167 [ 2214.628786] should_fail.cold+0x5/0xa [ 2214.629321] ? selinux_kernfs_init_security+0x137/0x4c0 [ 2214.630079] should_failslab+0x5/0x20 [ 2214.630623] __kmalloc+0x72/0x390 [ 2214.631117] selinux_kernfs_init_security+0x137/0x4c0 [ 2214.631850] ? selinux_file_mprotect+0x610/0x610 [ 2214.632551] ? find_held_lock+0x2c/0x110 [ 2214.633129] ? __kernfs_new_node+0x2ad/0x860 [ 2214.633754] ? lock_downgrade+0x6d0/0x6d0 [ 2214.634345] ? rwlock_bug.part.0+0x90/0x90 [ 2214.634969] security_kernfs_init_security+0x4e/0xb0 [ 2214.635689] __kernfs_new_node+0x531/0x860 [ 2214.636328] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2214.637002] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2214.637672] ? pcpu_alloc+0x12a/0x1240 [ 2214.638227] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2214.638963] kernfs_create_dir_ns+0x9c/0x230 [ 2214.639591] cgroup_mkdir+0x318/0xf50 [ 2214.640198] ? cgroup_destroy_locked+0x710/0x710 [ 2214.640879] kernfs_iop_mkdir+0x14d/0x1e0 [ 2214.641482] vfs_mkdir+0x493/0x700 [ 2214.641999] do_mkdirat+0x150/0x2b0 [ 2214.642527] ? user_path_create+0xf0/0xf0 [ 2214.643135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2214.643869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2214.644639] do_syscall_64+0x33/0x40 [ 2214.645180] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2214.645900] RIP: 0033:0x7f7635ef0b19 [ 2214.646452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2214.649078] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2214.650154] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2214.651188] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2214.652231] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2214.653233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2214.654246] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2214.654884] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:34:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:34:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:20 executing program 7: syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000002840)=[{0x0}], 0x0, &(0x7f0000002940)=ANY=[@ANYBLOB='don\\_measure,\x00']) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) 09:34:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:34:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f00000003c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284bcf4577984658a0cae96c3de09bf43a6104925ec8e61fceba5ce06df8e8590cee0678dd1ea68a159b05b434cb857e676d8998c55da10404bcbe71f620ee3e918409f0d1c3055bf500007d9718b340cabb70016996e4ec0a081f267cb54e5a027bd8eeba6e3b47f4512317c2b788ea18808d3c94fed0ee7c947e0b95a20fe17", 0xe1, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000580)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) getxattr(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)=@random={'security.', '+-*[\x00'}, &(0x7f00000001c0)=""/22, 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xe542, 0x0) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)=@v1={0x2, "8824cbf37f"}, 0x6, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo\x00') fspick(r3, &(0x7f0000001740)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file1\x00', 0x80000, 0x80) openat(r3, &(0x7f0000000280)='./file0\x00', 0x40000, 0x90) sendfile(r0, r1, 0x0, 0x20d315) 09:34:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 25) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:34:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) [ 2214.921028] FAULT_INJECTION: forcing a failure. [ 2214.921028] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.922772] CPU: 0 PID: 14421 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2214.923732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2214.924892] Call Trace: [ 2214.925269] dump_stack+0x107/0x167 [ 2214.925780] should_fail.cold+0x5/0xa [ 2214.926317] ? create_object.isra.0+0x3a/0xa20 [ 2214.926978] should_failslab+0x5/0x20 [ 2214.927519] kmem_cache_alloc+0x5b/0x310 [ 2214.928096] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2214.928792] create_object.isra.0+0x3a/0xa20 [ 2214.929409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2214.930139] __kmalloc+0x16e/0x390 [ 2214.930662] selinux_kernfs_init_security+0x137/0x4c0 [ 2214.931398] ? selinux_file_mprotect+0x610/0x610 [ 2214.932060] ? find_held_lock+0x2c/0x110 [ 2214.932674] ? __kernfs_new_node+0x2ad/0x860 [ 2214.933285] ? lock_downgrade+0x6d0/0x6d0 [ 2214.933879] ? rwlock_bug.part.0+0x90/0x90 [ 2214.934481] security_kernfs_init_security+0x4e/0xb0 [ 2214.935199] __kernfs_new_node+0x531/0x860 [ 2214.935798] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2214.936492] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2214.937151] ? pcpu_alloc+0x12a/0x1240 [ 2214.937725] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2214.938451] kernfs_create_dir_ns+0x9c/0x230 [ 2214.939074] cgroup_mkdir+0x318/0xf50 [ 2214.939612] ? cgroup_destroy_locked+0x710/0x710 [ 2214.940291] kernfs_iop_mkdir+0x14d/0x1e0 [ 2214.940873] vfs_mkdir+0x493/0x700 [ 2214.941390] do_mkdirat+0x150/0x2b0 [ 2214.941902] ? user_path_create+0xf0/0xf0 [ 2214.942504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2214.943230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2214.943973] do_syscall_64+0x33/0x40 [ 2214.944531] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2214.945256] RIP: 0033:0x7f7635ef0b19 [ 2214.945785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2214.948404] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2214.949477] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2214.950494] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2214.951509] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2214.952570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2214.953575] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:34:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 26) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:34:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:34:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) syz_io_uring_submit(r1, r2, &(0x7f0000000f80)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000f40)={0x11}, r3, 0x1, 0x0, 0xf261d0276db920ec}, 0xcea7) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001040)=ANY=[@ANYBLOB="0100000001000000180000004712a65b2ff3d62594ada7fc979886d2ac4316a982cfc56ea8cd54f1d33bb541f2917c818d8b1b075f109f56edf392cb50cfc20652d8376c2b7b8d6ff62229e9934062e892245b39ffe6a39b7df353c41766735ae4837537c4e0d6cc87166e777649efa2eee1e4ea61cb25e7f29cb5ab34922ed72801e53b916f932a598efd16db29433ee3c7cfe6d3a6c96ccf85f4ab5b5160be050e68e7d108d3f38081e57d6904372e2f138615f31f68f3723984bba5e9a40ced4dbd3b9fa452e9249c73", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmmsg$inet6(r4, &(0x7f0000000f80), 0x0, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/184, 0xb8}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00868c000000b7d922990002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="5000000000040000010000001e000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000440)=""/49, 0x31}], 0x5}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/215, 0xd7}, {&(0x7f0000000a80)=""/249, 0xf9}, {&(0x7f0000000b80)=""/81, 0x51}, {&(0x7f0000000c00)=""/165, 0xa5}, {&(0x7f0000000cc0)=""/62, 0x3e}], 0x7, &(0x7f0000000d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x3, 0x0, &(0x7f0000000e80)={0x77359400}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) syz_io_uring_setup(0x778c, &(0x7f0000000900)={0x0, 0x2a6b, 0x8, 0x5, 0x1ff, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ec0), &(0x7f0000000f00)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/158, 0x9e}, 0x0, 0x2203, 0x0, {0x1}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:34:36 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:34:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:36 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x3c3183) 09:34:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, 0x0, 0x0) 09:34:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x8}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2230.353418] FAULT_INJECTION: forcing a failure. [ 2230.353418] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.355390] CPU: 1 PID: 14436 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2230.356395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.357578] Call Trace: [ 2230.357956] dump_stack+0x107/0x167 [ 2230.358488] should_fail.cold+0x5/0xa [ 2230.359032] should_failslab+0x5/0x20 [ 2230.359576] __kmalloc_track_caller+0x79/0x370 [ 2230.360223] ? security_context_to_sid_core+0xb4/0x890 [ 2230.361027] kmemdup_nul+0x2d/0xa0 [ 2230.361543] security_context_to_sid_core+0xb4/0x890 [ 2230.362277] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2230.363048] ? do_raw_spin_lock+0x121/0x260 [ 2230.363669] ? rwlock_bug.part.0+0x90/0x90 [ 2230.364284] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2230.364978] ? do_raw_spin_unlock+0x4f/0x220 [ 2230.365610] ? _raw_spin_unlock+0x1a/0x30 [ 2230.366200] security_context_to_sid+0x35/0x50 [ 2230.366863] selinux_kernfs_init_security+0x19d/0x4c0 [ 2230.367603] ? selinux_file_mprotect+0x610/0x610 [ 2230.368284] ? find_held_lock+0x2c/0x110 [ 2230.368872] ? __kernfs_new_node+0x2ad/0x860 [ 2230.369498] ? lock_downgrade+0x6d0/0x6d0 [ 2230.370087] ? rwlock_bug.part.0+0x90/0x90 [ 2230.370701] security_kernfs_init_security+0x4e/0xb0 [ 2230.371439] __kernfs_new_node+0x531/0x860 [ 2230.372058] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2230.372774] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2230.373440] ? pcpu_alloc+0x12a/0x1240 [ 2230.373999] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2230.374746] kernfs_create_dir_ns+0x9c/0x230 [ 2230.375376] cgroup_mkdir+0x318/0xf50 [ 2230.375937] ? cgroup_destroy_locked+0x710/0x710 [ 2230.376630] kernfs_iop_mkdir+0x14d/0x1e0 [ 2230.377220] vfs_mkdir+0x493/0x700 [ 2230.377743] do_mkdirat+0x150/0x2b0 [ 2230.378257] ? user_path_create+0xf0/0xf0 [ 2230.378861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.379597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.380364] do_syscall_64+0x33/0x40 [ 2230.380896] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2230.381661] RIP: 0033:0x7f7635ef0b19 [ 2230.382191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.384793] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2230.385867] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2230.386839] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2230.387822] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.388878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2230.389836] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:34:36 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:34:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, 0x0, 0x0) 09:34:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:34:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, 0x0, 0x0) [ 2230.500405] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:34:36 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x4001, 0x20}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x23456}, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}, 0x21, 0x0, '\x00', @c}) syz_io_uring_setup(0x1921, &(0x7f0000000280)={0x0, 0x58dc, 0x0, 0x3, 0x25a, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000300)) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) io_uring_enter(r4, 0x12a1, 0xd5f9, 0x1, &(0x7f00000003c0)={[0xffffffffd58b90b5]}, 0x8) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000380)) 09:34:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 27) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:34:52 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000100)='syz_tun\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000240)=0x90, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x7ff}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0), 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0xfffffffffffffe8c, 0xcd08, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000001c00000000d7d43a33d568", @ANYRES32=r4], 0x38}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xa4582}, 0x18) 09:34:52 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:34:52 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(r1, &(0x7f0000000080)="e3089f02f91a08b8e9", 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="7f454c468040033e63000000000000000200060007000000e60200000000000040000000000000003403000000000000e9000000090038000100accbf9ffa0ef000000600200000005000000000000000000000001000000070000000000000009000000000000000400000000000000ffff00000000000069d9cb794a51d0e9d0aa2a160a9dc63806c8e9f791a8d087b4a47c4c45be7b3e44cc5c8e0f403cc08b05fb910d816ddbf60b55641389c009a201f152d745227b4751d2b4260846640086b6359ede81b2641d11a382a236d35df8f5b761f5ec8ad48fefe33e270cf0d16dfcb8a2fc9827730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b0f1c992f4d77091800"/2034], 0x7e9) sendfile(r0, r2, 0x0, 0x100000001) 09:34:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x9}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:34:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:34:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 1) 09:34:52 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) [ 2246.076181] FAULT_INJECTION: forcing a failure. [ 2246.076181] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.078371] CPU: 1 PID: 14488 Comm: syz-executor.3 Not tainted 5.10.201 #1 [ 2246.079275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.080349] Call Trace: [ 2246.080747] dump_stack+0x107/0x167 [ 2246.081264] should_fail.cold+0x5/0xa [ 2246.081769] ? __iomap_dio_rw+0x1ee/0x1110 [ 2246.082420] should_failslab+0x5/0x20 [ 2246.082945] kmem_cache_alloc_trace+0x55/0x320 [ 2246.083573] __iomap_dio_rw+0x1ee/0x1110 [ 2246.084120] ? lock_release+0x680/0x680 [ 2246.084723] ? __lock_acquire+0xbb1/0x5b00 [ 2246.085330] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2246.085988] ? down_read+0x10f/0x430 [ 2246.086515] ? down_write+0x160/0x160 [ 2246.087056] iomap_dio_rw+0x31/0x90 [ 2246.087575] ext4_file_read_iter+0x2c7/0x4c0 [ 2246.088211] new_sync_read+0x424/0x6f0 [ 2246.088784] ? fsnotify+0xf50/0xf50 [ 2246.089292] ? ksys_lseek+0x1b0/0x1b0 [ 2246.089822] ? _cond_resched+0x12/0x80 [ 2246.090396] ? avc_policy_seqno+0x9/0x70 [ 2246.090969] ? selinux_file_permission+0x92/0x520 [ 2246.091653] ? __fget_files+0x296/0x4c0 [ 2246.092239] vfs_read+0x457/0x580 [ 2246.092775] ksys_read+0x12d/0x260 [ 2246.093296] ? vfs_write+0xa70/0xa70 [ 2246.093836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.094581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.095297] do_syscall_64+0x33/0x40 [ 2246.095841] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.096579] RIP: 0033:0x7fc2958b4b19 [ 2246.097108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.097798] FAULT_INJECTION: forcing a failure. [ 2246.097798] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.099721] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2246.099776] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2246.099785] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2246.099794] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.099802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2246.099811] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 [ 2246.108832] CPU: 0 PID: 14483 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2246.109801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.110952] Call Trace: [ 2246.111340] dump_stack+0x107/0x167 [ 2246.111866] should_fail.cold+0x5/0xa [ 2246.112393] ? create_object.isra.0+0x3a/0xa20 [ 2246.113116] should_failslab+0x5/0x20 [ 2246.113655] kmem_cache_alloc+0x5b/0x310 [ 2246.114239] create_object.isra.0+0x3a/0xa20 [ 2246.114854] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.115565] __kmalloc_track_caller+0x177/0x370 [ 2246.116215] ? security_context_to_sid_core+0xb4/0x890 [ 2246.117004] kmemdup_nul+0x2d/0xa0 [ 2246.117512] security_context_to_sid_core+0xb4/0x890 [ 2246.118227] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2246.118987] ? do_raw_spin_lock+0x121/0x260 [ 2246.119600] ? rwlock_bug.part.0+0x90/0x90 [ 2246.120223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.120917] ? do_raw_spin_unlock+0x4f/0x220 [ 2246.121544] ? _raw_spin_unlock+0x1a/0x30 [ 2246.122130] security_context_to_sid+0x35/0x50 [ 2246.122769] selinux_kernfs_init_security+0x19d/0x4c0 [ 2246.123513] ? selinux_file_mprotect+0x610/0x610 [ 2246.124162] ? find_held_lock+0x2c/0x110 [ 2246.124767] ? __kernfs_new_node+0x2ad/0x860 [ 2246.125382] ? lock_downgrade+0x6d0/0x6d0 [ 2246.125966] ? rwlock_bug.part.0+0x90/0x90 [ 2246.126564] security_kernfs_init_security+0x4e/0xb0 [ 2246.127269] __kernfs_new_node+0x531/0x860 [ 2246.127865] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2246.128559] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2246.129215] ? pcpu_alloc+0x12a/0x1240 [ 2246.129766] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2246.130524] kernfs_create_dir_ns+0x9c/0x230 [ 2246.131192] cgroup_mkdir+0x318/0xf50 [ 2246.131746] ? cgroup_destroy_locked+0x710/0x710 [ 2246.132412] kernfs_iop_mkdir+0x14d/0x1e0 [ 2246.133007] vfs_mkdir+0x493/0x700 [ 2246.133506] do_mkdirat+0x150/0x2b0 [ 2246.134015] ? user_path_create+0xf0/0xf0 [ 2246.134609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.135336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.136065] do_syscall_64+0x33/0x40 [ 2246.136638] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.137357] RIP: 0033:0x7f7635ef0b19 [ 2246.137889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.140424] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2246.141497] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2246.142504] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2246.143528] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.144542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.145488] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:34:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:35:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) 09:35:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:35:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:35:07 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}}, 0xf0}}, 0x0) 09:35:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0xe}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 2) 09:35:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 28) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:35:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = getpid() r2 = getpid() r3 = getpid() r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r4, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/llc/core\x00') ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) syz_open_dev$mouse(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) [ 2261.664074] FAULT_INJECTION: forcing a failure. [ 2261.664074] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.665733] CPU: 1 PID: 14512 Comm: syz-executor.3 Not tainted 5.10.201 #1 [ 2261.666656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.667779] Call Trace: [ 2261.668141] dump_stack+0x107/0x167 [ 2261.668622] should_fail.cold+0x5/0xa [ 2261.669170] ? create_object.isra.0+0x3a/0xa20 [ 2261.669810] should_failslab+0x5/0x20 [ 2261.670305] kmem_cache_alloc+0x5b/0x310 [ 2261.670860] create_object.isra.0+0x3a/0xa20 [ 2261.671461] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2261.672150] kmem_cache_alloc_trace+0x151/0x320 [ 2261.672842] __iomap_dio_rw+0x1ee/0x1110 [ 2261.673405] ? lock_release+0x680/0x680 [ 2261.673964] ? __lock_acquire+0xbb1/0x5b00 [ 2261.674529] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2261.675150] ? down_read+0x10f/0x430 [ 2261.675645] ? down_write+0x160/0x160 [ 2261.676158] iomap_dio_rw+0x31/0x90 [ 2261.676646] ext4_file_read_iter+0x2c7/0x4c0 [ 2261.677262] new_sync_read+0x424/0x6f0 [ 2261.677781] ? fsnotify+0xf50/0xf50 [ 2261.678268] ? ksys_lseek+0x1b0/0x1b0 [ 2261.678794] ? _cond_resched+0x12/0x80 [ 2261.679331] ? avc_policy_seqno+0x9/0x70 [ 2261.679871] ? selinux_file_permission+0x92/0x520 [ 2261.680503] ? __fget_files+0x296/0x4c0 [ 2261.681077] vfs_read+0x457/0x580 [ 2261.681562] ksys_read+0x12d/0x260 [ 2261.682039] ? vfs_write+0xa70/0xa70 [ 2261.682550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.683259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.683949] do_syscall_64+0x33/0x40 [ 2261.684451] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2261.685162] RIP: 0033:0x7fc2958b4b19 [ 2261.685666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.688131] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2261.689175] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2261.690130] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2261.691068] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.692075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2261.693101] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 [ 2261.729120] FAULT_INJECTION: forcing a failure. [ 2261.729120] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.731188] CPU: 1 PID: 14519 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2261.732106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.733241] Call Trace: [ 2261.733610] dump_stack+0x107/0x167 [ 2261.734104] should_fail.cold+0x5/0xa [ 2261.734640] should_failslab+0x5/0x20 [ 2261.735164] __kmalloc_track_caller+0x79/0x370 [ 2261.735796] ? sidtab_sid2str_get+0x17e/0x720 [ 2261.736421] kmemdup+0x23/0x50 [ 2261.736874] sidtab_sid2str_get+0x17e/0x720 [ 2261.737447] sidtab_entry_to_string+0x33/0x110 [ 2261.738065] security_sid_to_context_core+0x33c/0x5d0 [ 2261.738771] selinux_kernfs_init_security+0x239/0x4c0 [ 2261.739467] ? selinux_file_mprotect+0x610/0x610 [ 2261.740132] ? find_held_lock+0x2c/0x110 [ 2261.740747] ? __kernfs_new_node+0x2ad/0x860 [ 2261.741394] ? rwlock_bug.part.0+0x90/0x90 [ 2261.742021] security_kernfs_init_security+0x4e/0xb0 [ 2261.742749] __kernfs_new_node+0x531/0x860 [ 2261.743382] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2261.744082] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2261.744787] ? pcpu_alloc+0x12a/0x1240 [ 2261.745371] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2261.746121] kernfs_create_dir_ns+0x9c/0x230 [ 2261.746756] cgroup_mkdir+0x318/0xf50 [ 2261.747321] ? cgroup_destroy_locked+0x710/0x710 [ 2261.748009] kernfs_iop_mkdir+0x14d/0x1e0 [ 2261.748601] vfs_mkdir+0x493/0x700 [ 2261.749136] do_mkdirat+0x150/0x2b0 [ 2261.749661] ? user_path_create+0xf0/0xf0 [ 2261.750246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.751007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.751750] do_syscall_64+0x33/0x40 [ 2261.752278] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2261.753040] RIP: 0033:0x7f7635ef0b19 [ 2261.753576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.756205] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2261.757327] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2261.758343] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2261.759344] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.760372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2261.761395] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:35:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, 0x0, 0x0) 09:35:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 3) 09:35:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x11}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 1) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, 0x0, 0x0) [ 2261.921289] FAULT_INJECTION: forcing a failure. [ 2261.921289] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.922905] CPU: 0 PID: 14531 Comm: syz-executor.3 Not tainted 5.10.201 #1 [ 2261.923950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.925162] Call Trace: [ 2261.925527] dump_stack+0x107/0x167 [ 2261.926033] should_fail.cold+0x5/0xa [ 2261.926520] ? mempool_alloc+0x148/0x360 [ 2261.927063] ? mempool_free_pages+0x20/0x20 [ 2261.927653] should_failslab+0x5/0x20 [ 2261.928167] kmem_cache_alloc+0x5b/0x310 [ 2261.928741] ? mempool_free_pages+0x20/0x20 [ 2261.929345] mempool_alloc+0x148/0x360 [ 2261.929880] ? mempool_resize+0x7d0/0x7d0 [ 2261.930431] ? lock_downgrade+0x6d0/0x6d0 [ 2261.931004] ? ext4_map_blocks+0x967/0x1940 [ 2261.931605] bio_alloc_bioset+0x36e/0x600 [ 2261.932182] ? bvec_alloc+0x2f0/0x2f0 [ 2261.932778] ? iov_iter_npages+0x1fd/0xa70 [ 2261.933333] ? ext4_iomap_begin+0x1a0/0x700 [ 2261.933930] iomap_dio_bio_actor+0x518/0xef0 [ 2261.934537] iomap_dio_actor+0x36f/0x560 [ 2261.935131] iomap_apply+0x289/0x810 [ 2261.935657] ? iomap_dio_rw+0x90/0x90 [ 2261.936163] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2261.936969] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2261.937720] ? mark_held_locks+0x9e/0xe0 [ 2261.938355] ? filemap_check_errors+0xa5/0x150 [ 2261.938977] __iomap_dio_rw+0x6cd/0x1110 [ 2261.939530] ? iomap_dio_rw+0x90/0x90 [ 2261.940058] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2261.940716] ? down_read+0x10f/0x430 [ 2261.941216] ? down_write+0x160/0x160 [ 2261.941722] iomap_dio_rw+0x31/0x90 [ 2261.942207] ext4_file_read_iter+0x2c7/0x4c0 [ 2261.942842] new_sync_read+0x424/0x6f0 [ 2261.943398] ? fsnotify+0xf50/0xf50 [ 2261.943923] ? ksys_lseek+0x1b0/0x1b0 [ 2261.944474] ? _cond_resched+0x12/0x80 [ 2261.945039] ? avc_policy_seqno+0x9/0x70 [ 2261.945610] ? selinux_file_permission+0x92/0x520 [ 2261.946314] ? __fget_files+0x296/0x4c0 [ 2261.946845] vfs_read+0x457/0x580 [ 2261.947381] ksys_read+0x12d/0x260 [ 2261.947862] ? vfs_write+0xa70/0xa70 [ 2261.948358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2261.949058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2261.949728] do_syscall_64+0x33/0x40 [ 2261.950242] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2261.950923] RIP: 0033:0x7fc2958b4b19 [ 2261.951436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.953934] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2261.954973] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2261.955952] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2261.956920] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2261.957896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2261.958880] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 09:35:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 29) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2262.014747] FAULT_INJECTION: forcing a failure. [ 2262.014747] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.016851] CPU: 0 PID: 14537 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2262.017852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.019043] Call Trace: [ 2262.019419] dump_stack+0x107/0x167 [ 2262.019943] should_fail.cold+0x5/0xa [ 2262.020495] should_failslab+0x5/0x20 [ 2262.021074] kmem_cache_alloc_bulk+0x4b/0x320 [ 2262.021717] io_submit_sqes+0x6f76/0x85c0 [ 2262.022309] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2262.023018] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2262.023739] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2262.024429] ? lock_downgrade+0x6d0/0x6d0 [ 2262.025049] ? find_held_lock+0x2c/0x110 [ 2262.025620] ? io_submit_sqes+0x85c0/0x85c0 [ 2262.026241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2262.026917] ? wait_for_completion_io+0x270/0x270 [ 2262.027606] ? rcu_read_lock_any_held+0x75/0xa0 [ 2262.028266] ? vfs_write+0x354/0xa70 [ 2262.028822] ? fput_many+0x2f/0x1a0 [ 2262.029355] ? ksys_write+0x1a9/0x260 [ 2262.029890] ? __ia32_sys_read+0xb0/0xb0 [ 2262.030466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.031203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.031944] do_syscall_64+0x33/0x40 [ 2262.032486] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2262.033252] RIP: 0033:0x7f4f84a17b19 [ 2262.033778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.036382] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2262.037494] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2262.038490] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2262.039486] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2262.040487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2262.041513] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 09:35:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, 0x0, 0x0) [ 2262.101210] FAULT_INJECTION: forcing a failure. [ 2262.101210] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.103185] CPU: 1 PID: 14541 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2262.104153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.105330] Call Trace: [ 2262.105706] dump_stack+0x107/0x167 [ 2262.106225] should_fail.cold+0x5/0xa [ 2262.106760] ? create_object.isra.0+0x3a/0xa20 [ 2262.107396] should_failslab+0x5/0x20 [ 2262.107924] kmem_cache_alloc+0x5b/0x310 [ 2262.108496] ? sidtab_sid2str_get+0x65/0x720 [ 2262.109133] create_object.isra.0+0x3a/0xa20 [ 2262.109757] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2262.110473] __kmalloc_track_caller+0x177/0x370 [ 2262.111121] ? sidtab_sid2str_get+0x17e/0x720 [ 2262.111744] kmemdup+0x23/0x50 [ 2262.112196] sidtab_sid2str_get+0x17e/0x720 [ 2262.112839] sidtab_entry_to_string+0x33/0x110 [ 2262.113478] security_sid_to_context_core+0x33c/0x5d0 [ 2262.114204] selinux_kernfs_init_security+0x239/0x4c0 [ 2262.114919] ? selinux_file_mprotect+0x610/0x610 [ 2262.115586] ? find_held_lock+0x2c/0x110 [ 2262.116164] ? __kernfs_new_node+0x2ad/0x860 [ 2262.116793] ? rwlock_bug.part.0+0x90/0x90 [ 2262.117398] security_kernfs_init_security+0x4e/0xb0 [ 2262.118108] __kernfs_new_node+0x531/0x860 [ 2262.118464] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2262.118717] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2262.120596] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2262.121314] ? pcpu_alloc+0x12a/0x1240 [ 2262.121862] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2262.122625] kernfs_create_dir_ns+0x9c/0x230 [ 2262.123243] cgroup_mkdir+0x318/0xf50 [ 2262.123780] ? cgroup_destroy_locked+0x710/0x710 [ 2262.124436] kernfs_iop_mkdir+0x14d/0x1e0 [ 2262.125026] vfs_mkdir+0x493/0x700 [ 2262.125541] do_mkdirat+0x150/0x2b0 [ 2262.126287] ? user_path_create+0xf0/0xf0 [ 2262.126855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2262.127583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2262.128305] do_syscall_64+0x33/0x40 [ 2262.128868] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2262.129587] RIP: 0033:0x7f7635ef0b19 [ 2262.130108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.132635] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2262.133704] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2262.134685] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2262.135660] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2262.136644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2262.137687] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2277.763939] FAULT_INJECTION: forcing a failure. [ 2277.763939] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.765573] CPU: 1 PID: 14550 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2277.766520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.767655] Call Trace: [ 2277.768173] dump_stack+0x107/0x167 09:35:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x30}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:23 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:23 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 09:35:23 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x152) dup(r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40400c0}, 0x24000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x20000004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) 09:35:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 4) 09:35:23 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 30) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:35:23 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 1) [ 2277.768749] should_fail.cold+0x5/0xa [ 2277.769373] ? create_object.isra.0+0x3a/0xa20 [ 2277.770003] should_failslab+0x5/0x20 [ 2277.770532] kmem_cache_alloc+0x5b/0x310 [ 2277.771093] create_object.isra.0+0x3a/0xa20 [ 2277.771700] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2277.772399] kmem_cache_alloc_bulk+0x168/0x320 [ 2277.773054] io_submit_sqes+0x6f76/0x85c0 [ 2277.773627] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2277.774307] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2277.775005] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2277.775665] ? lock_downgrade+0x6d0/0x6d0 [ 2277.776237] ? find_held_lock+0x2c/0x110 [ 2277.776801] ? io_submit_sqes+0x85c0/0x85c0 [ 2277.777411] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2277.778081] ? wait_for_completion_io+0x270/0x270 [ 2277.778726] ? rcu_read_lock_any_held+0x75/0xa0 [ 2277.779368] ? vfs_write+0x354/0xa70 [ 2277.779909] ? fput_many+0x2f/0x1a0 [ 2277.780431] ? ksys_write+0x1a9/0x260 [ 2277.781018] ? __ia32_sys_read+0xb0/0xb0 [ 2277.781597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2277.782309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2277.783047] do_syscall_64+0x33/0x40 [ 2277.783564] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2277.784283] RIP: 0033:0x7f4f84a17b19 [ 2277.784793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.787345] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2277.788363] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2277.789494] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2277.790307] FAULT_INJECTION: forcing a failure. [ 2277.790307] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.790528] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2277.790537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.790546] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2277.795764] CPU: 0 PID: 14552 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2277.796781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.797986] Call Trace: [ 2277.798372] dump_stack+0x107/0x167 [ 2277.798887] should_fail.cold+0x5/0xa [ 2277.799438] should_failslab+0x5/0x20 [ 2277.799983] kmem_cache_alloc_bulk+0x4b/0x320 [ 2277.800617] io_submit_sqes+0x6f76/0x85c0 [ 2277.801262] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2277.801968] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2277.802680] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2277.803374] ? lock_downgrade+0x6d0/0x6d0 [ 2277.803998] ? find_held_lock+0x2c/0x110 [ 2277.804571] ? io_submit_sqes+0x85c0/0x85c0 [ 2277.805250] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2277.805939] ? wait_for_completion_io+0x270/0x270 [ 2277.806634] ? rcu_read_lock_any_held+0x75/0xa0 [ 2277.807329] ? vfs_write+0x354/0xa70 [ 2277.807892] ? fput_many+0x2f/0x1a0 [ 2277.808425] ? ksys_write+0x1a9/0x260 [ 2277.809006] ? __ia32_sys_read+0xb0/0xb0 [ 2277.809591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2277.810330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2277.811067] do_syscall_64+0x33/0x40 [ 2277.811595] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2277.812317] RIP: 0033:0x7f0fb66d2b19 [ 2277.812850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.815571] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2277.816659] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2277.817686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2277.818720] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2277.819771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.820769] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2277.837730] FAULT_INJECTION: forcing a failure. [ 2277.837730] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.839473] CPU: 0 PID: 14562 Comm: syz-executor.3 Not tainted 5.10.201 #1 [ 2277.840450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.841663] Call Trace: [ 2277.842069] dump_stack+0x107/0x167 [ 2277.842595] should_fail.cold+0x5/0xa [ 2277.843173] ? create_object.isra.0+0x3a/0xa20 [ 2277.843827] should_failslab+0x5/0x20 [ 2277.844371] kmem_cache_alloc+0x5b/0x310 [ 2277.844986] create_object.isra.0+0x3a/0xa20 [ 2277.845612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2277.846373] kmem_cache_alloc+0x159/0x310 [ 2277.847018] ? mempool_free_pages+0x20/0x20 [ 2277.847642] mempool_alloc+0x148/0x360 [ 2277.848200] ? mempool_resize+0x7d0/0x7d0 [ 2277.848811] ? lock_downgrade+0x6d0/0x6d0 [ 2277.849434] ? ext4_map_blocks+0x967/0x1940 [ 2277.850099] bio_alloc_bioset+0x36e/0x600 [ 2277.850699] ? bvec_alloc+0x2f0/0x2f0 [ 2277.851180] FAULT_INJECTION: forcing a failure. [ 2277.851180] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.851243] ? iov_iter_npages+0x1fd/0xa70 [ 2277.853523] ? ext4_iomap_begin+0x1a0/0x700 [ 2277.854137] iomap_dio_bio_actor+0x518/0xef0 [ 2277.854776] iomap_dio_actor+0x36f/0x560 [ 2277.855366] iomap_apply+0x289/0x810 [ 2277.855925] ? iomap_dio_rw+0x90/0x90 [ 2277.856472] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2277.857339] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2277.858090] ? mark_held_locks+0x9e/0xe0 [ 2277.858684] ? filemap_check_errors+0xa5/0x150 [ 2277.859335] __iomap_dio_rw+0x6cd/0x1110 [ 2277.859914] ? iomap_dio_rw+0x90/0x90 [ 2277.860473] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2277.861167] ? down_read+0x10f/0x430 [ 2277.861703] ? down_write+0x160/0x160 [ 2277.862258] iomap_dio_rw+0x31/0x90 [ 2277.862792] ext4_file_read_iter+0x2c7/0x4c0 [ 2277.863433] new_sync_read+0x424/0x6f0 [ 2277.864022] ? fsnotify+0xf50/0xf50 [ 2277.864559] ? ksys_lseek+0x1b0/0x1b0 [ 2277.865121] ? _cond_resched+0x12/0x80 [ 2277.865701] ? avc_policy_seqno+0x9/0x70 [ 2277.866304] ? selinux_file_permission+0x92/0x520 [ 2277.867028] ? __fget_files+0x296/0x4c0 [ 2277.867619] vfs_read+0x457/0x580 [ 2277.868109] ksys_read+0x12d/0x260 [ 2277.868625] ? vfs_write+0xa70/0xa70 [ 2277.869198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2277.869955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2277.870706] do_syscall_64+0x33/0x40 [ 2277.871276] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2277.872112] RIP: 0033:0x7fc2958b4b19 [ 2277.872641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.875430] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2277.876526] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2277.877618] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2277.878668] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.879698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.880723] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 [ 2277.881802] CPU: 1 PID: 14559 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2277.882875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.884101] Call Trace: [ 2277.884296] FAULT_INJECTION: forcing a failure. [ 2277.884296] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.884497] dump_stack+0x107/0x167 [ 2277.884519] should_fail.cold+0x5/0xa [ 2277.887179] should_failslab+0x5/0x20 [ 2277.887697] __kmalloc_track_caller+0x79/0x370 [ 2277.888377] ? kstrdup_const+0x53/0x80 [ 2277.888955] kstrdup+0x36/0x70 [ 2277.889416] kstrdup_const+0x53/0x80 [ 2277.889949] __kernfs_new_node+0x9d/0x860 [ 2277.890552] ? lock_chain_count+0x20/0x20 [ 2277.891191] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2277.891877] ? __lock_acquire+0x1657/0x5b00 [ 2277.892537] ? perf_trace_lock+0xac/0x490 [ 2277.893137] ? __lockdep_reset_lock+0x180/0x180 [ 2277.893793] kernfs_new_node+0x93/0x120 [ 2277.894345] __kernfs_create_file+0x51/0x350 [ 2277.894990] cgroup_addrm_files+0x3c8/0x9b0 [ 2277.895595] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2277.896353] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2277.897034] ? cgroup_file_name+0x210/0x210 [ 2277.897653] ? cgroup_propagate_control+0x3b9/0x520 [ 2277.898364] css_populate_dir+0x304/0x460 [ 2277.898971] cgroup_mkdir+0xa13/0xf50 [ 2277.899504] ? cgroup_destroy_locked+0x710/0x710 [ 2277.900193] kernfs_iop_mkdir+0x14d/0x1e0 [ 2277.900785] vfs_mkdir+0x493/0x700 [ 2277.901321] do_mkdirat+0x150/0x2b0 [ 2277.901866] ? user_path_create+0xf0/0xf0 [ 2277.902460] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2277.903221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2277.903941] do_syscall_64+0x33/0x40 [ 2277.904460] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2277.905195] RIP: 0033:0x7f7635ef0b19 [ 2277.905717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.908343] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2277.909409] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2277.910444] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2277.911468] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.912446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2277.913443] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2277.914466] CPU: 0 PID: 14560 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2277.914884] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2277.915512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.915518] Call Trace: [ 2277.915541] dump_stack+0x107/0x167 [ 2277.915559] should_fail.cold+0x5/0xa [ 2277.919100] ? __iomap_dio_rw+0x1ee/0x1110 [ 2277.919686] should_failslab+0x5/0x20 [ 2277.920231] kmem_cache_alloc_trace+0x55/0x320 [ 2277.920896] __iomap_dio_rw+0x1ee/0x1110 [ 2277.921463] ? lock_release+0x680/0x680 [ 2277.922020] ? SOFTIRQ_verbose+0x10/0x10 [ 2277.922609] ? __lock_acquire+0xbb1/0x5b00 [ 2277.923212] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2277.923853] ? down_read+0x10f/0x430 [ 2277.924368] ? down_write+0x160/0x160 [ 2277.924940] iomap_dio_rw+0x31/0x90 [ 2277.925476] ext4_file_read_iter+0x2c7/0x4c0 [ 2277.926137] new_sync_read+0x424/0x6f0 [ 2277.926691] ? fsnotify+0xf50/0xf50 [ 2277.927199] ? ksys_lseek+0x1b0/0x1b0 [ 2277.927732] ? _cond_resched+0x12/0x80 [ 2277.928317] ? avc_policy_seqno+0x9/0x70 [ 2277.928873] ? selinux_file_permission+0x92/0x520 [ 2277.929569] ? __fget_files+0x296/0x4c0 [ 2277.930135] vfs_read+0x457/0x580 [ 2277.930617] ksys_read+0x12d/0x260 [ 2277.931088] ? vfs_write+0xa70/0xa70 [ 2277.931581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2277.932289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2277.933073] do_syscall_64+0x33/0x40 [ 2277.933560] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2277.934293] RIP: 0033:0x7f35a254fb19 [ 2277.934799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.937339] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2277.938369] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2277.939330] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2277.940312] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.941296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.942256] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 09:35:23 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x40, 0x1f, 0x5, 0x8, 0x0, 0xffe00000000, 0x14, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x7}, 0x1204, 0xc898, 0x3ff, 0x6, 0x6, 0xffff0c39, 0x5, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r1, 0xf) restart_syscall() lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB="6c6f6f73652c76657273696f6e3d3970323030302e752c64666c746769643da43b65785a38893dbe75697bf8a80efac11fba43dec3229fea067d6fdb6d5120d81aa1caa107b999a7a1d44fd18060926b61a9395f0723fbf006b454f6da808253592cd9372b445e577fc60a4222a780d464e1c6b1d2d2", @ANYBLOB=',version=9p2000,fowner=', @ANYBLOB]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@random={'osx.', '&\xb8!,,\x00'}, &(0x7f0000000140)=""/66, 0x42) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 2277.968362] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2277.987243] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:35:23 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x8, 0x0, 0x0, 0x0, 0x74c9ccf2, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000140)) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="f968bef231543f3aae8d5805fee89a290c9416bf21ea393b261d8e20bc43fe1f132c7f66fbb09dbd84937a8d74119c3350a3b31566265bfa030eb7048bec41e37400e4d557b6c4f81356dd6d5be8cb5f487fd797bae0a308d91657733c7601bb79548b7242c518a940e0ec82284c976ca7324903e044073f4ef636c4671eedc1bfcee9986a10150d658c8eb39845e1dc26ca4dc28a6c98f622", 0x99, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) unshare(0x20000000) add_key(&(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0xfec5, 0xfffffffffffffff8) add_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="5657cf0fe7de1649df31d831a853974116626b843547ea459616b8d72277f7bb0c6fe2df1efb82a0e0422645212f8471b6579f6668b085964f74f11425c0b0b6b16591c8453fd0218e3e41d7f6124d4255abb6fe3e140acab03de3bdc81cf7aaf7fd0ac673257966cdfc80fef7a4f5af8c", 0x71, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000440)='\x00') 09:35:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x31}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 5) 09:35:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, r0, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 09:35:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 2) [ 2278.200435] FAULT_INJECTION: forcing a failure. [ 2278.200435] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.202027] CPU: 0 PID: 14582 Comm: syz-executor.3 Not tainted 5.10.201 #1 [ 2278.202979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.204126] Call Trace: [ 2278.204505] dump_stack+0x107/0x167 [ 2278.205049] should_fail.cold+0x5/0xa [ 2278.205584] ? mempool_alloc+0x148/0x360 [ 2278.206131] ? mempool_free_pages+0x20/0x20 [ 2278.206723] should_failslab+0x5/0x20 [ 2278.207241] kmem_cache_alloc+0x5b/0x310 [ 2278.207828] ? mempool_free_pages+0x20/0x20 [ 2278.208417] mempool_alloc+0x148/0x360 [ 2278.209014] ? mempool_resize+0x7d0/0x7d0 [ 2278.209588] ? mempool_resize+0x7d0/0x7d0 [ 2278.210154] ? lock_downgrade+0x6d0/0x6d0 [ 2278.210753] ? ext4_map_blocks+0x967/0x1940 [ 2278.211367] bvec_alloc+0xd8/0x2f0 [ 2278.211921] bio_alloc_bioset+0x40a/0x600 [ 2278.212521] ? bvec_alloc+0x2f0/0x2f0 [ 2278.213056] ? iov_iter_npages+0x1fd/0xa70 [ 2278.213625] ? ext4_iomap_begin+0x1a0/0x700 [ 2278.214220] iomap_dio_bio_actor+0x518/0xef0 [ 2278.214863] iomap_dio_actor+0x36f/0x560 [ 2278.215422] iomap_apply+0x289/0x810 [ 2278.215969] ? iomap_dio_rw+0x90/0x90 [ 2278.216482] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2278.217312] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2278.218048] ? mark_held_locks+0x9e/0xe0 [ 2278.218654] ? filemap_check_errors+0xa5/0x150 [ 2278.219311] __iomap_dio_rw+0x6cd/0x1110 [ 2278.219927] ? iomap_dio_rw+0x90/0x90 [ 2278.220462] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2278.221122] ? down_read+0x10f/0x430 [ 2278.221675] ? down_write+0x160/0x160 [ 2278.222188] iomap_dio_rw+0x31/0x90 [ 2278.222746] ext4_file_read_iter+0x2c7/0x4c0 [ 2278.223358] new_sync_read+0x424/0x6f0 [ 2278.223896] ? fsnotify+0xf50/0xf50 [ 2278.224393] ? ksys_lseek+0x1b0/0x1b0 [ 2278.224982] ? _cond_resched+0x12/0x80 [ 2278.225518] ? avc_policy_seqno+0x9/0x70 [ 2278.226115] ? selinux_file_permission+0x92/0x520 [ 2278.226789] ? __fget_files+0x296/0x4c0 [ 2278.227345] vfs_read+0x457/0x580 [ 2278.227829] ksys_read+0x12d/0x260 [ 2278.228309] ? vfs_write+0xa70/0xa70 [ 2278.228855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.229602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.230343] do_syscall_64+0x33/0x40 [ 2278.230846] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.231584] RIP: 0033:0x7fc2958b4b19 [ 2278.232092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.234677] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2278.235757] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2278.236738] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2278.237815] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.238825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.239827] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 09:35:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 31) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2278.275592] FAULT_INJECTION: forcing a failure. [ 2278.275592] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.277322] CPU: 1 PID: 14588 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2278.278286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.279464] Call Trace: [ 2278.279845] dump_stack+0x107/0x167 [ 2278.280351] should_fail.cold+0x5/0xa [ 2278.280935] ? create_object.isra.0+0x3a/0xa20 [ 2278.281581] should_failslab+0x5/0x20 [ 2278.282100] kmem_cache_alloc+0x5b/0x310 [ 2278.282669] create_object.isra.0+0x3a/0xa20 [ 2278.283277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2278.283976] kmem_cache_alloc_trace+0x151/0x320 09:35:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107142, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@context={'context', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '{{$:.^'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '(!,O\x90Jq\xf7y\xef\xd0\x12\xbe\xd4\x88\x0eOt`H\x03\xcb\xd9\x00\x84\x88^o\xc4?\x92;Vsf\x8c>\x05$\x9c\xf1\xd0\xdc\xc3|o\x92\xeb\x00\xfd\x01\x82\x06\xeb\xfd\x86Y\xfb\xd7\xb4\xd9\x19\f\xc5\xbby\xf5\xa8y\xd9\xd9\xd5\xb4\xad^\xa24\x1b$\xd0\x83\r\x8f\xa9\xa4B\f\x97\xf7\x140x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 3) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x300}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2278.285155] ? __fget_files+0x296/0x4c0 [ 2278.285180] vfs_read+0x457/0x580 [ 2278.285201] ksys_read+0x12d/0x260 [ 2278.285216] ? vfs_write+0xa70/0xa70 [ 2278.285235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.285248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.285269] do_syscall_64+0x33/0x40 [ 2278.285286] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.285297] RIP: 0033:0x7f35a254fb19 [ 2278.285314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.285323] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2278.285340] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2278.285349] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2278.285357] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 09:35:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 32) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:35:24 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 3) [ 2278.285366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.285375] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 09:35:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x290, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800b800", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf25090000000c00990007000000360000000800090005ac0f00110007006545efea647c86b1283997a1590000000a000600ffffffffffff0000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000200)={0x1000, 0x280000000, 0x7}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) sendmsg$nl_generic(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000a169a06a9927d9976f7eb84c0b9e800000428bd7000fedbdf251900000008002200fd0f0d0b04ad217a06503af75d83d78bee3a0ef2e8386d0be0b2ead205446320457d728527087ba300"/89, @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00'}) close(r3) [ 2278.338101] FAULT_INJECTION: forcing a failure. [ 2278.338101] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.338120] CPU: 0 PID: 14592 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2278.338129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.338134] Call Trace: [ 2278.338151] dump_stack+0x107/0x167 [ 2278.338170] should_fail.cold+0x5/0xa [ 2278.338192] should_failslab+0x5/0x20 [ 2278.338207] __kmalloc_track_caller+0x79/0x370 [ 2278.338221] ? kstrdup_const+0x53/0x80 [ 2278.338243] kstrdup+0x36/0x70 [ 2278.338259] kstrdup_const+0x53/0x80 [ 2278.338275] __kernfs_new_node+0x9d/0x860 [ 2278.338290] ? lock_chain_count+0x20/0x20 [ 2278.338309] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2278.338324] ? __lock_acquire+0x1657/0x5b00 [ 2278.338342] ? perf_trace_lock+0xac/0x490 [ 2278.338362] ? __lockdep_reset_lock+0x180/0x180 [ 2278.338388] kernfs_new_node+0x93/0x120 [ 2278.338411] __kernfs_create_file+0x51/0x350 [ 2278.338431] cgroup_addrm_files+0x3c8/0x9b0 [ 2278.338458] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2278.338480] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2278.338494] ? cgroup_file_name+0x210/0x210 [ 2278.338510] ? cgroup_propagate_control+0x3b9/0x520 [ 2278.338535] css_populate_dir+0x304/0x460 [ 2278.338556] cgroup_mkdir+0xa13/0xf50 [ 2278.338576] ? cgroup_destroy_locked+0x710/0x710 [ 2278.338594] kernfs_iop_mkdir+0x14d/0x1e0 [ 2278.338611] vfs_mkdir+0x493/0x700 [ 2278.338629] do_mkdirat+0x150/0x2b0 [ 2278.338646] ? user_path_create+0xf0/0xf0 [ 2278.338665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.338680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.338701] do_syscall_64+0x33/0x40 [ 2278.338717] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.338727] RIP: 0033:0x7f7635ef0b19 [ 2278.338742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.338750] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2278.338767] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2278.338776] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2278.338784] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.338791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.338798] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2278.339083] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2278.356833] SELinux: duplicate or incompatible mount options [ 2278.375649] FAULT_INJECTION: forcing a failure. [ 2278.375649] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.375666] CPU: 0 PID: 14597 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2278.375673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.375678] Call Trace: [ 2278.375694] dump_stack+0x107/0x167 [ 2278.375712] should_fail.cold+0x5/0xa [ 2278.375727] ? create_object.isra.0+0x3a/0xa20 [ 2278.375743] should_failslab+0x5/0x20 [ 2278.375756] kmem_cache_alloc+0x5b/0x310 [ 2278.375770] ? mark_held_locks+0x9e/0xe0 [ 2278.375786] create_object.isra.0+0x3a/0xa20 [ 2278.375800] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2278.375818] kmem_cache_alloc_bulk+0x168/0x320 [ 2278.375837] io_submit_sqes+0x6f76/0x85c0 [ 2278.375854] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2278.375886] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2278.375899] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2278.375916] ? lock_downgrade+0x6d0/0x6d0 [ 2278.375927] ? find_held_lock+0x2c/0x110 [ 2278.375945] ? io_submit_sqes+0x85c0/0x85c0 [ 2278.375965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2278.375982] ? wait_for_completion_io+0x270/0x270 [ 2278.375998] ? rcu_read_lock_any_held+0x75/0xa0 [ 2278.376009] ? vfs_write+0x354/0xa70 [ 2278.376026] ? fput_many+0x2f/0x1a0 [ 2278.376039] ? ksys_write+0x1a9/0x260 [ 2278.376053] ? __ia32_sys_read+0xb0/0xb0 [ 2278.376070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.376082] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.376100] do_syscall_64+0x33/0x40 [ 2278.376115] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.376124] RIP: 0033:0x7f4f84a17b19 [ 2278.376137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.376144] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2278.376159] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2278.376167] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2278.376175] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2278.376183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.376191] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2278.384288] SELinux: duplicate or incompatible mount options [ 2278.457192] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2278.513243] FAULT_INJECTION: forcing a failure. [ 2278.513243] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2278.513261] CPU: 0 PID: 14606 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2278.513269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.513274] Call Trace: [ 2278.513291] dump_stack+0x107/0x167 [ 2278.513309] should_fail.cold+0x5/0xa [ 2278.513328] __alloc_pages_nodemask+0x182/0x600 [ 2278.513345] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2278.513375] alloc_pages_current+0x187/0x280 [ 2278.513393] allocate_slab+0x26f/0x380 [ 2278.513415] ___slab_alloc+0x470/0x700 [ 2278.513435] ? io_submit_sqes+0x6f76/0x85c0 [ 2278.513453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.513467] ? trace_hardirqs_on+0x5b/0x180 [ 2278.513488] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2278.513500] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2278.513518] io_submit_sqes+0x6f76/0x85c0 [ 2278.513535] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2278.513568] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2278.513581] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2278.513598] ? lock_downgrade+0x6d0/0x6d0 [ 2278.513609] ? find_held_lock+0x2c/0x110 [ 2278.513627] ? io_submit_sqes+0x85c0/0x85c0 [ 2278.513648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2278.513665] ? wait_for_completion_io+0x270/0x270 [ 2278.513681] ? rcu_read_lock_any_held+0x75/0xa0 [ 2278.513694] ? vfs_write+0x354/0xa70 [ 2278.513710] ? fput_many+0x2f/0x1a0 [ 2278.513725] ? ksys_write+0x1a9/0x260 [ 2278.513739] ? __ia32_sys_read+0xb0/0xb0 [ 2278.513756] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.513768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.513787] do_syscall_64+0x33/0x40 [ 2278.513802] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.513812] RIP: 0033:0x7f0fb66d2b19 [ 2278.513825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.513833] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2278.513848] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2278.513857] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2278.513865] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2278.513873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.513881] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2278.514770] FAULT_INJECTION: forcing a failure. [ 2278.514770] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.572714] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2278.601464] FAULT_INJECTION: forcing a failure. [ 2278.601464] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.601938] CPU: 1 PID: 14604 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2278.627862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.628802] Call Trace: [ 2278.629138] dump_stack+0x107/0x167 [ 2278.629539] should_fail.cold+0x5/0xa [ 2278.629958] ? __kernfs_new_node+0xd4/0x860 [ 2278.630424] should_failslab+0x5/0x20 [ 2278.630833] kmem_cache_alloc+0x5b/0x310 [ 2278.631302] __kernfs_new_node+0xd4/0x860 [ 2278.631765] ? lock_chain_count+0x20/0x20 [ 2278.632215] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2278.632769] ? __lock_acquire+0x1657/0x5b00 [ 2278.633391] ? perf_trace_lock+0xac/0x490 [ 2278.633959] ? __lockdep_reset_lock+0x180/0x180 [ 2278.634612] kernfs_new_node+0x93/0x120 [ 2278.635158] __kernfs_create_file+0x51/0x350 [ 2278.635784] cgroup_addrm_files+0x3c8/0x9b0 [ 2278.636406] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2278.637166] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2278.637806] ? cgroup_file_name+0x210/0x210 [ 2278.638429] ? cgroup_propagate_control+0x3b9/0x520 [ 2278.639155] css_populate_dir+0x304/0x460 [ 2278.639778] cgroup_mkdir+0xa13/0xf50 [ 2278.640334] ? cgroup_destroy_locked+0x710/0x710 [ 2278.641094] kernfs_iop_mkdir+0x14d/0x1e0 [ 2278.641704] vfs_mkdir+0x493/0x700 [ 2278.642223] do_mkdirat+0x150/0x2b0 [ 2278.642751] ? user_path_create+0xf0/0xf0 [ 2278.643348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.644094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.644802] do_syscall_64+0x33/0x40 [ 2278.645352] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.646071] RIP: 0033:0x7f7635ef0b19 [ 2278.646630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.649308] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2278.650409] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2278.651439] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2278.652459] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.653501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.654481] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2278.655510] CPU: 0 PID: 14612 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2278.655801] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2278.656550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.656556] Call Trace: [ 2278.656579] dump_stack+0x107/0x167 [ 2278.656599] should_fail.cold+0x5/0xa [ 2278.660128] ? mempool_alloc+0x148/0x360 [ 2278.660711] ? mempool_free_pages+0x20/0x20 [ 2278.661327] should_failslab+0x5/0x20 [ 2278.661865] kmem_cache_alloc+0x5b/0x310 [ 2278.662433] ? mempool_free_pages+0x20/0x20 [ 2278.663067] mempool_alloc+0x148/0x360 [ 2278.663592] ? mempool_resize+0x7d0/0x7d0 [ 2278.664169] ? lock_downgrade+0x6d0/0x6d0 [ 2278.664770] ? ext4_map_blocks+0x967/0x1940 [ 2278.665408] bio_alloc_bioset+0x36e/0x600 [ 2278.666004] ? bvec_alloc+0x2f0/0x2f0 [ 2278.666525] ? iov_iter_npages+0x1fd/0xa70 [ 2278.667100] ? ext4_iomap_begin+0x1a0/0x700 [ 2278.667705] iomap_dio_bio_actor+0x518/0xef0 [ 2278.668325] iomap_dio_actor+0x36f/0x560 [ 2278.668918] iomap_apply+0x289/0x810 [ 2278.669463] ? iomap_dio_rw+0x90/0x90 [ 2278.670048] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2278.670068] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2278.670080] ? mark_held_locks+0x9e/0xe0 [ 2278.670102] ? filemap_check_errors+0xa5/0x150 [ 2278.670120] __iomap_dio_rw+0x6cd/0x1110 [ 2278.670131] ? iomap_dio_rw+0x90/0x90 [ 2278.670158] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2278.670180] ? down_read+0x10f/0x430 [ 2278.670193] ? down_write+0x160/0x160 [ 2278.670212] iomap_dio_rw+0x31/0x90 [ 2278.670227] ext4_file_read_iter+0x2c7/0x4c0 [ 2278.670245] new_sync_read+0x424/0x6f0 [ 2278.670258] ? fsnotify+0xf50/0xf50 [ 2278.670270] ? ksys_lseek+0x1b0/0x1b0 [ 2278.670283] ? _cond_resched+0x12/0x80 [ 2278.670300] ? avc_policy_seqno+0x9/0x70 [ 2278.670311] ? selinux_file_permission+0x92/0x520 [ 2278.670328] ? __fget_files+0x296/0x4c0 [ 2278.670349] vfs_read+0x457/0x580 [ 2278.670368] ksys_read+0x12d/0x260 [ 2278.670379] ? vfs_write+0xa70/0xa70 [ 2278.670394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.670405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.670424] do_syscall_64+0x33/0x40 [ 2278.670438] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2278.670448] RIP: 0033:0x7f35a254fb19 [ 2278.670463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.670471] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2278.670486] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2278.670493] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2278.670500] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.670507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.670515] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 09:35:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 6) 09:35:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x5c8}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:40 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0x10000000) [ 2294.413102] FAULT_INJECTION: forcing a failure. [ 2294.413102] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.414920] CPU: 1 PID: 14622 Comm: syz-executor.3 Not tainted 5.10.201 #1 syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd=r0, 0x344, &(0x7f00000003c0)=[{&(0x7f00000000c0)="a958", 0x2}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000240)="78333f97ee2c84b4a782ea85e03434ca890c80ddef2df4cbe49f4fad2d810c49c3d22f87b2051e5d6eafb87cdee49dd4467b4f9a51a034e374f8e63e94fd120bd6c950be5e159aa92c507fc1ba16a346c732ce31077f48ae016ee7f09e776c68f06fd810a69ac15104906c18ae7e5025810cc27546e6fef2c2849f0b4515700b0a889d4da72b4be2653eef741485090bc7a5fd0e4fc654b1f094d37a0a8d0424caec707fa4bb7fa1db519d1ed66f34afbcf60488df09bb41975d2f628b1293f063765f450f5751bac829aefad3be98e2f5b3ed58b58e20270cdf3c06a8e6ad052b087e9a478f62770fb67c48c6f51bf79772", 0xf2}, {&(0x7f0000000100)="980650cbe0975fcf608b6f96d089b0c4d76d011d02eab5401333ab749914f520348339e4f03db0777f8a474a2c8bbb26aab9074cde511ae464ae4f33acbd14cb3bee96bf739468fc425a3fdf2a85782d4b5fcebaee53ba1e988ded9e", 0x5c}, {&(0x7f0000001740)="fd1f54c6b3de5e53a2f2d0aba96944c30768563cc4dfd813fc019c1ce163ae201e3e663839bd5f2b21ba5a88b2797512298e2930f022e33e10211b7310d9d2e365f1db2fe5e9b7140f7194b26b9b5814238f76206d07233488232c3da8d2c692042df13d4ea5442468ceab40e1ec8200a2fcd16514c9b9a13236d85eabda957a1efca0c07c62e0fe817f1363082867014b8db071cebaa5144406f016abc86352140650cc2f653cb57efb302d9b92ad303ef3cd93ac6f8e183618b884bae07ced33b5ccf9481eecbb7a3e48aa6745e7fd772500a70597d4b8bd5f9e46f4c6b911fae9c57284cd1ae85bf249f12c7943ac1614362ba2b1b60692e3add6ee57d6901062e7ffd23866726f418a0520dee46d4181d4fb489e643f88d6bd5ab82a4733f1fb333bdc138c0695084a60ee10ea61263d9cd5e8f1393d0fbe8fa0030114c6b35d719d29d761783b232cf13c609831f9009b087f65ab712ab2b75be539cc60936b3d788f55f8c2acf58c1dac81e26d2dc57ef6cebabdf2a2b9f32c4da462c9e6a1ef94eab4d4feb7a342e3e649283ca56ade05fe6cd6f5838b8ada080636b6c79f3fa106a135afa1482bba031c47080e93a82c1dcc831224b2aaec24a01a8c3afa3464f0dbd1192bca081cfa19258b45846f9422f618bf7912203d5e549e9d8b974d0c87429d7d9f6b65c94e726100a15d61d5280015e0de77e9e16316209f441d65010c3a1086671d5243a677079b677e640501bdeea785a2edfe9f34d405a1c5bbb8ec854fdbbe121e088743e56ddeaa0280192d2e716a44587d0dac25b69c14d35b487d5a36806afd6eca897a4212122b2c8c7c917f11c910cb3fbb7595504ec64fe7ddb94e64fb5e61c529fdd4c8eaa701576869f4c448116d805ba101ab94feb8b32ee6dfadfd41a5a6c2b78b580fd2dfb7cdf2e51fd31753bcb82c8d2e8199c4efb580e666173df576611a59453dc0ada829d5bed2ce86d38cc9af4b35ffd1f6d261f1ece0d0f38cd9a7a0bd890c5f492eaa7d04500328b4f78f934487e544ebf703f5993f8d752966c555e92b3c091bc72c56e1838f811092b2c57507f12a903a65b594dc0fa4857310475f9212b011709a53479e20a10d2322653a503477ac23ee7868e6ce4d544487324b2ba26cc14fc13e0d3b5d5913cf4055e057a31c874e33168a64b43585f750583bcad33f760dff84ec1a2d41ecc5a11a8ba4f911fe64f3ef00c19cce31a92429b71724490fee4b1c41252255168b0c5cefcffc258315e46efefd0ea9ff7e6bbcc73e4769e6aaec6cf59d3c9d44a7ba896ae9caadfbb618462e084cc553b355ea268ec98a192a9a26ab991e72222f43c1adc482b65002a1ec82b35feb33546e36dd10b4f5a0b1905494a5d4fc41303c70865e78a149fd03a934a793e60efd1fcc39ae66eb4257cef87824c9677e2f9c7c1d896add0fbdfcdbf82aaf49842dd9bad309af1e485dbe77da4787fbc9258e9d815ac777a1ed42b37e11a73c9c2648aeabbec0c99aa33caef27a060caba8e224bee378aef403ed3ede78a026a8853141f63eb87945876414f5014e95999b18ef9d582fd44cb11e86eb0a6d71e764cc3d810909fe13bc539b75a2ae9a6e657d29cb7cd2dd36953e27db54432add5a717a3a99d27d3eb14356d943568cb6aca32159dc12a3b2630423ec609baa68ce21fc9b7c15f63a78489857f71918040f29ea3a74541971f6e3e98ba6f87f374c2d178a986c840db86b95b0cbc4cd6b8ff66fe2710f6ca9ce976f0191e67aa303e8c7c89630585817efe9c808bee6a3c72aadfabb472bdaf7d8b45e8f62bedddf4af6c15b4a17863992baaec6b182d54edc25efd3dba6f0aa4eaa57aa3a13d570c54c268eb910a54c6a460382395c332cba8c369102acc09e98d5ed7ff0307271fecc4ffaec9475205acfc26dfab1b85a4aa648e86849b3aa3df8f104a6d309aae37782af094145e60465250bac7a9409ca068eb581b6210235bb8143ef02dff598c9546de9942cf7d34b6238ad57fa1db052d1deb559cc72c7cdba8d78db830604dfec2c1c88b1b2e7f13d1aa1886f0ae8ada1948e145b2d674859f3c64ac12839e0015fbe6307bc13250eadfc0e0b44a81ce787bef099f2266a93bf74c44cd64bbdad2adbf516963a8d0c3d2e2b215e8c52b192442c0e705d1df215cd1299f8b1503bc4456155751e844e7d0285ee20a0f7bb44119a1a2725156d0eb1e4d74484b936a4c87b5780fee34f2ca77c4411e04cab9f2f030da8f59fee9669485952f8f43b9c7c45048e9611fab7e76e5f0fed1b56bad7fb5171fc52fa71b77fde92141eb0f807b0a77121183f78006ff9984765d14926ab2e88998377cc4748a1ddb876c54e7f1b595db02836884f9babc21a56accd1bdd971a35b1c4035f55dc2b5ea6918a57fae13087bcce082311779cf6a2371b01683acf38d3fcab8b88ec3c476ab6aa92a2d0aec8dceb078e34b03f52045dd43cf4f945e3ef7952d8d9697dbee3b5b904fda1dd48ffade94b2a70eff8a59ac0ce8d591bb927eda8e797fa435a27cfc6887ea45708b5150b2dd122c2e2ecc590ddb657395eaa2b46fc39d11b382a9028c81e5286bdd6e032db1d73cdb4662b4511724aeef0007436a64a802cd9a9e2dbf7871bfd91bda7ad7c0c108300f3af83c8573ddc43f5a05d75c54da906af76a1d25e35e42caa19abf38ccdbbb704f18c9ef75af61c79c37a8cd5e0bee46ef38b59cbf799cf9d05b0287b755b6aee07c8fa3fb9f2339ea726b8c20da98f6a50986290fef2eaf71fbfb418b027d2a78ff9d40ba41f2878c175dc2dbb5a147851405d474e3e345ddea8252092b742d5203761b3a405694a20da096e2a4809a771476869eccc91462727a9d2f719d090c16b13d06f69aa028d26c4cf3075cee4d2b6487f3f410df7418f3057a1e2f0fcbc5edae3ac0b9f61a9db55effa5ba3e44b84f4e5726b5e6d572755087e7a381fb14e18621079f0509554f627f4bf8b6291063b2708847bfd3da261c7a90d7f8a3b260706f8791b83d374c01604c1d43bb7f4e41dcc5c619172a3e364e6eda1c1f3873bec855bf999b8cb8fcbd15274eda9ba08f57859d96ca56bf6d1e6c00b8f0d228f6774ec38be346ef982ce6d4fa58b840dfecd50042e558f9418d1fac5e6242894b302fb45e469d63f92aac545839f96aa7b7dc63867f0c1e4d5c503bfe5c278ec8bd0e8c2ab2a26f1c6fd4b2d08249f52bb11552d9fd27076b430449eb5748c25ff83217e5549867d86fd56bf611b1966f500f626790bb1383c6b26170600d31f834e781409a2cd181d93e84da7a74e00ab9275e88a69370f062f4c5f01b88878ed2a565ad8bf2f01be853c5deed8b64bba3f58799e3ae17e6617ec6425225f939443c1ab69a525395c0b03354f50c3a5ac5d002e308f0146e2d9e7ae9acb94aa3c572b068cd86fddb4801e1832e9bca68e724231d9cb94e8039885b99f32ba2c52e368594da24bb676fec06aee6b05aaab6406aae06bb17a0906ce60ff2853db4bdb1046a48bcb54e2c1d7a93c87f786c9982ea65e8f5d630c4e62c9370f3d8e05719a3ffce17d96c494aa72b2711c44e3259f86c75c53a26722673934d01ede0cad44f3d5c68a32835ec0afef4ed71d23f26e199e15fd9f2dadcffd4f5bef250b15296fe7eee7def3967f9f69475d1b6ec282d6f3b2c7edabd4d6bd6dde0802a5b1fcbf086572a5394e38f3d14820f164babc9c82006902f9d755cd1f59ec87bb23ea5b06c4ffb0aedbe5d037dc6aded3d650b9edf8d67ddb3efb00f1ad2ba751b8fc62d80be5f1403e7ccbf91ebf7a1da7b5985db32d785b2eb83dca80021eb7076393c72dc1bbdcc224e74aa66de234d75f6597f004135f837d4aa515730ba2247f897d542bc77fcbda0918f30c71a7a73ca2b8486f2f3acf63999dc4c2e30c2492c85f291f28345fc24f73f11832065f4b06e567d84e7d859f3980d50183b8cf5d5dbb3656d570d4720dc5b9de1dac5cb17349645aa2047e24a6d418e28a201f37528374549049f2f3529ce5056ba3d14e9060a9d3bda4f7556562e133e9eb57842e0019a48eebf602dee10d31c313fbde9c9179dc27d67eedee685e6d2075863811e5097defff4f97b7e839c0e288b24a6467b8fc3b1cd5f3ecd00bfcee2c4cea5a5bbb10f310c38ca2a83faed63ac6a087cb0f1aeb208d9e7d848196aca473028e588db5ecfd988ca61681ccbc5e108101cda8ac28d2c9274a09a9390225f683c80bbd2a601e63b8cc9b69ba1f68a253af197e9b0ea1677974d5ac9e49c8d3adc87a282523b059e895835a6a51564f566b94f31122c1ba1962822d1e6b166fb998a8301e4f4d3eef8da5857face7be793dc96cb05fdb3e357136189429f9bda256ff14b93d64db28602dcb9fac234fc595e2e0d861deacbc2b62d9740bdd3d114a72dd4098514e6a08d77e25160e8bde4b8b53bb0bb0532f37af00ec3d7158efb4621bab5f86962ddd3c3f7c9012e3a0d727e3a8aa9dcf4ce712d85fcbf7b12131534e96f0d19c755c332e266ab0af22dd0c23a9bbc8e781fa81b04253873685a9ec3eb5543959806fc5a472fb666110848ec190aec45365ab00030887df496b88c6cc595b04b89a5e2674880dd876af71c1e13a059f1a64a97ac7110bd765052bbbfe70dc4d1e3373939427bcf07e6b0b7ca8a080526896b21685782159b9e31d9956afeee5e5a26308f00f524275d55088ad447dd2ca8895a2189021d16748f692f534302bb6484d65438a3cd136605b9f6e44f40cc875c524f0afabd1b51824bf01080dc0a1fb2f1d7a0c7a6a2844f6b24b2cbe1ef188eaddd801dee56be99982e1292ce02360f4f08d1e999a23cb3819bdbeafdeab3c01f51fca9cb04935234c7b73f29d9122e9cc1843029d454281db260c3ae82701d73d661712c234dd22f7b1b294b1cac66307b274564f66d21622c8668bd22747e8ce32c5e8819f73f68d0bb18ffe5c0b4ee5c1e5913a2aadd240c2087530f7a46a692362b459c3d10a2cd1d54bc82bbc0ce9289d4bd178ecd13bd5e99069eb9cb7f42940cb30f30dc39932959e18df0fad34e241d731dabbb0c5467e82b70c2fab0d42f23548c63ee00db30e62e18b9724fe5d38f9c4241761752e04d697a42b1dfa038c520f7fffdb83c491f44df55ef81f8f4105fb2721ac18d124c9c7d9047d5d3be623ea24c1ed27d09a79fc0e7e2d6f5d85e99c5ea9b3063241046b1694970d85b717563c7acb4dd3fa228b060b6acc95cbedec75df180324dc529e59bd85c341232040ae90b55f1bbf5d89522fd955637d259da0806976b3bc62e7e1017564f4f0e6af3e1b3432cd28ed22000484284ac3d7cb22769ad935b64f5f4b431d26448cdd435b5c0021d6b3d912a654d899908d13637ba1dd2ed68d9d324a263ebd2c7c25815721d80ff12a23eae95b625c6725a72d40779b8529e159f27e8a10b03c6a21209d62817d1ea1833b516b5620964fcbacf837ffc248b8ad7d453511eb0f68105eca50d260e60a51f4cb18beb221bf7dd17b8a7b842444e45de3a8747d98b19abfde45bb02c7bf0aaf6a3d0d6d6c8d2999bf74499a6b4d6c4485a32146007e5651e5553ca83b636cbab363f9da97c1884eb798193992c707eb00cc305a7c409da3049a9e190c329df39989da00cfbb8e4884a542008cd9dd4f113c0cb257416291873a024a9fdf9d8648d6f203828d8b097b7635f1f17d06985f01faa3f2e773210145c3154d2854e1823410356946292385dd37272e119b00147d913fb1", 0x1000}, {&(0x7f0000000340)="419e988fe06a3f68f8ad2df13182cb8c536e44a1767dfc4a32d229952150a647a03605a737b9dfb5fdcc70d195cea54bcd70a2448694d27ae0bcd579834aa98f7d0364d1979381d9", 0x48}], 0x6, 0x10, 0x1}, 0x0) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) recvmmsg(0xffffffffffffffff, &(0x7f0000009b80)=[{{0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x5, &(0x7f00000037c0)=""/203, 0xcb}, 0xb825}, {{&(0x7f00000038c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/250, 0xfa}], 0x1}, 0x3}, {{&(0x7f0000003a80)=@can, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000003b00)=""/18, 0x12}, {&(0x7f0000003b40)=""/213, 0xd5}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/55, 0x37}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/64, 0x40}, {&(0x7f0000005cc0)=""/164, 0xa4}, {&(0x7f0000005d80)=""/26, 0x1a}, {&(0x7f0000005dc0)=""/4096, 0x1000}], 0x9}, 0x1f}, {{&(0x7f0000006e80)=@isdn, 0x80, &(0x7f0000009440)=[{&(0x7f0000006f00)=""/206, 0xce}, {&(0x7f0000007000)=""/4096, 0x1000}, {&(0x7f0000008000)}, {&(0x7f0000008040)=""/232, 0xe8}, {&(0x7f0000008140)=""/198, 0xc6}, {&(0x7f0000008240)=""/7, 0x7}, {&(0x7f0000008280)=""/89, 0x59}, {&(0x7f0000008300)=""/216, 0xd8}, {&(0x7f0000008400)=""/61, 0x3d}, {&(0x7f0000008440)=""/4096, 0x1000}], 0xa, &(0x7f0000009500)=""/237, 0xed}, 0x94}, {{&(0x7f0000009600)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000009840)=[{&(0x7f0000009680)=""/106, 0x6a}, {&(0x7f0000009700)=""/33, 0x21}, {&(0x7f0000009740)=""/49, 0x31}, {&(0x7f0000009780)=""/135, 0x87}], 0x4, &(0x7f0000009880)=""/99, 0x63}, 0xfff}, {{&(0x7f0000009900)=@nfc_llcp, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000009980)=""/25, 0x19}, {&(0x7f00000099c0)=""/26, 0x1a}, {&(0x7f0000009a00)=""/94, 0x5e}, {&(0x7f0000009a80)}], 0x4, &(0x7f0000009b00)=""/121, 0x79}}], 0x7, 0x2000, &(0x7f0000009d40)={0x0, 0x3938700}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r2, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000008000)={0x0, 0x4, 0xff, 0x88a4, 0xeb, "742dee95b2e78f570dcb3aa7b174fe05c62aa3", 0x6, 0x1000}) 09:35:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 33) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:35:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 4) 09:35:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r4 = signalfd(r3, 0x0, 0x0) pwrite64(r4, &(0x7f0000000140)="2c8e3e8db3748b888c620747af25949f0b39af1b4d903007688324aec2ede623a19b417960a15ba3b890febce4bd86b6398cc2281691724ba69ec51bdf268338454eb83797b0aad9d4", 0x49, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0xb, 0x6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x40000, 0x0) sendfile(r5, r3, 0x0, 0x7ffffff9) [ 2294.415978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.417321] Call Trace: [ 2294.417703] dump_stack+0x107/0x167 [ 2294.418198] should_fail.cold+0x5/0xa [ 2294.418740] ? create_object.isra.0+0x3a/0xa20 [ 2294.419383] should_failslab+0x5/0x20 [ 2294.419909] kmem_cache_alloc+0x5b/0x310 [ 2294.420479] create_object.isra.0+0x3a/0xa20 write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x64, 0x3f, 0x3, 0xa0, 0x4, 0x3, 0x6, 0xffab, 0x224, 0x40, 0x1cd, 0x66000000, 0x6, 0x38, 0x2, 0x800, 0x3, 0x7f}, [{0x6, 0x0, 0x6, 0x80000000, 0x2, 0x7, 0x100000001, 0x6}, {0x60000000, 0xffffffff, 0x6, 0x6, 0xffffffff80000000, 0x8, 0x2, 0x2}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x15b0) r6 = gettid() perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x81, 0x1, 0x40, 0x0, 0xccdd, 0x800, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x56058ebc4f6a6802, @perf_bp={&(0x7f00000000c0), 0x1}, 0x5000, 0x9, 0x101, 0x3, 0x2, 0x71, 0x1, 0x0, 0x7, 0x0, 0x1}, r6, 0xe, 0xffffffffffffffff, 0x1) [ 2294.421368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.422054] kmem_cache_alloc+0x159/0x310 [ 2294.422598] ? mempool_free_pages+0x20/0x20 [ 2294.423161] mempool_alloc+0x148/0x360 [ 2294.423682] ? mempool_resize+0x7d0/0x7d0 [ 2294.424238] ? mempool_resize+0x7d0/0x7d0 [ 2294.424775] ? lock_downgrade+0x6d0/0x6d0 [ 2294.425337] ? ext4_map_blocks+0x967/0x1940 [ 2294.425413] FAULT_INJECTION: forcing a failure. [ 2294.425413] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.425890] bvec_alloc+0xd8/0x2f0 [ 2294.425906] bio_alloc_bioset+0x40a/0x600 [ 2294.425923] ? bvec_alloc+0x2f0/0x2f0 [ 2294.429041] ? iov_iter_npages+0x1fd/0xa70 [ 2294.429704] ? ext4_iomap_begin+0x1a0/0x700 [ 2294.430373] iomap_dio_bio_actor+0x518/0xef0 [ 2294.431007] iomap_dio_actor+0x36f/0x560 [ 2294.431566] iomap_apply+0x289/0x810 [ 2294.432067] ? iomap_dio_rw+0x90/0x90 [ 2294.432591] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2294.433445] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2294.434222] ? mark_held_locks+0x9e/0xe0 [ 2294.434785] ? filemap_check_errors+0xa5/0x150 [ 2294.435429] __iomap_dio_rw+0x6cd/0x1110 [ 2294.435973] ? iomap_dio_rw+0x90/0x90 [ 2294.436499] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2294.437187] ? down_read+0x10f/0x430 [ 2294.437706] ? down_write+0x160/0x160 [ 2294.438222] iomap_dio_rw+0x31/0x90 [ 2294.438709] ext4_file_read_iter+0x2c7/0x4c0 [ 2294.439293] new_sync_read+0x424/0x6f0 [ 2294.439810] ? fsnotify+0xf50/0xf50 [ 2294.440306] ? ksys_lseek+0x1b0/0x1b0 [ 2294.440832] ? _cond_resched+0x12/0x80 [ 2294.441420] ? avc_policy_seqno+0x9/0x70 [ 2294.441939] ? selinux_file_permission+0x92/0x520 [ 2294.442537] ? __fget_files+0x296/0x4c0 [ 2294.443137] vfs_read+0x457/0x580 [ 2294.443646] ksys_read+0x12d/0x260 [ 2294.444136] ? vfs_write+0xa70/0xa70 [ 2294.444653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.445372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.446072] do_syscall_64+0x33/0x40 [ 2294.446573] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.447260] RIP: 0033:0x7fc2958b4b19 [ 2294.447767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.450444] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2294.451527] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2294.452567] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2294.453611] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.454606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.455618] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 [ 2294.456656] CPU: 0 PID: 14625 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2294.457738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.458906] Call Trace: [ 2294.459294] dump_stack+0x107/0x167 [ 2294.459824] should_fail.cold+0x5/0xa [ 2294.460362] ? create_object.isra.0+0x3a/0xa20 [ 2294.461012] should_failslab+0x5/0x20 [ 2294.461583] kmem_cache_alloc+0x5b/0x310 [ 2294.462164] ? lock_downgrade+0x6d0/0x6d0 [ 2294.462764] create_object.isra.0+0x3a/0xa20 [ 2294.463417] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.464120] __kmalloc_node+0x1ae/0x420 [ 2294.464709] kvmalloc_node+0x119/0x170 [ 2294.465307] simple_xattr_alloc+0x43/0xa0 [ 2294.465891] simple_xattr_set+0x75/0x610 [ 2294.466359] FAULT_INJECTION: forcing a failure. [ 2294.466359] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.466463] kernfs_xattr_set+0x50/0x80 [ 2294.466486] selinux_kernfs_init_security+0x26d/0x4c0 [ 2294.466502] ? selinux_file_mprotect+0x610/0x610 [ 2294.466516] ? find_held_lock+0x2c/0x110 [ 2294.466537] ? __kernfs_new_node+0x2ad/0x860 [ 2294.466557] ? rwlock_bug.part.0+0x90/0x90 [ 2294.466580] security_kernfs_init_security+0x4e/0xb0 [ 2294.466598] __kernfs_new_node+0x531/0x860 [ 2294.466619] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2294.466635] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2294.466654] ? pcpu_alloc+0x12a/0x1240 [ 2294.466679] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2294.475330] kernfs_create_dir_ns+0x9c/0x230 [ 2294.475937] cgroup_mkdir+0x318/0xf50 [ 2294.476457] ? cgroup_destroy_locked+0x710/0x710 [ 2294.477137] kernfs_iop_mkdir+0x14d/0x1e0 [ 2294.477707] vfs_mkdir+0x493/0x700 [ 2294.478217] do_mkdirat+0x150/0x2b0 [ 2294.478709] ? user_path_create+0xf0/0xf0 [ 2294.479296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.480045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.480776] do_syscall_64+0x33/0x40 [ 2294.481334] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.482026] RIP: 0033:0x7f7635ef0b19 [ 2294.482517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.485028] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2294.486101] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2294.487082] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2294.488099] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.490011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2294.491020] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2294.492033] CPU: 1 PID: 14619 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2294.493019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.494195] Call Trace: [ 2294.494576] dump_stack+0x107/0x167 [ 2294.495087] should_fail.cold+0x5/0xa [ 2294.495617] ? create_object.isra.0+0x3a/0xa20 [ 2294.496258] should_failslab+0x5/0x20 [ 2294.496783] kmem_cache_alloc+0x5b/0x310 [ 2294.497380] ? mark_held_locks+0x9e/0xe0 [ 2294.497955] create_object.isra.0+0x3a/0xa20 [ 2294.498550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.499257] kmem_cache_alloc_bulk+0x168/0x320 [ 2294.499890] io_submit_sqes+0x6f76/0x85c0 [ 2294.500480] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2294.501191] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2294.501879] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2294.502546] ? lock_downgrade+0x6d0/0x6d0 [ 2294.503111] ? find_held_lock+0x2c/0x110 [ 2294.503686] ? io_submit_sqes+0x85c0/0x85c0 [ 2294.504272] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2294.504948] ? wait_for_completion_io+0x270/0x270 [ 2294.505630] ? rcu_read_lock_any_held+0x75/0xa0 [ 2294.506288] ? vfs_write+0x354/0xa70 [ 2294.506798] ? fput_many+0x2f/0x1a0 [ 2294.507314] ? ksys_write+0x1a9/0x260 [ 2294.507840] ? __ia32_sys_read+0xb0/0xb0 [ 2294.508412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.509161] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.509888] do_syscall_64+0x33/0x40 [ 2294.510399] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.511107] RIP: 0033:0x7f0fb66d2b19 [ 2294.511626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.514164] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2294.515216] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2294.516188] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2294.517205] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2294.518175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.519166] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2294.522612] FAULT_INJECTION: forcing a failure. [ 2294.522612] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.524211] CPU: 1 PID: 14631 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2294.525183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.526336] Call Trace: [ 2294.526724] dump_stack+0x107/0x167 [ 2294.527239] should_fail.cold+0x5/0xa [ 2294.527778] ? create_object.isra.0+0x3a/0xa20 [ 2294.528396] should_failslab+0x5/0x20 [ 2294.528937] kmem_cache_alloc+0x5b/0x310 [ 2294.529636] ? ext4_sb_block_valid+0x382/0x680 [ 2294.530291] create_object.isra.0+0x3a/0xa20 [ 2294.530925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.531651] kmem_cache_alloc+0x159/0x310 [ 2294.532243] ? mempool_free_pages+0x20/0x20 [ 2294.532865] mempool_alloc+0x148/0x360 [ 2294.533449] ? mempool_resize+0x7d0/0x7d0 [ 2294.534030] ? lock_downgrade+0x6d0/0x6d0 [ 2294.534605] ? ext4_map_blocks+0x967/0x1940 [ 2294.535207] bio_alloc_bioset+0x36e/0x600 [ 2294.535818] ? bvec_alloc+0x2f0/0x2f0 [ 2294.536353] ? iov_iter_npages+0x1fd/0xa70 [ 2294.536943] ? ext4_iomap_begin+0x1a0/0x700 [ 2294.537550] iomap_dio_bio_actor+0x518/0xef0 [ 2294.538154] iomap_dio_actor+0x36f/0x560 [ 2294.538746] iomap_apply+0x289/0x810 [ 2294.539279] ? iomap_dio_rw+0x90/0x90 [ 2294.539842] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2294.540636] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2294.541391] ? mark_held_locks+0x9e/0xe0 [ 2294.541986] ? filemap_check_errors+0xa5/0x150 [ 2294.542626] __iomap_dio_rw+0x6cd/0x1110 [ 2294.543203] ? iomap_dio_rw+0x90/0x90 [ 2294.543760] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2294.544413] ? down_read+0x10f/0x430 [ 2294.544954] ? down_write+0x160/0x160 [ 2294.545558] iomap_dio_rw+0x31/0x90 [ 2294.546083] ext4_file_read_iter+0x2c7/0x4c0 [ 2294.546709] new_sync_read+0x424/0x6f0 [ 2294.547270] ? fsnotify+0xf50/0xf50 [ 2294.547799] ? ksys_lseek+0x1b0/0x1b0 [ 2294.548346] ? _cond_resched+0x12/0x80 [ 2294.548910] ? avc_policy_seqno+0x9/0x70 [ 2294.549507] ? selinux_file_permission+0x92/0x520 [ 2294.550198] ? __fget_files+0x296/0x4c0 [ 2294.550789] vfs_read+0x457/0x580 [ 2294.551298] ksys_read+0x12d/0x260 [ 2294.551806] ? vfs_write+0xa70/0xa70 [ 2294.552349] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.553118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.553886] do_syscall_64+0x33/0x40 [ 2294.554443] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.555199] RIP: 0033:0x7f35a254fb19 [ 2294.555743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.558354] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2294.559455] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2294.559783] device veth0_vlan entered promiscuous mode [ 2294.560478] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2294.560487] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.560496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.560506] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2294.578171] FAULT_INJECTION: forcing a failure. [ 2294.578171] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.579816] CPU: 0 PID: 14633 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2294.580842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.582155] Call Trace: [ 2294.582548] dump_stack+0x107/0x167 [ 2294.583237] should_fail.cold+0x5/0xa [ 2294.583842] ? create_object.isra.0+0x3a/0xa20 [ 2294.584511] should_failslab+0x5/0x20 [ 2294.585047] kmem_cache_alloc+0x5b/0x310 [ 2294.585676] ? mark_held_locks+0x9e/0xe0 [ 2294.586240] create_object.isra.0+0x3a/0xa20 [ 2294.586868] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2294.587600] kmem_cache_alloc_bulk+0x168/0x320 [ 2294.588255] io_submit_sqes+0x6f76/0x85c0 [ 2294.588867] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2294.589623] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2294.590297] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2294.590950] ? lock_downgrade+0x6d0/0x6d0 [ 2294.591506] ? find_held_lock+0x2c/0x110 [ 2294.592061] ? io_submit_sqes+0x85c0/0x85c0 [ 2294.592679] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2294.593391] ? wait_for_completion_io+0x270/0x270 [ 2294.594083] ? rcu_read_lock_any_held+0x75/0xa0 [ 2294.594755] ? vfs_write+0x354/0xa70 [ 2294.595276] ? fput_many+0x2f/0x1a0 [ 2294.595789] ? ksys_write+0x1a9/0x260 [ 2294.596311] ? __ia32_sys_read+0xb0/0xb0 [ 2294.596890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.597689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.598415] do_syscall_64+0x33/0x40 [ 2294.598929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.599648] RIP: 0033:0x7f4f84a17b19 [ 2294.600148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.602651] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2294.603665] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2294.604632] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2294.605648] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2294.606626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.607650] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2294.620566] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:35:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 5) [ 2294.657831] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:35:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:40 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 7) [ 2294.777196] FAULT_INJECTION: forcing a failure. [ 2294.777196] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.778773] CPU: 0 PID: 14652 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2294.779721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.780873] Call Trace: [ 2294.781278] dump_stack+0x107/0x167 [ 2294.781792] should_fail.cold+0x5/0xa [ 2294.782319] ? mempool_alloc+0x148/0x360 [ 2294.782885] ? mempool_free_pages+0x20/0x20 [ 2294.783496] should_failslab+0x5/0x20 [ 2294.784034] kmem_cache_alloc+0x5b/0x310 [ 2294.784600] ? mempool_free_pages+0x20/0x20 [ 2294.785211] mempool_alloc+0x148/0x360 [ 2294.785759] ? mempool_resize+0x7d0/0x7d0 [ 2294.786348] ? mempool_resize+0x7d0/0x7d0 [ 2294.786927] ? lock_downgrade+0x6d0/0x6d0 [ 2294.787494] ? ext4_map_blocks+0x967/0x1940 [ 2294.788116] bvec_alloc+0xd8/0x2f0 [ 2294.788624] bio_alloc_bioset+0x40a/0x600 [ 2294.789230] ? bvec_alloc+0x2f0/0x2f0 [ 2294.789782] ? iov_iter_npages+0x1fd/0xa70 [ 2294.790383] ? ext4_iomap_begin+0x1a0/0x700 [ 2294.791014] iomap_dio_bio_actor+0x518/0xef0 [ 2294.791642] iomap_dio_actor+0x36f/0x560 [ 2294.792212] iomap_apply+0x289/0x810 [ 2294.792738] ? iomap_dio_rw+0x90/0x90 [ 2294.793308] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2294.794115] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2294.794854] ? mark_held_locks+0x9e/0xe0 [ 2294.795447] ? filemap_check_errors+0xa5/0x150 [ 2294.796114] __iomap_dio_rw+0x6cd/0x1110 [ 2294.796699] ? iomap_dio_rw+0x90/0x90 [ 2294.797266] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2294.797918] ? down_read+0x10f/0x430 [ 2294.798434] ? down_write+0x160/0x160 [ 2294.799013] iomap_dio_rw+0x31/0x90 [ 2294.799536] ext4_file_read_iter+0x2c7/0x4c0 [ 2294.800219] new_sync_read+0x424/0x6f0 [ 2294.800766] ? fsnotify+0xf50/0xf50 [ 2294.801315] ? ksys_lseek+0x1b0/0x1b0 [ 2294.801855] ? _cond_resched+0x12/0x80 [ 2294.802406] ? avc_policy_seqno+0x9/0x70 [ 2294.802975] ? selinux_file_permission+0x92/0x520 [ 2294.803660] ? __fget_files+0x296/0x4c0 [ 2294.804230] vfs_read+0x457/0x580 [ 2294.804740] ksys_read+0x12d/0x260 [ 2294.805274] ? vfs_write+0xa70/0xa70 [ 2294.805795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.806570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.807299] do_syscall_64+0x33/0x40 [ 2294.807827] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.808548] RIP: 0033:0x7f35a254fb19 [ 2294.809105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.811664] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2294.812772] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2294.813815] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2294.814790] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.815773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.816794] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 09:35:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a02}], 0x4000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) read(r2, &(0x7f0000032340)=""/102392, 0x18ff8) io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0xcdbc, 0x1, 0xffffff7c, 0x16b}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) socket$nl_audit(0x10, 0x3, 0x9) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x6000}, {0xffffffffffffffff, 0x9401}, {0xffffffffffffffff, 0x308c}, {0xffffffffffffffff, 0x1004}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x2885}], 0x6, &(0x7f0000000400), &(0x7f0000000440)={[0x4]}, 0x8) openat(r2, &(0x7f0000000200)='./file0\x00', 0x440, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/hid', 0x4040, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x80000001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000480)=""/127, 0x7f}], 0x2, &(0x7f0000000640)}, 0x0, 0x12141, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x600000000, 0x0, 0xe406, 0x3}, 0xffffffff) fstatfs(r4, &(0x7f0000000140)=""/78) [ 2294.830017] FAULT_INJECTION: forcing a failure. [ 2294.830017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2294.832293] CPU: 1 PID: 14656 Comm: syz-executor.3 Not tainted 5.10.201 #1 [ 2294.833313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.834499] Call Trace: [ 2294.834888] dump_stack+0x107/0x167 [ 2294.835423] should_fail.cold+0x5/0xa [ 2294.835991] __alloc_pages_nodemask+0x182/0x600 [ 2294.836651] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2294.837375] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2294.838238] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2294.838983] ? lock_downgrade+0x6d0/0x6d0 [ 2294.839561] ? mark_held_locks+0x9e/0xe0 [ 2294.840152] alloc_pages_vma+0xbb/0x410 [ 2294.840730] handle_mm_fault+0x152f/0x3500 [ 2294.841372] ? do_raw_spin_lock+0x121/0x260 [ 2294.841997] ? rwlock_bug.part.0+0x90/0x90 [ 2294.842594] ? __pmd_alloc+0x5e0/0x5e0 [ 2294.843167] __get_user_pages+0x61b/0x1380 [ 2294.843760] ? follow_page_mask+0x1900/0x1900 [ 2294.844394] ? down_read+0x10f/0x430 [ 2294.844957] ? down_write+0x160/0x160 [ 2294.845526] get_user_pages_unlocked+0x18a/0x690 [ 2294.846222] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2294.846980] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2294.847650] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2294.848419] ? pin_user_pages_unlocked+0x80/0x80 [ 2294.849130] ? trace_hardirqs_on+0x5b/0x180 [ 2294.849743] get_user_pages_fast+0x66/0xa0 [ 2294.850350] iov_iter_get_pages+0x297/0xf40 [ 2294.850960] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2294.851628] ? mempool_resize+0x7d0/0x7d0 [ 2294.852198] bio_iov_iter_get_pages+0x22a/0x1200 [ 2294.852835] ? bvec_alloc+0x17e/0x2f0 [ 2294.853366] ? bio_alloc_bioset+0x2a1/0x600 [ 2294.853982] ? bio_add_pc_page+0x100/0x100 [ 2294.854567] ? bvec_alloc+0x240/0x2f0 [ 2294.855131] ? iov_iter_npages+0x1fd/0xa70 [ 2294.855721] ? ext4_iomap_begin+0x1a0/0x700 [ 2294.856360] iomap_dio_bio_actor+0x77a/0xef0 [ 2294.856986] iomap_dio_actor+0x36f/0x560 [ 2294.857586] iomap_apply+0x289/0x810 [ 2294.858110] ? iomap_dio_rw+0x90/0x90 [ 2294.858659] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2294.859484] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2294.860232] ? mark_held_locks+0x9e/0xe0 [ 2294.860813] ? filemap_check_errors+0xa5/0x150 [ 2294.861451] __iomap_dio_rw+0x6cd/0x1110 [ 2294.861995] ? iomap_dio_rw+0x90/0x90 [ 2294.862522] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2294.863156] ? down_read+0x10f/0x430 [ 2294.863659] ? down_write+0x160/0x160 [ 2294.864192] iomap_dio_rw+0x31/0x90 [ 2294.864721] ext4_file_read_iter+0x2c7/0x4c0 [ 2294.865365] new_sync_read+0x424/0x6f0 [ 2294.865930] ? fsnotify+0xf50/0xf50 [ 2294.866454] ? ksys_lseek+0x1b0/0x1b0 [ 2294.866979] ? _cond_resched+0x12/0x80 [ 2294.867537] ? avc_policy_seqno+0x9/0x70 [ 2294.868110] ? selinux_file_permission+0x92/0x520 [ 2294.868794] ? __fget_files+0x296/0x4c0 [ 2294.869403] vfs_read+0x457/0x580 [ 2294.869890] ksys_read+0x12d/0x260 [ 2294.870394] ? vfs_write+0xa70/0xa70 [ 2294.870929] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2294.871638] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2294.872368] do_syscall_64+0x33/0x40 [ 2294.872898] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2294.873620] RIP: 0033:0x7fc2958b4b19 [ 2294.874119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.876562] RSP: 002b:00007fc292e2a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2294.877586] RAX: ffffffffffffffda RBX: 00007fc2959c7f60 RCX: 00007fc2958b4b19 [ 2294.878563] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2294.879527] RBP: 00007fc292e2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.880540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.881513] R13: 00007ffc23f90acf R14: 00007fc292e2a300 R15: 0000000000022000 09:35:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 34) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:35:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x935b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe(&(0x7f0000000040)) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) write(r4, &(0x7f0000000340)="9b524fbb9dd478a11cc4c0cd6778f6fd995e9d658eb437064693ef03740e15d7adfe09900e65248051b1d6ba590c1398da4a356788f4e0df1b3d87798c6fff95be0bac2c898156daee4087a37f3b18adaaec5b468882da0707d507451357e3fde26c6e25f8c15194a1c986a64260ffdc76b3c15494a1861d78597d5f668a040753fa168ca40d57bce1226817209746df93141dc799b19d9c1bb92be86b9a1e69fa8fee251fad74ad", 0xa8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:35:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 5) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 8) 09:35:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 6) 09:35:55 executing program 6: times(&(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000001000001010000000000000000000000000000000000000000f1365edcfeaed2dfbcd4cefc3a5d9421b155c0daf9", @ANYRES32=0x0, @ANYBLOB='\f\x00'/12], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) syz_io_uring_setup(0x21, &(0x7f00000002c0)={0x0, 0x4000000, 0x2, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) read(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 09:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0xe00}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2309.261049] FAULT_INJECTION: forcing a failure. [ 2309.261049] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.263596] CPU: 1 PID: 14677 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2309.265113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.266909] Call Trace: [ 2309.267491] dump_stack+0x107/0x167 [ 2309.268282] should_fail.cold+0x5/0xa [ 2309.269123] ? create_object.isra.0+0x3a/0xa20 [ 2309.270139] should_failslab+0x5/0x20 [ 2309.270978] kmem_cache_alloc+0x5b/0x310 [ 2309.271875] create_object.isra.0+0x3a/0xa20 [ 2309.272837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.273984] kmem_cache_alloc+0x159/0x310 [ 2309.274907] ? mempool_free_pages+0x20/0x20 [ 2309.275857] mempool_alloc+0x148/0x360 [ 2309.276719] ? mempool_resize+0x7d0/0x7d0 [ 2309.277654] ? mempool_resize+0x7d0/0x7d0 [ 2309.278571] ? lock_downgrade+0x6d0/0x6d0 [ 2309.279482] ? ext4_map_blocks+0x967/0x1940 [ 2309.280439] bvec_alloc+0xd8/0x2f0 [ 2309.281224] bio_alloc_bioset+0x40a/0x600 [ 2309.282139] ? bvec_alloc+0x2f0/0x2f0 [ 2309.282971] ? iov_iter_npages+0x1fd/0xa70 [ 2309.283886] ? ext4_iomap_begin+0x1a0/0x700 [ 2309.284830] iomap_dio_bio_actor+0x518/0xef0 [ 2309.285826] iomap_dio_actor+0x36f/0x560 [ 2309.286719] iomap_apply+0x289/0x810 [ 2309.287531] ? iomap_dio_rw+0x90/0x90 [ 2309.288364] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2309.289634] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2309.290790] ? mark_held_locks+0x9e/0xe0 [ 2309.291689] ? filemap_check_errors+0xa5/0x150 [ 2309.292690] __iomap_dio_rw+0x6cd/0x1110 [ 2309.293580] ? iomap_dio_rw+0x90/0x90 [ 2309.294430] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2309.295435] ? down_read+0x10f/0x430 [ 2309.296246] ? down_write+0x160/0x160 [ 2309.297081] iomap_dio_rw+0x31/0x90 [ 2309.297900] ext4_file_read_iter+0x2c7/0x4c0 [ 2309.298863] new_sync_read+0x424/0x6f0 [ 2309.299708] ? fsnotify+0xf50/0xf50 [ 2309.300498] ? ksys_lseek+0x1b0/0x1b0 [ 2309.301339] ? _cond_resched+0x12/0x80 [ 2309.302186] ? avc_policy_seqno+0x9/0x70 [ 2309.303063] ? selinux_file_permission+0x92/0x520 [ 2309.304108] ? __fget_files+0x296/0x4c0 [ 2309.304974] vfs_read+0x457/0x580 [ 2309.305744] ksys_read+0x12d/0x260 [ 2309.306105] FAULT_INJECTION: forcing a failure. [ 2309.306105] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.306505] ? vfs_write+0xa70/0xa70 [ 2309.306532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.306551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.306579] do_syscall_64+0x33/0x40 [ 2309.311702] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.312801] RIP: 0033:0x7f35a254fb19 [ 2309.313614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.317561] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2309.319194] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2309.320720] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2309.322257] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.323786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.325321] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2309.326865] CPU: 0 PID: 14682 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2309.327791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.328903] Call Trace: [ 2309.329266] dump_stack+0x107/0x167 [ 2309.329754] should_fail.cold+0x5/0xa [ 2309.330271] ? selinux_kernfs_init_security+0x137/0x4c0 [ 2309.330988] should_failslab+0x5/0x20 [ 2309.331502] __kmalloc+0x72/0x390 [ 2309.331974] selinux_kernfs_init_security+0x137/0x4c0 [ 2309.332670] ? selinux_file_mprotect+0x610/0x610 [ 2309.333319] ? find_held_lock+0x2c/0x110 [ 2309.333865] ? __kernfs_new_node+0x2ad/0x860 [ 2309.334454] ? lock_downgrade+0x6d0/0x6d0 [ 2309.335013] ? rwlock_bug.part.0+0x90/0x90 [ 2309.335580] security_kernfs_init_security+0x4e/0xb0 [ 2309.336266] __kernfs_new_node+0x531/0x860 [ 2309.336836] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2309.337481] ? __lock_acquire+0x1657/0x5b00 [ 2309.338063] ? perf_trace_lock+0xac/0x490 [ 2309.338613] ? __lockdep_reset_lock+0x180/0x180 [ 2309.339247] kernfs_new_node+0x93/0x120 [ 2309.339786] __kernfs_create_file+0x51/0x350 [ 2309.340369] cgroup_addrm_files+0x3c8/0x9b0 [ 2309.340961] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2309.341628] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2309.342232] ? cgroup_file_name+0x210/0x210 [ 2309.342809] ? cgroup_propagate_control+0x3b9/0x520 [ 2309.343485] css_populate_dir+0x304/0x460 [ 2309.344038] cgroup_mkdir+0xa13/0xf50 [ 2309.344558] ? cgroup_destroy_locked+0x710/0x710 [ 2309.345188] kernfs_iop_mkdir+0x14d/0x1e0 [ 2309.345750] vfs_mkdir+0x493/0x700 [ 2309.346169] FAULT_INJECTION: forcing a failure. [ 2309.346169] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.346229] do_mkdirat+0x150/0x2b0 [ 2309.348971] ? user_path_create+0xf0/0xf0 [ 2309.349531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.350229] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.350916] do_syscall_64+0x33/0x40 [ 2309.351414] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.352009] RIP: 0033:0x7f7635ef0b19 [ 2309.352492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.354941] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2309.355949] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2309.356786] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2309.357733] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.358567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2309.359504] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2309.360472] CPU: 1 PID: 14673 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2309.360710] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2309.361939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.361946] Call Trace: [ 2309.361968] dump_stack+0x107/0x167 [ 2309.365903] should_fail.cold+0x5/0xa [ 2309.366704] ? create_object.isra.0+0x3a/0xa20 [ 2309.367668] should_failslab+0x5/0x20 [ 2309.368466] kmem_cache_alloc+0x5b/0x310 [ 2309.369326] ? mark_held_locks+0x9e/0xe0 [ 2309.370182] create_object.isra.0+0x3a/0xa20 [ 2309.371103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.372177] kmem_cache_alloc_bulk+0x168/0x320 [ 2309.373142] io_submit_sqes+0x6f76/0x85c0 [ 2309.374038] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2309.375077] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.376120] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.377134] ? lock_downgrade+0x6d0/0x6d0 [ 2309.378007] ? find_held_lock+0x2c/0x110 [ 2309.378868] ? io_submit_sqes+0x85c0/0x85c0 [ 2309.379780] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.380795] ? wait_for_completion_io+0x270/0x270 [ 2309.381805] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.382768] ? vfs_write+0x354/0xa70 [ 2309.383535] ? fput_many+0x2f/0x1a0 [ 2309.384298] ? ksys_write+0x1a9/0x260 [ 2309.385077] ? __ia32_sys_read+0xb0/0xb0 [ 2309.385944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.387034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.388112] do_syscall_64+0x33/0x40 [ 2309.388890] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.389963] RIP: 0033:0x7f4f84a17b19 [ 2309.390742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.394598] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2309.396181] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2309.397686] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2309.399168] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2309.400636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.402110] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2309.419572] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2309.427833] FAULT_INJECTION: forcing a failure. [ 2309.427833] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.430330] CPU: 1 PID: 14686 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2309.431746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.433449] Call Trace: [ 2309.433989] dump_stack+0x107/0x167 [ 2309.434740] should_fail.cold+0x5/0xa [ 2309.435515] ? create_object.isra.0+0x3a/0xa20 [ 2309.436445] should_failslab+0x5/0x20 [ 2309.437217] kmem_cache_alloc+0x5b/0x310 [ 2309.438071] ? mark_held_locks+0x9e/0xe0 [ 2309.438907] create_object.isra.0+0x3a/0xa20 [ 2309.439805] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.440846] kmem_cache_alloc_bulk+0x168/0x320 [ 2309.441794] io_submit_sqes+0x6f76/0x85c0 [ 2309.442645] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2309.443656] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.444670] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.445677] ? lock_downgrade+0x6d0/0x6d0 09:35:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 35) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2309.446523] ? find_held_lock+0x2c/0x110 [ 2309.447622] ? io_submit_sqes+0x85c0/0x85c0 [ 2309.448514] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.449511] ? wait_for_completion_io+0x270/0x270 [ 2309.450495] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.451438] ? vfs_write+0x354/0xa70 [ 2309.452197] ? fput_many+0x2f/0x1a0 [ 2309.452934] ? ksys_write+0x1a9/0x260 [ 2309.453715] ? __ia32_sys_read+0xb0/0xb0 [ 2309.454541] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.455596] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.456644] do_syscall_64+0x33/0x40 [ 2309.457417] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.458449] RIP: 0033:0x7f0fb66d2b19 [ 2309.459201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.462903] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2309.464438] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2309.465879] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2309.467317] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2309.468919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.470544] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2309.501702] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:35:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2309.543211] FAULT_INJECTION: forcing a failure. [ 2309.543211] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.544742] CPU: 0 PID: 14696 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2309.545516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.546421] Call Trace: [ 2309.546718] dump_stack+0x107/0x167 [ 2309.547126] should_fail.cold+0x5/0xa [ 2309.547544] ? create_object.isra.0+0x3a/0xa20 [ 2309.548052] should_failslab+0x5/0x20 [ 2309.548480] kmem_cache_alloc+0x5b/0x310 [ 2309.548937] create_object.isra.0+0x3a/0xa20 [ 2309.549457] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.550018] __kmalloc_track_caller+0x177/0x370 [ 2309.550534] ? simple_xattr_set+0x93/0x610 [ 2309.551003] kstrdup+0x36/0x70 [ 2309.551360] simple_xattr_set+0x93/0x610 [ 2309.551807] kernfs_xattr_set+0x50/0x80 [ 2309.552253] selinux_kernfs_init_security+0x26d/0x4c0 [ 2309.552833] ? selinux_file_mprotect+0x610/0x610 [ 2309.553383] ? find_held_lock+0x2c/0x110 [ 2309.553850] ? __kernfs_new_node+0x2ad/0x860 [ 2309.554360] ? rwlock_bug.part.0+0x90/0x90 [ 2309.554844] security_kernfs_init_security+0x4e/0xb0 [ 2309.555428] __kernfs_new_node+0x531/0x860 [ 2309.555906] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2309.556449] ? kmemleak_alloc_percpu+0xaf/0x100 [ 2309.556979] ? pcpu_alloc+0x12a/0x1240 [ 2309.557439] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 2309.558027] kernfs_create_dir_ns+0x9c/0x230 [ 2309.558533] cgroup_mkdir+0x318/0xf50 [ 2309.558975] ? cgroup_destroy_locked+0x710/0x710 [ 2309.559522] kernfs_iop_mkdir+0x14d/0x1e0 [ 2309.559986] vfs_mkdir+0x493/0x700 [ 2309.560387] do_mkdirat+0x150/0x2b0 [ 2309.560797] ? user_path_create+0xf0/0xf0 [ 2309.561295] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.561890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.562489] do_syscall_64+0x33/0x40 [ 2309.562912] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.563492] RIP: 0033:0x7f7635ef0b19 [ 2309.563912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.566043] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2309.566931] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2309.567890] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2309.568698] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2309.569521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2309.570343] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:35:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 6) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x1100}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:55 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) [ 2309.606075] FAULT_INJECTION: forcing a failure. [ 2309.606075] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.608599] CPU: 1 PID: 14704 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2309.610116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.611956] Call Trace: [ 2309.612532] dump_stack+0x107/0x167 [ 2309.613336] should_fail.cold+0x5/0xa [ 2309.614167] ? create_object.isra.0+0x3a/0xa20 [ 2309.615180] should_failslab+0x5/0x20 [ 2309.616005] kmem_cache_alloc+0x5b/0x310 [ 2309.616895] ? mark_held_locks+0x9e/0xe0 [ 2309.617786] create_object.isra.0+0x3a/0xa20 [ 2309.618734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.619832] kmem_cache_alloc_bulk+0x168/0x320 [ 2309.620149] FAULT_INJECTION: forcing a failure. [ 2309.620149] name failslab, interval 1, probability 0, space 0, times 0 [ 2309.620817] io_submit_sqes+0x6f76/0x85c0 [ 2309.620843] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2309.620893] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.620915] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.626166] ? lock_downgrade+0x6d0/0x6d0 [ 2309.627065] ? find_held_lock+0x2c/0x110 [ 2309.627948] ? io_submit_sqes+0x85c0/0x85c0 [ 2309.628886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.629938] ? wait_for_completion_io+0x270/0x270 [ 2309.630980] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.631979] ? vfs_write+0x354/0xa70 [ 2309.632787] ? fput_many+0x2f/0x1a0 [ 2309.633590] ? ksys_write+0x1a9/0x260 [ 2309.634412] ? __ia32_sys_read+0xb0/0xb0 [ 2309.635292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.636419] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.637551] do_syscall_64+0x33/0x40 [ 2309.638367] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.639478] RIP: 0033:0x7f4f84a17b19 [ 2309.640282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.644234] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2309.645887] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2309.647418] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2309.648949] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2309.650485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.652016] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2309.653592] CPU: 0 PID: 14707 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2309.654367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2309.655288] Call Trace: [ 2309.655579] dump_stack+0x107/0x167 [ 2309.655988] should_fail.cold+0x5/0xa [ 2309.656412] ? create_object.isra.0+0x3a/0xa20 [ 2309.656916] should_failslab+0x5/0x20 [ 2309.657347] kmem_cache_alloc+0x5b/0x310 [ 2309.657800] ? mark_held_locks+0x9e/0xe0 [ 2309.658253] create_object.isra.0+0x3a/0xa20 [ 2309.658746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2309.659301] kmem_cache_alloc_bulk+0x168/0x320 [ 2309.659820] io_submit_sqes+0x6f76/0x85c0 [ 2309.660285] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2309.660833] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.661404] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2309.661940] ? lock_downgrade+0x6d0/0x6d0 09:35:55 executing program 6: perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) [ 2309.662396] ? find_held_lock+0x2c/0x110 [ 2309.663008] ? io_submit_sqes+0x85c0/0x85c0 [ 2309.663471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2309.663986] ? wait_for_completion_io+0x270/0x270 [ 2309.664506] ? rcu_read_lock_any_held+0x75/0xa0 [ 2309.664999] ? vfs_write+0x354/0xa70 [ 2309.665418] ? fput_many+0x2f/0x1a0 [ 2309.665807] ? ksys_write+0x1a9/0x260 [ 2309.666228] ? __ia32_sys_read+0xb0/0xb0 [ 2309.666660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2309.667215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2309.667792] do_syscall_64+0x33/0x40 [ 2309.668201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2309.668782] RIP: 0033:0x7f0fb66d2b19 [ 2309.669193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2309.671168] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2309.671978] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2309.672735] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2309.673496] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2309.674254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2309.675012] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 09:35:55 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x5, 0x7, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x11010, 0x0, 0xfffffffb, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/if_inet6\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x88) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000010695e844000000e4c81c72a55250f44be970266b56fc220dec11e8c86d7623ea592667ebb5f9123f8a922d37dd3b632e1a0d7678a9110d1bec90455aa5ac8557487b6cbfc83098843d2d13be56bd437825f926e88faab5171e5f12e6", @ANYRES32=r2, @ANYBLOB="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"]) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000239}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x80) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000015c0)={@local}, 0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="97000008003a00200000a2130005003300010000000a000ca6b40ee9759e1ebf93afee96b9a1c49900aaaaaaaaaa11000000000000335e61334740cb605810d981b0e6643390674f"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ftruncate(r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x380, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 09:35:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:35:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac44664", 0x24, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) preadv2(0xffffffffffffffff, 0x0, 0xfffffe97, 0x1000, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x4c20, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) signalfd4(r0, &(0x7f0000000140)={[0x1000]}, 0x8, 0x800) [ 2309.829818] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2309.838928] EXT4-fs (loop6): Unrecognized mount option "îiu#Ý}ã‘<œ£ø 8¹«¾ºƒ 501 [ 2309.838928] Ñ$7r [ 2309.838928] ˆÞݱÿñ'ïbžwi7thÇñšbÞ/Ïa™xbXÍÆΞ½˜¸ [ 2309.838928] ­ÃõÇX}+¨~wĪTæÓÐ2YÀã7lŸ¢­÷±kõt PC½S¡|ô¹§ [ 2309.838928] ®.Ž®¬!³rŒ­&~åÔ®J8óQ¶F²Ï:5;œÍ³Jí-ûWÑ¿Dšà×ò›n9¹¥j×Ý/ôqæÙ{ó`&æÓbÓ¿)”¦®®ÓÃZbôcäß±kß²$Üx¦2" or missing value [ 2309.855007] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:36:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x100000) 09:36:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 7) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:11 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x224100, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x2342, 0x4) clone3(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) openat(r3, &(0x7f0000000080)='./file0\x00', 0x2002, 0x68) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000140)="6b41998195535f5acdc3c3927cb2929f7f21ad8d99cf96a708181448dd7d374d0ae02665e6d226d525dafd3c24e215496d7255baf42def363d093ddf55e7087e20ef7ee99fd4fc1be28c24bba7b2870a31e69f73b26528af3bafe5d761635400e4ec641030e4a68f6c303895d0f1452f8d7c57640d056edd6d6c0b3d87f522def583a75fe2d8b7be514d99f0d71cf9376c38afc90df7d2ec58e480b8c59102f4d92370836014701097a6b23592859ad6e48ac25a6877ac6f63ef4a25038556be62f22c4f3b44ad7479521f18bab05d83f30de871206c823116ab043b4161febbddae048e0c", 0xe5}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000000c0)="ab87454e73aeae1cf89490942baf0081ad79c5cbf8ddda2545e5", 0x1a}, {&(0x7f0000000240)="6aa344e6133a14083d798abb0ec64b0726ee2bccb2755097218f2ac9a7a62abbf2466119e77432b111f3aaef5478e0377c7d678396c423321c4847cfbe6623a01a650e70d1208f3d1022a0fff1e77ee29aa0629fcb6ebd8f198fdaf6a70abf6bdf9e61bb781bac78ed41015359bb46111b3a58fb2f5e15faec3b29", 0x7b}, {&(0x7f00000002c0)="f1169386ea28a1eed73721271186e8d1caf5bb186906364a8297d1515a091b1e641126455349d9a90a7e49e70dbbcbbc910484b0ee07906e118ed04625167079", 0x40}], 0x5) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000140), 0x0) 09:36:11 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 36) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:36:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 7) 09:36:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x1000003) r0 = socket$inet(0x2, 0x4, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0xff) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x47c0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) shutdown(r0, 0x1) syz_io_uring_setup(0x6ad4, &(0x7f00000000c0)={0x0, 0x198c, 0x8, 0x2, 0xae}, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x0, 0x7, 0x8000}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x2c1) unshare(0x48020200) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) [ 2325.865248] FAULT_INJECTION: forcing a failure. [ 2325.865248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2325.866949] CPU: 0 PID: 14741 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2325.867868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.868956] Call Trace: [ 2325.869312] dump_stack+0x107/0x167 [ 2325.869861] should_fail.cold+0x5/0xa [ 2325.870383] __alloc_pages_nodemask+0x182/0x600 [ 2325.870992] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2325.871625] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2325.872430] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2325.873161] ? lock_downgrade+0x6d0/0x6d0 [ 2325.873737] ? mark_held_locks+0x9e/0xe0 [ 2325.874280] alloc_pages_vma+0xbb/0x410 [ 2325.874807] handle_mm_fault+0x152f/0x3500 [ 2325.875367] ? do_raw_spin_lock+0x121/0x260 [ 2325.875925] ? rwlock_bug.part.0+0x90/0x90 [ 2325.876472] ? __pmd_alloc+0x5e0/0x5e0 [ 2325.877022] __get_user_pages+0x61b/0x1380 [ 2325.877652] ? follow_page_mask+0x1900/0x1900 [ 2325.877902] FAULT_INJECTION: forcing a failure. [ 2325.877902] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.878239] ? down_read+0x10f/0x430 [ 2325.880216] ? down_write+0x160/0x160 [ 2325.880728] get_user_pages_unlocked+0x18a/0x690 [ 2325.881344] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2325.882093] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2325.882733] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2325.883481] ? pin_user_pages_unlocked+0x80/0x80 [ 2325.884142] ? trace_hardirqs_on+0x5b/0x180 [ 2325.884725] get_user_pages_fast+0x66/0xa0 [ 2325.885305] iov_iter_get_pages+0x297/0xf40 [ 2325.885957] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2325.886641] ? mempool_resize+0x7d0/0x7d0 [ 2325.887211] bio_iov_iter_get_pages+0x22a/0x1200 [ 2325.887921] ? bvec_alloc+0x17e/0x2f0 [ 2325.888458] ? bio_alloc_bioset+0x2a1/0x600 [ 2325.889060] ? bio_add_pc_page+0x100/0x100 [ 2325.889649] ? bvec_alloc+0x240/0x2f0 [ 2325.890162] ? iov_iter_npages+0x1fd/0xa70 [ 2325.890758] ? ext4_iomap_begin+0x1a0/0x700 [ 2325.891340] iomap_dio_bio_actor+0x77a/0xef0 [ 2325.892011] iomap_dio_actor+0x36f/0x560 [ 2325.892591] iomap_apply+0x289/0x810 [ 2325.893080] ? iomap_dio_rw+0x90/0x90 [ 2325.893611] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2325.894398] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2325.895117] ? mark_held_locks+0x9e/0xe0 [ 2325.895694] ? filemap_check_errors+0xa5/0x150 [ 2325.896322] __iomap_dio_rw+0x6cd/0x1110 [ 2325.896850] ? iomap_dio_rw+0x90/0x90 [ 2325.897356] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2325.898039] ? down_read+0x10f/0x430 [ 2325.898557] ? down_write+0x160/0x160 [ 2325.899071] iomap_dio_rw+0x31/0x90 [ 2325.899612] ext4_file_read_iter+0x2c7/0x4c0 [ 2325.900209] new_sync_read+0x424/0x6f0 [ 2325.900720] ? fsnotify+0xf50/0xf50 [ 2325.901188] ? ksys_lseek+0x1b0/0x1b0 [ 2325.901725] ? _cond_resched+0x12/0x80 [ 2325.902266] ? avc_policy_seqno+0x9/0x70 [ 2325.902818] ? selinux_file_permission+0x92/0x520 [ 2325.903489] ? __fget_files+0x296/0x4c0 [ 2325.904051] vfs_read+0x457/0x580 [ 2325.904535] ksys_read+0x12d/0x260 [ 2325.905004] ? vfs_write+0xa70/0xa70 [ 2325.905562] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.906262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.906979] do_syscall_64+0x33/0x40 [ 2325.907557] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2325.908273] RIP: 0033:0x7f35a254fb19 [ 2325.908796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.911372] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2325.912462] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2325.913427] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2325.914431] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.915420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.916387] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2325.917401] CPU: 1 PID: 14748 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2325.918390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.919478] Call Trace: [ 2325.919838] dump_stack+0x107/0x167 [ 2325.920320] should_fail.cold+0x5/0xa [ 2325.920825] ? create_object.isra.0+0x3a/0xa20 [ 2325.921423] should_failslab+0x5/0x20 [ 2325.921970] kmem_cache_alloc+0x5b/0x310 [ 2325.922496] ? mark_held_locks+0x9e/0xe0 [ 2325.923008] create_object.isra.0+0x3a/0xa20 [ 2325.923578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.924288] kmem_cache_alloc_bulk+0x168/0x320 [ 2325.924930] io_submit_sqes+0x6f76/0x85c0 [ 2325.925515] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2325.926170] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2325.926870] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2325.927518] ? lock_downgrade+0x6d0/0x6d0 [ 2325.928059] ? find_held_lock+0x2c/0x110 [ 2325.928600] ? io_submit_sqes+0x85c0/0x85c0 [ 2325.929165] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2325.929851] ? wait_for_completion_io+0x270/0x270 [ 2325.930494] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.931116] ? vfs_write+0x354/0xa70 [ 2325.931618] ? fput_many+0x2f/0x1a0 [ 2325.932093] ? ksys_write+0x1a9/0x260 [ 2325.932594] ? __ia32_sys_read+0xb0/0xb0 [ 2325.933133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.933854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.934511] do_syscall_64+0x33/0x40 [ 2325.935068] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2325.935805] RIP: 0033:0x7f0fb66d2b19 [ 2325.936320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.938847] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2325.939847] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2325.940779] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2325.941755] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2325.942722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.943665] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2325.949692] FAULT_INJECTION: forcing a failure. [ 2325.949692] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.951295] CPU: 1 PID: 14739 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2325.952208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.953305] Call Trace: [ 2325.953690] dump_stack+0x107/0x167 [ 2325.954180] should_fail.cold+0x5/0xa [ 2325.954707] ? create_object.isra.0+0x3a/0xa20 [ 2325.955304] should_failslab+0x5/0x20 [ 2325.955801] kmem_cache_alloc+0x5b/0x310 [ 2325.956337] ? mark_held_locks+0x9e/0xe0 [ 2325.956880] create_object.isra.0+0x3a/0xa20 [ 2325.957451] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.958147] kmem_cache_alloc_bulk+0x168/0x320 [ 2325.958755] io_submit_sqes+0x6f76/0x85c0 [ 2325.959299] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2325.959940] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2325.960590] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2325.961228] ? lock_downgrade+0x6d0/0x6d0 [ 2325.961802] ? find_held_lock+0x2c/0x110 [ 2325.962341] ? io_submit_sqes+0x85c0/0x85c0 [ 2325.962902] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2325.963540] ? wait_for_completion_io+0x270/0x270 [ 2325.964172] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.964793] ? vfs_write+0x354/0xa70 [ 2325.965293] ? fput_many+0x2f/0x1a0 [ 2325.965824] ? ksys_write+0x1a9/0x260 [ 2325.966334] ? __ia32_sys_read+0xb0/0xb0 [ 2325.966868] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.967555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.968300] do_syscall_64+0x33/0x40 [ 2325.968835] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2325.969562] RIP: 0033:0x7f4f84a17b19 [ 2325.970053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.972494] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2325.973525] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2325.974480] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2325.975436] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2325.976377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.977294] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2325.989088] FAULT_INJECTION: forcing a failure. [ 2325.989088] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.990959] CPU: 1 PID: 14738 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2325.991919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.993105] Call Trace: [ 2325.993525] dump_stack+0x107/0x167 [ 2325.994063] should_fail.cold+0x5/0xa [ 2325.994574] should_failslab+0x5/0x20 [ 2325.995076] __kmalloc_track_caller+0x79/0x370 [ 2325.995677] ? kstrdup_const+0x53/0x80 [ 2325.996197] kstrdup+0x36/0x70 [ 2325.996626] kstrdup_const+0x53/0x80 [ 2325.997130] __kernfs_new_node+0x9d/0x860 [ 2325.997724] ? lock_chain_count+0x20/0x20 [ 2325.998374] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2325.999098] ? __lock_acquire+0x1657/0x5b00 [ 2325.999566] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2325.999665] ? perf_trace_lock+0xac/0x490 [ 2326.001365] ? __lockdep_reset_lock+0x180/0x180 [ 2326.002027] kernfs_new_node+0x93/0x120 [ 2326.002554] __kernfs_create_file+0x51/0x350 [ 2326.003136] cgroup_addrm_files+0x3c8/0x9b0 [ 2326.003717] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2326.004380] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2326.004973] ? cgroup_file_name+0x210/0x210 [ 2326.005579] ? cgroup_propagate_control+0x3b9/0x520 [ 2326.006259] css_populate_dir+0x304/0x460 [ 2326.006904] cgroup_mkdir+0xa13/0xf50 [ 2326.007460] ? cgroup_destroy_locked+0x710/0x710 [ 2326.008159] kernfs_iop_mkdir+0x14d/0x1e0 [ 2326.008728] vfs_mkdir+0x493/0x700 [ 2326.009213] do_mkdirat+0x150/0x2b0 [ 2326.009756] ? user_path_create+0xf0/0xf0 [ 2326.010337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.011111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2326.011838] do_syscall_64+0x33/0x40 [ 2326.012277] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2326.012389] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2326.014343] RIP: 0033:0x7f7635ef0b19 [ 2326.014875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.017450] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2326.018531] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2326.019574] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2326.020587] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.021608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2326.022648] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2326.023938] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 09:36:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x140000) 09:36:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3100}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 8) 09:36:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 37) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2326.297269] FAULT_INJECTION: forcing a failure. [ 2326.297269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2326.299379] CPU: 1 PID: 14771 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2326.300367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.301501] Call Trace: [ 2326.301887] dump_stack+0x107/0x167 [ 2326.302399] should_fail.cold+0x5/0xa [ 2326.302926] __alloc_pages_nodemask+0x182/0x600 [ 2326.303568] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2326.304263] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2326.305087] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2326.305867] ? lock_downgrade+0x6d0/0x6d0 [ 2326.306466] ? mark_held_locks+0x9e/0xe0 [ 2326.307050] alloc_pages_vma+0xbb/0x410 [ 2326.307630] handle_mm_fault+0x152f/0x3500 [ 2326.308237] ? do_raw_spin_lock+0x121/0x260 [ 2326.308830] ? rwlock_bug.part.0+0x90/0x90 [ 2326.309412] ? __pmd_alloc+0x5e0/0x5e0 [ 2326.309972] __get_user_pages+0x61b/0x1380 [ 2326.310590] ? follow_page_mask+0x1900/0x1900 [ 2326.311232] ? down_read+0x10f/0x430 [ 2326.311757] ? down_write+0x160/0x160 [ 2326.312304] get_user_pages_unlocked+0x18a/0x690 [ 2326.312957] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2326.313750] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2326.314420] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2326.315219] ? pin_user_pages_unlocked+0x80/0x80 [ 2326.315892] ? trace_hardirqs_on+0x5b/0x180 [ 2326.316507] get_user_pages_fast+0x66/0xa0 [ 2326.317075] iov_iter_get_pages+0x297/0xf40 [ 2326.317730] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2326.318428] ? mempool_resize+0x7d0/0x7d0 [ 2326.318992] bio_iov_iter_get_pages+0x22a/0x1200 [ 2326.319637] ? bvec_alloc+0x17e/0x2f0 [ 2326.320152] ? bio_alloc_bioset+0x2a1/0x600 [ 2326.320755] ? bio_add_pc_page+0x100/0x100 [ 2326.321313] ? bvec_alloc+0x240/0x2f0 [ 2326.321830] ? iov_iter_npages+0x1fd/0xa70 [ 2326.322384] ? ext4_iomap_begin+0x1a0/0x700 [ 2326.322963] iomap_dio_bio_actor+0x77a/0xef0 [ 2326.323579] iomap_dio_actor+0x36f/0x560 [ 2326.324111] iomap_apply+0x289/0x810 [ 2326.324583] ? iomap_dio_rw+0x90/0x90 [ 2326.325076] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2326.325923] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2326.326649] ? mark_held_locks+0x9e/0xe0 [ 2326.327220] ? filemap_check_errors+0xa5/0x150 [ 2326.327851] __iomap_dio_rw+0x6cd/0x1110 [ 2326.328049] FAULT_INJECTION: forcing a failure. [ 2326.328049] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.328407] ? iomap_dio_rw+0x90/0x90 [ 2326.328445] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2326.331106] ? down_read+0x10f/0x430 [ 2326.331625] ? down_write+0x160/0x160 [ 2326.332144] iomap_dio_rw+0x31/0x90 [ 2326.332631] ext4_file_read_iter+0x2c7/0x4c0 [ 2326.333203] new_sync_read+0x424/0x6f0 [ 2326.333766] ? fsnotify+0xf50/0xf50 [ 2326.334260] ? ksys_lseek+0x1b0/0x1b0 [ 2326.334840] ? _cond_resched+0x12/0x80 [ 2326.335376] ? avc_policy_seqno+0x9/0x70 [ 2326.335936] ? selinux_file_permission+0x92/0x520 [ 2326.336606] ? __fget_files+0x296/0x4c0 [ 2326.337186] vfs_read+0x457/0x580 [ 2326.337720] ksys_read+0x12d/0x260 [ 2326.338186] ? vfs_write+0xa70/0xa70 [ 2326.338670] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.339384] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2326.340093] do_syscall_64+0x33/0x40 [ 2326.340603] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2326.341300] RIP: 0033:0x7f35a254fb19 [ 2326.341825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.344384] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2326.345447] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2326.346485] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2326.347494] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.348463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.349447] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2326.350520] CPU: 0 PID: 14773 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2326.351488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2326.352563] Call Trace: [ 2326.352920] dump_stack+0x107/0x167 [ 2326.353406] should_fail.cold+0x5/0xa [ 2326.353945] ? create_object.isra.0+0x3a/0xa20 [ 2326.354560] should_failslab+0x5/0x20 [ 2326.355066] kmem_cache_alloc+0x5b/0x310 [ 2326.355608] ? mark_lock+0xf5/0x2df0 [ 2326.356104] create_object.isra.0+0x3a/0xa20 [ 2326.356703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2326.357389] __kmalloc_track_caller+0x177/0x370 [ 2326.358047] ? kstrdup_const+0x53/0x80 [ 2326.358557] kstrdup+0x36/0x70 [ 2326.358985] kstrdup_const+0x53/0x80 [ 2326.359471] __kernfs_new_node+0x9d/0x860 [ 2326.360022] ? lock_chain_count+0x20/0x20 [ 2326.360566] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2326.361196] ? __lock_acquire+0x1657/0x5b00 [ 2326.361821] ? perf_trace_lock+0xac/0x490 [ 2326.362393] ? __lockdep_reset_lock+0x180/0x180 [ 2326.363014] kernfs_new_node+0x93/0x120 [ 2326.363558] __kernfs_create_file+0x51/0x350 [ 2326.364142] cgroup_addrm_files+0x3c8/0x9b0 [ 2326.364724] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2326.365384] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2326.366029] ? cgroup_file_name+0x210/0x210 [ 2326.366611] ? cgroup_propagate_control+0x3b9/0x520 [ 2326.367296] css_populate_dir+0x304/0x460 [ 2326.367862] cgroup_mkdir+0xa13/0xf50 [ 2326.368380] ? cgroup_destroy_locked+0x710/0x710 [ 2326.369017] kernfs_iop_mkdir+0x14d/0x1e0 [ 2326.369608] vfs_mkdir+0x493/0x700 [ 2326.370090] do_mkdirat+0x150/0x2b0 [ 2326.370604] ? user_path_create+0xf0/0xf0 [ 2326.371158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2326.371859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2326.372581] do_syscall_64+0x33/0x40 [ 2326.373090] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2326.373823] RIP: 0033:0x7f7635ef0b19 [ 2326.374338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2326.376845] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2326.377942] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2326.378934] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2326.379880] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.380844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2326.381825] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:36:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000005800210c0000000000000000000000000c000100000000000000000056204f6d72475e1ed300628977444fb75c5d4e356138b94ef9fb52ecf1f8db53a789b97b303acbe667edefd58285f57183022a7417f1175c275d54a12ea4235cf3167c05748e3d9001a84767fd74c0b952cdf9e99cb842101749fac8623b41fc852ece1f707fb51ee5df635933d06e17799cacc198a8974d3157592bebd08b0cacb8d10cb7aac7a77bedafc91cb806b970d3224a7667f82ed200563b1e5b8fb369"], 0x20}}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0xff, 0x3, 0x5, 0x0, 0x101, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3856a421, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x3, 0x5, 0x2, 0x1, 0x7ff, 0x4, 0x3, 0x0, 0x5712ed12, 0x0, 0x200040000000000}, 0xffffffffffffffff, 0xf, r1, 0xa) [ 2340.337091] FAULT_INJECTION: forcing a failure. [ 2340.337091] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.338392] netlink: 'syz-executor.6': attribute type 1 has an invalid length. [ 2340.338552] CPU: 1 PID: 14790 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2340.340878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.341851] Call Trace: [ 2340.342170] dump_stack+0x107/0x167 [ 2340.342601] should_fail.cold+0x5/0xa [ 2340.343053] ? create_object.isra.0+0x3a/0xa20 [ 2340.343596] should_failslab+0x5/0x20 [ 2340.344043] kmem_cache_alloc+0x5b/0x310 [ 2340.344519] ? mark_held_locks+0x9e/0xe0 [ 2340.344994] create_object.isra.0+0x3a/0xa20 [ 2340.345513] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2340.346135] kmem_cache_alloc_bulk+0x168/0x320 [ 2340.346678] io_submit_sqes+0x6f76/0x85c0 [ 2340.347185] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2340.347790] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2340.348398] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2340.348982] ? lock_downgrade+0x6d0/0x6d0 [ 2340.349492] ? find_held_lock+0x2c/0x110 [ 2340.350016] ? io_submit_sqes+0x85c0/0x85c0 [ 2340.350557] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2340.351129] ? wait_for_completion_io+0x270/0x270 [ 2340.351712] ? rcu_read_lock_any_held+0x75/0xa0 [ 2340.351803] netlink: 'syz-executor.6': attribute type 1 has an invalid length. [ 2340.352266] ? vfs_write+0x354/0xa70 [ 2340.352287] ? fput_many+0x2f/0x1a0 [ 2340.354676] ? ksys_write+0x1a9/0x260 [ 2340.355135] ? __ia32_sys_read+0xb0/0xb0 [ 2340.355832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.356603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.357232] do_syscall_64+0x33/0x40 [ 2340.357698] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2340.358322] RIP: 0033:0x7f4f84a17b19 [ 2340.358776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.360994] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2340.361914] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2340.362775] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2340.363627] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2340.364487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2340.365342] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 09:36:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4007) 09:36:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 9) 09:36:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 38) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:36:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0xec2, &(0x7f0000000180)={0x0, 0xd219, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x2833) epoll_create1(0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000005613ca57e3c2"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) [ 2340.376049] FAULT_INJECTION: forcing a failure. [ 2340.376049] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.377550] CPU: 1 PID: 14783 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2340.378378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.379274] FAULT_INJECTION: forcing a failure. [ 2340.379274] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.379351] Call Trace: [ 2340.379372] dump_stack+0x107/0x167 [ 2340.382358] should_fail.cold+0x5/0xa [ 2340.382817] should_failslab+0x5/0x20 [ 2340.383262] __kmalloc_track_caller+0x79/0x370 [ 2340.383807] ? sidtab_sid2str_get+0x17e/0x720 [ 2340.384333] kmemdup+0x23/0x50 [ 2340.384716] sidtab_sid2str_get+0x17e/0x720 [ 2340.385230] sidtab_entry_to_string+0x33/0x110 [ 2340.385793] security_sid_to_context_core+0x33c/0x5d0 [ 2340.386410] selinux_kernfs_init_security+0x239/0x4c0 [ 2340.387005] ? selinux_file_mprotect+0x610/0x610 [ 2340.387561] ? find_held_lock+0x2c/0x110 [ 2340.388047] ? __kernfs_new_node+0x2ad/0x860 [ 2340.388573] ? rwlock_bug.part.0+0x90/0x90 [ 2340.389070] security_kernfs_init_security+0x4e/0xb0 [ 2340.389691] __kernfs_new_node+0x531/0x860 [ 2340.390195] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2340.390753] ? __lock_acquire+0x1657/0x5b00 [ 2340.391281] ? perf_trace_lock+0xac/0x490 [ 2340.391781] ? __lockdep_reset_lock+0x180/0x180 [ 2340.392350] kernfs_new_node+0x93/0x120 [ 2340.392828] __kernfs_create_file+0x51/0x350 [ 2340.393357] cgroup_addrm_files+0x3c8/0x9b0 [ 2340.393888] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2340.394487] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2340.395010] ? cgroup_file_name+0x210/0x210 [ 2340.395524] ? cgroup_propagate_control+0x3b9/0x520 [ 2340.396124] css_populate_dir+0x304/0x460 [ 2340.396628] cgroup_mkdir+0xa13/0xf50 [ 2340.397092] ? cgroup_destroy_locked+0x710/0x710 [ 2340.397675] kernfs_iop_mkdir+0x14d/0x1e0 [ 2340.398180] vfs_mkdir+0x493/0x700 [ 2340.398607] do_mkdirat+0x150/0x2b0 [ 2340.399030] ? user_path_create+0xf0/0xf0 [ 2340.399526] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.400149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.400768] do_syscall_64+0x33/0x40 [ 2340.401209] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2340.401822] RIP: 0033:0x7f7635ef0b19 [ 2340.402264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.404404] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2340.405288] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2340.406132] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2340.406958] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.407787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2340.408612] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2340.409520] CPU: 0 PID: 14794 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2340.409703] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2340.410941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.410950] Call Trace: [ 2340.410979] dump_stack+0x107/0x167 [ 2340.414734] should_fail.cold+0x5/0xa [ 2340.415529] ? create_object.isra.0+0x3a/0xa20 [ 2340.415552] should_failslab+0x5/0x20 [ 2340.415572] kmem_cache_alloc+0x5b/0x310 [ 2340.415592] ? mark_held_locks+0x9e/0xe0 [ 2340.415615] create_object.isra.0+0x3a/0xa20 [ 2340.415634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2340.415660] kmem_cache_alloc_bulk+0x168/0x320 [ 2340.415686] io_submit_sqes+0x6f76/0x85c0 [ 2340.415710] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2340.415755] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2340.415773] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2340.415797] ? lock_downgrade+0x6d0/0x6d0 [ 2340.415813] ? find_held_lock+0x2c/0x110 [ 2340.415838] ? io_submit_sqes+0x85c0/0x85c0 [ 2340.415867] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2340.415891] ? wait_for_completion_io+0x270/0x270 [ 2340.415914] ? rcu_read_lock_any_held+0x75/0xa0 [ 2340.415931] ? vfs_write+0x354/0xa70 [ 2340.415954] ? fput_many+0x2f/0x1a0 [ 2340.415973] ? ksys_write+0x1a9/0x260 [ 2340.415993] ? __ia32_sys_read+0xb0/0xb0 [ 2340.416016] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.416034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.416058] do_syscall_64+0x33/0x40 [ 2340.416079] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2340.416091] RIP: 0033:0x7f0fb66d2b19 [ 2340.416109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.416119] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2340.416140] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2340.416151] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2340.416162] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2340.416174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2340.416185] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2340.420668] FAULT_INJECTION: forcing a failure. [ 2340.420668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:36:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 10) [ 2340.420681] CPU: 1 PID: 14799 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2340.420688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.420691] Call Trace: [ 2340.420702] dump_stack+0x107/0x167 [ 2340.420717] should_fail.cold+0x5/0xa [ 2340.420732] __alloc_pages_nodemask+0x182/0x600 [ 2340.420745] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2340.420758] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 09:36:26 executing program 6: unshare(0x20080) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x33, 0x100, 0x70bd2b, 0x25dfdbff, {0x1b}, [@typed={0xa, 0x12, 0x0, 0x0, @str='\\!.\'{\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa0}, 0x810) mq_timedreceive(r4, &(0x7f0000000280)=""/219, 0xdb, 0x7fff, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x202) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2340.420775] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2340.420786] ? lock_downgrade+0x6d0/0x6d0 [ 2340.420797] ? mark_held_locks+0x9e/0xe0 [ 2340.420813] alloc_pages_vma+0xbb/0x410 [ 2340.420830] handle_mm_fault+0x152f/0x3500 [ 2340.420845] ? do_raw_spin_lock+0x121/0x260 [ 2340.420857] ? rwlock_bug.part.0+0x90/0x90 [ 2340.420869] ? __pmd_alloc+0x5e0/0x5e0 [ 2340.420896] __get_user_pages+0x61b/0x1380 09:36:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b400d) [ 2340.420916] ? follow_page_mask+0x1900/0x1900 [ 2340.420928] ? down_read+0x10f/0x430 [ 2340.420940] ? down_write+0x160/0x160 [ 2340.420960] get_user_pages_unlocked+0x18a/0x690 [ 2340.420974] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2340.420988] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2340.421008] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2340.421041] ? pin_user_pages_unlocked+0x80/0x80 09:36:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 39) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2340.421055] ? trace_hardirqs_on+0x5b/0x180 [ 2340.421070] get_user_pages_fast+0x66/0xa0 [ 2340.421084] iov_iter_get_pages+0x297/0xf40 [ 2340.421100] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2340.421112] ? mempool_resize+0x7d0/0x7d0 [ 2340.421131] bio_iov_iter_get_pages+0x22a/0x1200 [ 2340.421147] ? bvec_alloc+0x17e/0x2f0 [ 2340.421160] ? bio_alloc_bioset+0x2a1/0x600 [ 2340.421171] ? bio_add_pc_page+0x100/0x100 [ 2340.421182] ? bvec_alloc+0x240/0x2f0 [ 2340.421195] ? iov_iter_npages+0x1fd/0xa70 [ 2340.421207] ? ext4_iomap_begin+0x1a0/0x700 [ 2340.421223] iomap_dio_bio_actor+0x77a/0xef0 [ 2340.421245] iomap_dio_actor+0x36f/0x560 [ 2340.421262] iomap_apply+0x289/0x810 [ 2340.421274] ? iomap_dio_rw+0x90/0x90 [ 2340.421287] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2340.421305] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2340.421316] ? mark_held_locks+0x9e/0xe0 [ 2340.421336] ? filemap_check_errors+0xa5/0x150 [ 2340.421352] __iomap_dio_rw+0x6cd/0x1110 [ 2340.421362] ? iomap_dio_rw+0x90/0x90 [ 2340.421385] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2340.421408] ? down_read+0x10f/0x430 [ 2340.421420] ? down_write+0x160/0x160 [ 2340.421436] iomap_dio_rw+0x31/0x90 [ 2340.421450] ext4_file_read_iter+0x2c7/0x4c0 [ 2340.421464] new_sync_read+0x424/0x6f0 [ 2340.421476] ? fsnotify+0xf50/0xf50 [ 2340.421487] ? ksys_lseek+0x1b0/0x1b0 [ 2340.421499] ? _cond_resched+0x12/0x80 [ 2340.421512] ? avc_policy_seqno+0x9/0x70 [ 2340.421523] ? selinux_file_permission+0x92/0x520 [ 2340.421539] ? __fget_files+0x296/0x4c0 [ 2340.421558] vfs_read+0x457/0x580 [ 2340.421574] ksys_read+0x12d/0x260 [ 2340.421586] ? vfs_write+0xa70/0xa70 [ 2340.421600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.421611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.421626] do_syscall_64+0x33/0x40 [ 2340.421638] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2340.421646] RIP: 0033:0x7f35a254fb19 [ 2340.421676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.421682] RSP: 002b:00007f359faa4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2340.421694] RAX: ffffffffffffffda RBX: 00007f35a2663020 RCX: 00007f35a254fb19 [ 2340.421701] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2340.421707] RBP: 00007f359faa41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.421714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2340.421720] R13: 00007ffede2ce5ff R14: 00007f359faa4300 R15: 0000000000022000 [ 2340.468853] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2340.492150] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2340.552789] FAULT_INJECTION: forcing a failure. [ 2340.552789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2340.552812] CPU: 0 PID: 14808 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2340.552822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.552829] Call Trace: [ 2340.552853] dump_stack+0x107/0x167 [ 2340.552878] should_fail.cold+0x5/0xa [ 2340.552905] __alloc_pages_nodemask+0x182/0x600 [ 2340.552925] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2340.552947] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2340.552975] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2340.552996] ? lock_downgrade+0x6d0/0x6d0 [ 2340.553013] ? mark_held_locks+0x9e/0xe0 [ 2340.553041] alloc_pages_vma+0xbb/0x410 [ 2340.553066] handle_mm_fault+0x152f/0x3500 [ 2340.553092] ? do_raw_spin_lock+0x121/0x260 [ 2340.553114] ? rwlock_bug.part.0+0x90/0x90 [ 2340.553133] ? __pmd_alloc+0x5e0/0x5e0 [ 2340.553182] __get_user_pages+0x61b/0x1380 [ 2340.553216] ? follow_page_mask+0x1900/0x1900 [ 2340.553238] ? down_read+0x10f/0x430 [ 2340.553258] ? down_write+0x160/0x160 [ 2340.553291] get_user_pages_unlocked+0x18a/0x690 [ 2340.553314] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2340.553338] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2340.553375] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2340.553439] ? pin_user_pages_unlocked+0x80/0x80 [ 2340.553462] ? trace_hardirqs_on+0x5b/0x180 [ 2340.553488] get_user_pages_fast+0x66/0xa0 [ 2340.553512] iov_iter_get_pages+0x297/0xf40 [ 2340.553537] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2340.553557] ? mempool_resize+0x7d0/0x7d0 [ 2340.553589] bio_iov_iter_get_pages+0x22a/0x1200 [ 2340.553616] ? bvec_alloc+0x17e/0x2f0 [ 2340.553639] ? bio_alloc_bioset+0x2a1/0x600 [ 2340.553667] ? bio_add_pc_page+0x100/0x100 [ 2340.553686] ? bvec_alloc+0x240/0x2f0 [ 2340.553708] ? iov_iter_npages+0x1fd/0xa70 [ 2340.553727] ? ext4_iomap_begin+0x1a0/0x700 [ 2340.553753] iomap_dio_bio_actor+0x77a/0xef0 [ 2340.553791] iomap_dio_actor+0x36f/0x560 [ 2340.553819] iomap_apply+0x289/0x810 [ 2340.553840] ? iomap_dio_rw+0x90/0x90 [ 2340.553863] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2340.553893] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2340.553911] ? mark_held_locks+0x9e/0xe0 [ 2340.553945] ? filemap_check_errors+0xa5/0x150 [ 2340.553971] __iomap_dio_rw+0x6cd/0x1110 [ 2340.553988] ? iomap_dio_rw+0x90/0x90 [ 2340.554028] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2340.554059] ? down_read+0x10f/0x430 [ 2340.554079] ? down_write+0x160/0x160 [ 2340.554106] iomap_dio_rw+0x31/0x90 [ 2340.554129] ext4_file_read_iter+0x2c7/0x4c0 [ 2340.604188] FAULT_INJECTION: forcing a failure. [ 2340.604188] name failslab, interval 1, probability 0, space 0, times 0 [ 2340.604663] new_sync_read+0x424/0x6f0 [ 2340.604683] ? fsnotify+0xf50/0xf50 [ 2340.604704] ? ksys_lseek+0x1b0/0x1b0 [ 2340.658031] ? _cond_resched+0x12/0x80 [ 2340.658824] ? avc_policy_seqno+0x9/0x70 [ 2340.659642] ? selinux_file_permission+0x92/0x520 [ 2340.660621] ? __fget_files+0x296/0x4c0 [ 2340.661433] vfs_read+0x457/0x580 [ 2340.662160] ksys_read+0x12d/0x260 [ 2340.662884] ? vfs_write+0xa70/0xa70 [ 2340.663648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.664707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.665769] do_syscall_64+0x33/0x40 [ 2340.666525] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2340.667565] RIP: 0033:0x7f35a254fb19 [ 2340.668319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.672060] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2340.673601] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2340.675062] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2340.676504] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.677958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2340.679400] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2340.680872] CPU: 1 PID: 14813 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2340.681675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.682600] Call Trace: [ 2340.682898] dump_stack+0x107/0x167 [ 2340.683308] should_fail.cold+0x5/0xa [ 2340.683742] ? create_object.isra.0+0x3a/0xa20 [ 2340.684250] should_failslab+0x5/0x20 [ 2340.684681] kmem_cache_alloc+0x5b/0x310 [ 2340.685139] create_object.isra.0+0x3a/0xa20 [ 2340.685632] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2340.686218] kmem_cache_alloc+0x159/0x310 [ 2340.686696] __kernfs_new_node+0xd4/0x860 [ 2340.687158] ? lock_chain_count+0x20/0x20 [ 2340.687623] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2340.688145] ? __lock_acquire+0x1657/0x5b00 [ 2340.688617] ? perf_trace_lock+0xac/0x490 [ 2340.689084] ? __lockdep_reset_lock+0x180/0x180 [ 2340.689610] kernfs_new_node+0x93/0x120 [ 2340.690086] __kernfs_create_file+0x51/0x350 [ 2340.690588] cgroup_addrm_files+0x3c8/0x9b0 [ 2340.691074] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2340.691637] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2340.692130] ? cgroup_file_name+0x210/0x210 [ 2340.692606] ? cgroup_propagate_control+0x3b9/0x520 [ 2340.693181] css_populate_dir+0x304/0x460 [ 2340.693645] cgroup_mkdir+0xa13/0xf50 [ 2340.694081] ? cgroup_destroy_locked+0x710/0x710 [ 2340.694610] kernfs_iop_mkdir+0x14d/0x1e0 [ 2340.695068] vfs_mkdir+0x493/0x700 [ 2340.695524] do_mkdirat+0x150/0x2b0 [ 2340.695935] ? user_path_create+0xf0/0xf0 [ 2340.696400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.696982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.697558] do_syscall_64+0x33/0x40 [ 2340.697989] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2340.698558] RIP: 0033:0x7f7635ef0b19 [ 2340.698974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2340.701020] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2340.701873] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2340.702662] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2340.703460] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2340.704232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2340.705019] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:36:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0xc805}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1da688) 09:36:26 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(r0, &(0x7f0000000140)='./file1\x00', 0x80000, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x202202, 0x65) 09:36:26 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x201b4000) 09:36:26 executing program 6: unshare(0x20080) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x33, 0x100, 0x70bd2b, 0x25dfdbff, {0x1b}, [@typed={0xa, 0x12, 0x0, 0x0, @str='\\!.\'{\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa0}, 0x810) mq_timedreceive(r4, &(0x7f0000000280)=""/219, 0xdb, 0x7fff, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x202) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2340.966632] FAULT_INJECTION: forcing a failure. [ 2340.966632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2340.968008] CPU: 1 PID: 14836 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2340.968736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2340.969652] Call Trace: [ 2340.969976] dump_stack+0x107/0x167 [ 2340.970378] should_fail.cold+0x5/0xa [ 2340.970799] __alloc_pages_nodemask+0x182/0x600 [ 2340.971314] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2340.971850] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2340.972498] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2340.973063] ? lock_downgrade+0x6d0/0x6d0 [ 2340.973509] ? mark_held_locks+0x9e/0xe0 [ 2340.973958] alloc_pages_vma+0xbb/0x410 [ 2340.974392] handle_mm_fault+0x152f/0x3500 [ 2340.974848] ? do_raw_spin_lock+0x121/0x260 [ 2340.975310] ? rwlock_bug.part.0+0x90/0x90 [ 2340.975786] ? __pmd_alloc+0x5e0/0x5e0 [ 2340.976224] __get_user_pages+0x61b/0x1380 [ 2340.976713] ? follow_page_mask+0x1900/0x1900 [ 2340.977223] ? down_read+0x10f/0x430 [ 2340.977631] ? down_write+0x160/0x160 [ 2340.978072] get_user_pages_unlocked+0x18a/0x690 09:36:26 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 11) [ 2340.978593] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2340.979371] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2340.979893] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2340.980502] ? pin_user_pages_unlocked+0x80/0x80 [ 2340.981026] ? trace_hardirqs_on+0x5b/0x180 [ 2340.981500] get_user_pages_fast+0x66/0xa0 [ 2340.981973] iov_iter_get_pages+0x297/0xf40 [ 2340.982450] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2340.982976] ? mempool_resize+0x7d0/0x7d0 [ 2340.983431] bio_iov_iter_get_pages+0x22a/0x1200 [ 2340.983960] ? bvec_alloc+0x17e/0x2f0 [ 2340.984391] ? bio_alloc_bioset+0x2a1/0x600 [ 2340.984876] ? bio_add_pc_page+0x100/0x100 [ 2340.985354] ? bvec_alloc+0x240/0x2f0 [ 2340.985800] ? iov_iter_npages+0x1fd/0xa70 [ 2340.986283] ? ext4_iomap_begin+0x1a0/0x700 [ 2340.986777] iomap_dio_bio_actor+0x77a/0xef0 [ 2340.987290] iomap_dio_actor+0x36f/0x560 [ 2340.987750] iomap_apply+0x289/0x810 [ 2340.988168] ? iomap_dio_rw+0x90/0x90 [ 2340.988596] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2340.989208] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2340.989828] ? mark_held_locks+0x9e/0xe0 [ 2340.990293] ? filemap_check_errors+0xa5/0x150 [ 2340.990807] __iomap_dio_rw+0x6cd/0x1110 [ 2340.991262] ? iomap_dio_rw+0x90/0x90 [ 2340.991701] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2340.992219] ? down_read+0x10f/0x430 [ 2340.992635] ? down_write+0x160/0x160 [ 2340.993063] iomap_dio_rw+0x31/0x90 [ 2340.993476] ext4_file_read_iter+0x2c7/0x4c0 [ 2340.993984] new_sync_read+0x424/0x6f0 [ 2340.994420] ? fsnotify+0xf50/0xf50 [ 2340.994825] ? ksys_lseek+0x1b0/0x1b0 [ 2340.995261] ? _cond_resched+0x12/0x80 [ 2340.995708] ? avc_policy_seqno+0x9/0x70 [ 2340.996162] ? selinux_file_permission+0x92/0x520 [ 2340.996714] ? __fget_files+0x296/0x4c0 [ 2340.997175] vfs_read+0x457/0x580 [ 2340.997563] ksys_read+0x12d/0x260 [ 2340.997948] ? vfs_write+0xa70/0xa70 [ 2340.998375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2340.998961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2340.999550] do_syscall_64+0x33/0x40 [ 2340.999969] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2341.000547] RIP: 0033:0x7f35a254fb19 [ 2341.000964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.003047] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2341.003905] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2341.004703] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2341.005503] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.006323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.007122] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 09:36:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 9) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) [ 2341.074217] FAULT_INJECTION: forcing a failure. [ 2341.074217] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.075523] CPU: 1 PID: 14841 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2341.076304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.077235] Call Trace: [ 2341.077537] dump_stack+0x107/0x167 [ 2341.077971] should_fail.cold+0x5/0xa [ 2341.078408] ? create_object.isra.0+0x3a/0xa20 [ 2341.078920] should_failslab+0x5/0x20 [ 2341.079346] kmem_cache_alloc+0x5b/0x310 [ 2341.079802] ? mark_held_locks+0x9e/0xe0 [ 2341.080268] create_object.isra.0+0x3a/0xa20 [ 2341.080759] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.081338] kmem_cache_alloc_bulk+0x168/0x320 [ 2341.081851] io_submit_sqes+0x6f76/0x85c0 [ 2341.082323] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2341.082870] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2341.083429] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2341.083968] ? lock_downgrade+0x6d0/0x6d0 [ 2341.084434] ? find_held_lock+0x2c/0x110 [ 2341.084889] ? io_submit_sqes+0x85c0/0x85c0 [ 2341.085376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2341.085902] ? wait_for_completion_io+0x270/0x270 [ 2341.086456] ? rcu_read_lock_any_held+0x75/0xa0 [ 2341.086973] ? vfs_write+0x354/0xa70 [ 2341.087394] ? fput_many+0x2f/0x1a0 [ 2341.087805] ? ksys_write+0x1a9/0x260 [ 2341.088227] ? __ia32_sys_read+0xb0/0xb0 [ 2341.088689] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.089266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.089877] do_syscall_64+0x33/0x40 [ 2341.090296] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2341.090877] RIP: 0033:0x7f4f84a17b19 [ 2341.091303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.093376] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2341.094236] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2341.095038] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2341.095843] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2341.096654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2341.097441] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2341.126757] FAULT_INJECTION: forcing a failure. [ 2341.126757] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.130105] CPU: 0 PID: 14843 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2341.131698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.133347] Call Trace: [ 2341.133901] dump_stack+0x107/0x167 [ 2341.134695] should_fail.cold+0x5/0xa [ 2341.135550] ? create_object.isra.0+0x3a/0xa20 [ 2341.136571] should_failslab+0x5/0x20 [ 2341.137419] kmem_cache_alloc+0x5b/0x310 [ 2341.138337] ? mark_held_locks+0x9e/0xe0 [ 2341.139251] create_object.isra.0+0x3a/0xa20 [ 2341.140230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2341.141367] kmem_cache_alloc_bulk+0x168/0x320 [ 2341.142404] io_submit_sqes+0x6f76/0x85c0 [ 2341.143334] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2341.144438] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2341.145551] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2341.146648] ? lock_downgrade+0x6d0/0x6d0 [ 2341.146823] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2341.147570] ? find_held_lock+0x2c/0x110 [ 2341.147601] ? io_submit_sqes+0x85c0/0x85c0 [ 2341.150399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2341.151479] ? wait_for_completion_io+0x270/0x270 [ 2341.152554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2341.153586] ? vfs_write+0x354/0xa70 [ 2341.154445] ? fput_many+0x2f/0x1a0 [ 2341.155258] ? ksys_write+0x1a9/0x260 [ 2341.156106] ? __ia32_sys_read+0xb0/0xb0 [ 2341.157017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2341.158192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2341.159347] do_syscall_64+0x33/0x40 [ 2341.160180] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2341.161322] RIP: 0033:0x7f0fb66d2b19 [ 2341.162166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.166267] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2341.167956] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2341.169539] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2341.171138] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2341.172722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2341.174329] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2341.219943] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:36:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffed1, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000280)=""/71, 0x47}, {0x0}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/76, 0x4c}, {&(0x7f0000001640)=""/180, 0xb4}, {&(0x7f0000001700)=""/144, 0x9a}], 0x8, &(0x7f0000001840)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0x4, 0x96, 0x7f, 0x0, 0x7, 0x80100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp, 0x10828, 0x79, 0xa6, 0x9, 0x5, 0x4, 0xfff, 0x0, 0x100, 0x0, 0x3}, 0x0, 0x0, r1, 0x2) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x0, 0x0) 09:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0xff03}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 40) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:36:41 executing program 6: unshare(0x20080) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x1ff]}, 0x8, 0x800) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x28}}, 0x20000000) sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x33, 0x100, 0x70bd2b, 0x25dfdbff, {0x1b}, [@typed={0xa, 0x12, 0x0, 0x0, @str='\\!.\'{\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xa0}, 0x810) mq_timedreceive(r4, &(0x7f0000000280)=""/219, 0xdb, 0x7fff, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x202) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:36:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 12) 09:36:41 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff80000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x107100, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x28400, 0x0) copy_file_range(r0, 0x0, r3, &(0x7f0000000000)=0x8006, 0x7ff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0xffffffffffffffff, 0x80040) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000040)) [ 2355.394321] FAULT_INJECTION: forcing a failure. [ 2355.394321] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2355.395945] CPU: 0 PID: 14859 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2355.396871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.398007] Call Trace: [ 2355.398376] dump_stack+0x107/0x167 [ 2355.398867] should_fail.cold+0x5/0xa [ 2355.399384] __alloc_pages_nodemask+0x182/0x600 [ 2355.400003] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2355.400659] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2355.401466] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2355.402179] ? lock_downgrade+0x6d0/0x6d0 [ 2355.402736] ? mark_held_locks+0x9e/0xe0 [ 2355.403289] alloc_pages_vma+0xbb/0x410 [ 2355.403830] handle_mm_fault+0x152f/0x3500 [ 2355.404405] ? do_raw_spin_lock+0x121/0x260 [ 2355.404988] ? rwlock_bug.part.0+0x90/0x90 [ 2355.405562] ? __pmd_alloc+0x5e0/0x5e0 [ 2355.406131] __get_user_pages+0x61b/0x1380 [ 2355.406711] ? follow_page_mask+0x1900/0x1900 [ 2355.407318] ? down_read+0x10f/0x430 [ 2355.407826] ? down_write+0x160/0x160 [ 2355.408376] get_user_pages_unlocked+0x18a/0x690 [ 2355.409016] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2355.409784] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2355.410443] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2355.411183] ? pin_user_pages_unlocked+0x80/0x80 [ 2355.411818] ? trace_hardirqs_on+0x5b/0x180 [ 2355.412401] get_user_pages_fast+0x66/0xa0 [ 2355.412973] iov_iter_get_pages+0x297/0xf40 [ 2355.413558] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2355.414050] FAULT_INJECTION: forcing a failure. [ 2355.414050] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.414256] ? mempool_resize+0x7d0/0x7d0 [ 2355.416308] bio_iov_iter_get_pages+0x22a/0x1200 [ 2355.416946] ? bvec_alloc+0x17e/0x2f0 [ 2355.417506] ? bio_alloc_bioset+0x2a1/0x600 [ 2355.418106] ? bio_add_pc_page+0x100/0x100 [ 2355.418676] ? bvec_alloc+0x240/0x2f0 [ 2355.419200] ? iov_iter_npages+0x1fd/0xa70 [ 2355.419764] ? ext4_iomap_begin+0x1a0/0x700 [ 2355.420348] iomap_dio_bio_actor+0x77a/0xef0 [ 2355.420950] iomap_dio_actor+0x36f/0x560 [ 2355.421503] iomap_apply+0x289/0x810 [ 2355.422014] ? iomap_dio_rw+0x90/0x90 [ 2355.422527] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2355.423302] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2355.424011] ? mark_held_locks+0x9e/0xe0 [ 2355.424615] ? filemap_check_errors+0xa5/0x150 [ 2355.425238] __iomap_dio_rw+0x6cd/0x1110 [ 2355.425785] ? iomap_dio_rw+0x90/0x90 [ 2355.426340] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2355.426972] ? down_read+0x10f/0x430 [ 2355.427474] ? down_write+0x160/0x160 [ 2355.427997] iomap_dio_rw+0x31/0x90 [ 2355.428488] ext4_file_read_iter+0x2c7/0x4c0 [ 2355.429082] new_sync_read+0x424/0x6f0 [ 2355.429602] ? fsnotify+0xf50/0xf50 [ 2355.430105] ? ksys_lseek+0x1b0/0x1b0 [ 2355.430631] ? _cond_resched+0x12/0x80 [ 2355.431156] ? avc_policy_seqno+0x9/0x70 [ 2355.431721] ? selinux_file_permission+0x92/0x520 [ 2355.432402] ? __fget_files+0x296/0x4c0 [ 2355.432956] vfs_read+0x457/0x580 [ 2355.433438] ksys_read+0x12d/0x260 [ 2355.433940] ? vfs_write+0xa70/0xa70 [ 2355.434448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.435177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.435875] do_syscall_64+0x33/0x40 [ 2355.436393] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.437075] RIP: 0033:0x7f35a254fb19 [ 2355.437575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.440042] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2355.441069] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2355.442045] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2355.442999] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.443946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.444900] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2355.445892] CPU: 1 PID: 14863 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2355.446867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.448024] Call Trace: [ 2355.448414] dump_stack+0x107/0x167 [ 2355.448920] should_fail.cold+0x5/0xa [ 2355.449453] ? create_object.isra.0+0x3a/0xa20 [ 2355.450101] should_failslab+0x5/0x20 [ 2355.450614] kmem_cache_alloc+0x5b/0x310 [ 2355.451166] ? mark_held_locks+0x9e/0xe0 [ 2355.451727] create_object.isra.0+0x3a/0xa20 [ 2355.452322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.453031] kmem_cache_alloc_bulk+0x168/0x320 [ 2355.453667] io_submit_sqes+0x6f76/0x85c0 [ 2355.454255] ? percpu_ref_tryget_many+0x166/0x2d0 [ 2355.454921] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2355.455614] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2355.456279] ? lock_downgrade+0x6d0/0x6d0 [ 2355.456853] ? find_held_lock+0x2c/0x110 [ 2355.457420] ? io_submit_sqes+0x85c0/0x85c0 [ 2355.458029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.458690] ? wait_for_completion_io+0x270/0x270 [ 2355.459360] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.460011] ? vfs_write+0x354/0xa70 [ 2355.460533] ? fput_many+0x2f/0x1a0 [ 2355.461031] ? ksys_write+0x1a9/0x260 [ 2355.461568] ? __ia32_sys_read+0xb0/0xb0 [ 2355.462167] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.462888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.463612] do_syscall_64+0x33/0x40 [ 2355.464136] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.464847] RIP: 0033:0x7f0fb66d2b19 [ 2355.465365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.467863] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2355.468889] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2355.469871] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2355.470844] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2355.471834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2355.472817] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2355.480942] FAULT_INJECTION: forcing a failure. [ 2355.480942] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.482588] CPU: 1 PID: 14862 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2355.483544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.484673] Call Trace: [ 2355.485020] dump_stack+0x107/0x167 [ 2355.485490] should_fail.cold+0x5/0xa [ 2355.486057] ? io_issue_sqe+0x2492/0x7700 [ 2355.486634] should_failslab+0x5/0x20 [ 2355.487154] kmem_cache_alloc_trace+0x55/0x320 [ 2355.487806] io_issue_sqe+0x2492/0x7700 [ 2355.488383] ? io_connect+0x610/0x610 [ 2355.488942] ? __lockdep_reset_lock+0x180/0x180 [ 2355.489610] ? lock_acquire+0x197/0x470 [ 2355.490206] ? slab_free_freelist_hook+0x180/0x180 [ 2355.490886] ? find_held_lock+0x2c/0x110 [ 2355.491467] __io_queue_sqe+0x90/0x9d0 [ 2355.492021] ? io_issue_sqe+0x7700/0x7700 [ 2355.492612] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2355.493258] io_submit_sqes+0x4461/0x85c0 [ 2355.493875] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2355.494571] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2355.495260] ? lock_downgrade+0x6d0/0x6d0 [ 2355.495847] ? find_held_lock+0x2c/0x110 [ 2355.496409] ? io_submit_sqes+0x85c0/0x85c0 [ 2355.497016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.497699] ? wait_for_completion_io+0x270/0x270 [ 2355.498393] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.499014] ? vfs_write+0x354/0xa70 [ 2355.499532] ? fput_many+0x2f/0x1a0 [ 2355.500026] ? ksys_write+0x1a9/0x260 [ 2355.500534] ? __ia32_sys_read+0xb0/0xb0 [ 2355.501088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.501789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.502520] do_syscall_64+0x33/0x40 [ 2355.503037] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.503737] RIP: 0033:0x7f4f84a17b19 [ 2355.504235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.506704] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2355.507748] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2355.508741] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2355.509713] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2355.510717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.511722] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 09:36:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x34000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) [ 2355.530016] FAULT_INJECTION: forcing a failure. [ 2355.530016] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.532187] CPU: 1 PID: 14864 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2355.533117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.534260] Call Trace: [ 2355.534630] dump_stack+0x107/0x167 [ 2355.535127] should_fail.cold+0x5/0xa [ 2355.535650] ? __kernfs_iattrs+0xbc/0x470 [ 2355.536210] should_failslab+0x5/0x20 [ 2355.536725] kmem_cache_alloc+0x5b/0x310 [ 2355.537277] __kernfs_iattrs+0xbc/0x470 [ 2355.537824] kernfs_xattr_set+0x2b/0x80 [ 2355.538384] selinux_kernfs_init_security+0x26d/0x4c0 [ 2355.539082] ? selinux_file_mprotect+0x610/0x610 [ 2355.539724] ? find_held_lock+0x2c/0x110 [ 2355.540277] ? __kernfs_new_node+0x2ad/0x860 [ 2355.540874] ? rwlock_bug.part.0+0x90/0x90 [ 2355.541457] security_kernfs_init_security+0x4e/0xb0 [ 2355.542162] __kernfs_new_node+0x531/0x860 [ 2355.542741] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2355.543406] ? __lock_acquire+0x1657/0x5b00 [ 2355.544008] ? perf_trace_lock+0xac/0x490 [ 2355.544595] ? __lockdep_reset_lock+0x180/0x180 [ 2355.545246] kernfs_new_node+0x93/0x120 [ 2355.545789] __kernfs_create_file+0x51/0x350 [ 2355.546426] cgroup_addrm_files+0x3c8/0x9b0 [ 2355.547036] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2355.547754] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2355.548382] ? cgroup_file_name+0x210/0x210 [ 2355.548995] ? cgroup_propagate_control+0x3b9/0x520 [ 2355.549714] css_populate_dir+0x304/0x460 [ 2355.550289] cgroup_mkdir+0xa13/0xf50 [ 2355.550806] ? cgroup_destroy_locked+0x710/0x710 [ 2355.551487] kernfs_iop_mkdir+0x14d/0x1e0 [ 2355.552065] vfs_mkdir+0x493/0x700 [ 2355.552567] do_mkdirat+0x150/0x2b0 [ 2355.553078] ? user_path_create+0xf0/0xf0 [ 2355.553685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.554395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.555147] do_syscall_64+0x33/0x40 [ 2355.555681] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.556363] RIP: 0033:0x7f7635ef0b19 [ 2355.556862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.559297] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2355.560324] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2355.561297] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2355.562298] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.563318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.564290] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2355.565657] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 09:36:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="003b926420e5537e2426b5ecbce538770000000000000094e3c2"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) dup3(r1, r2, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) 09:36:41 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) r1 = gettid() setpriority(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r3 = getpid() perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xf7, 0x1, 0x99, 0x1, 0x0, 0xfff, 0x40002, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x55, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x401, 0x9, 0x8, 0x9, 0x8, 0x14, 0x0, 0x400, 0x0, 0x7}, r3, 0x5, r0, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000001380)) readv(r4, &(0x7f0000000600), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="3deda9bc490a2b37941ac8b31414dfca5ed1b3a21952f42e3c005b66f9b95bcbaae9800e2b6b01ac659e3ac26c3723167ae04244c51691fce3c611f985181f24d7e17de22f77ac7e89623a13d4cae5407caf06d24d7adbe59ea39d00"/106, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000269080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e0"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) [ 2355.613121] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2355.639848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2355.696255] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 09:36:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 41) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:36:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 13) [ 2355.767194] FAULT_INJECTION: forcing a failure. [ 2355.767194] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.768543] CPU: 1 PID: 14883 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2355.769309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.770253] Call Trace: [ 2355.770552] dump_stack+0x107/0x167 [ 2355.770970] should_fail.cold+0x5/0xa [ 2355.771395] ? create_object.isra.0+0x3a/0xa20 [ 2355.771904] should_failslab+0x5/0x20 [ 2355.772458] kmem_cache_alloc+0x5b/0x310 [ 2355.773025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.773691] create_object.isra.0+0x3a/0xa20 [ 2355.774309] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.775009] __kmalloc+0x16e/0x390 [ 2355.775502] selinux_kernfs_init_security+0x137/0x4c0 [ 2355.776209] ? selinux_file_mprotect+0x610/0x610 [ 2355.776848] ? find_held_lock+0x2c/0x110 [ 2355.777407] ? __kernfs_new_node+0x2ad/0x860 [ 2355.778018] ? lock_downgrade+0x6d0/0x6d0 [ 2355.778585] ? rwlock_bug.part.0+0x90/0x90 [ 2355.779180] security_kernfs_init_security+0x4e/0xb0 [ 2355.779887] __kernfs_new_node+0x531/0x860 [ 2355.780475] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2355.781115] ? __lock_acquire+0x1657/0x5b00 [ 2355.781712] ? perf_trace_lock+0xac/0x490 [ 2355.782307] ? __lockdep_reset_lock+0x180/0x180 [ 2355.782960] kernfs_new_node+0x93/0x120 [ 2355.783510] __kernfs_create_file+0x51/0x350 [ 2355.784116] cgroup_addrm_files+0x3c8/0x9b0 [ 2355.784723] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2355.785416] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2355.786067] ? cgroup_file_name+0x210/0x210 [ 2355.786656] ? cgroup_propagate_control+0x3b9/0x520 [ 2355.787391] css_populate_dir+0x304/0x460 [ 2355.787973] cgroup_mkdir+0xa13/0xf50 [ 2355.788524] ? cgroup_destroy_locked+0x710/0x710 [ 2355.789178] kernfs_iop_mkdir+0x14d/0x1e0 [ 2355.789751] vfs_mkdir+0x493/0x700 [ 2355.790263] do_mkdirat+0x150/0x2b0 [ 2355.790770] ? user_path_create+0xf0/0xf0 [ 2355.791345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.792070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.792790] do_syscall_64+0x33/0x40 [ 2355.793254] FAULT_INJECTION: forcing a failure. [ 2355.793254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2355.793308] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.795766] RIP: 0033:0x7f7635ef0b19 [ 2355.796315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.798882] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2355.799962] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2355.800974] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2355.801997] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.802964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.803927] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2355.804931] CPU: 0 PID: 14888 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2355.805992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.807166] Call Trace: [ 2355.807562] dump_stack+0x107/0x167 [ 2355.808086] should_fail.cold+0x5/0xa [ 2355.808631] __alloc_pages_nodemask+0x182/0x600 [ 2355.809346] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2355.810075] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2355.810953] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2355.811683] ? lock_downgrade+0x6d0/0x6d0 [ 2355.812284] ? mark_held_locks+0x9e/0xe0 [ 2355.812868] alloc_pages_vma+0xbb/0x410 [ 2355.813454] handle_mm_fault+0x152f/0x3500 [ 2355.814068] ? do_raw_spin_lock+0x121/0x260 [ 2355.814677] ? rwlock_bug.part.0+0x90/0x90 [ 2355.815279] ? __pmd_alloc+0x5e0/0x5e0 [ 2355.815839] __get_user_pages+0x61b/0x1380 [ 2355.816502] ? follow_page_mask+0x1900/0x1900 [ 2355.817144] ? down_read+0x10f/0x430 [ 2355.817655] ? down_write+0x160/0x160 [ 2355.818248] get_user_pages_unlocked+0x18a/0x690 [ 2355.818928] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2355.819718] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2355.820370] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2355.821167] ? pin_user_pages_unlocked+0x80/0x80 [ 2355.821885] ? trace_hardirqs_on+0x5b/0x180 [ 2355.822515] get_user_pages_fast+0x66/0xa0 [ 2355.823147] iov_iter_get_pages+0x297/0xf40 [ 2355.823711] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2355.824426] ? mempool_resize+0x7d0/0x7d0 [ 2355.825029] bio_iov_iter_get_pages+0x22a/0x1200 [ 2355.825717] ? bvec_alloc+0x17e/0x2f0 [ 2355.826288] ? bio_alloc_bioset+0x2a1/0x600 [ 2355.826875] ? bio_add_pc_page+0x100/0x100 [ 2355.827437] ? bvec_alloc+0x240/0x2f0 [ 2355.827971] ? iov_iter_npages+0x1fd/0xa70 [ 2355.828556] ? ext4_iomap_begin+0x1a0/0x700 [ 2355.829138] iomap_dio_bio_actor+0x77a/0xef0 [ 2355.829757] iomap_dio_actor+0x36f/0x560 [ 2355.830405] iomap_apply+0x289/0x810 [ 2355.830938] ? iomap_dio_rw+0x90/0x90 [ 2355.831446] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2355.832290] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2355.833054] ? mark_held_locks+0x9e/0xe0 [ 2355.833601] ? filemap_check_errors+0xa5/0x150 [ 2355.834281] __iomap_dio_rw+0x6cd/0x1110 [ 2355.834838] ? iomap_dio_rw+0x90/0x90 [ 2355.835372] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2355.836009] ? down_read+0x10f/0x430 [ 2355.836561] ? down_write+0x160/0x160 [ 2355.837099] iomap_dio_rw+0x31/0x90 [ 2355.837618] ext4_file_read_iter+0x2c7/0x4c0 [ 2355.838279] new_sync_read+0x424/0x6f0 [ 2355.838818] ? fsnotify+0xf50/0xf50 [ 2355.839319] ? ksys_lseek+0x1b0/0x1b0 [ 2355.839826] ? _cond_resched+0x12/0x80 [ 2355.840392] ? avc_policy_seqno+0x9/0x70 [ 2355.841002] ? selinux_file_permission+0x92/0x520 [ 2355.841669] ? __fget_files+0x296/0x4c0 [ 2355.842274] vfs_read+0x457/0x580 [ 2355.842767] ksys_read+0x12d/0x260 [ 2355.843273] ? vfs_write+0xa70/0xa70 [ 2355.843798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.844557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.845280] do_syscall_64+0x33/0x40 [ 2355.845808] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.846543] RIP: 0033:0x7f35a254fb19 [ 2355.847064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.849572] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2355.850640] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2355.851628] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2355.852601] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.853591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.854599] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2355.899927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:36:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 11) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) [ 2355.952176] FAULT_INJECTION: forcing a failure. [ 2355.952176] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.953970] CPU: 1 PID: 14892 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2355.954961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.956118] Call Trace: [ 2355.956482] dump_stack+0x107/0x167 [ 2355.956967] should_fail.cold+0x5/0xa [ 2355.957494] ? create_object.isra.0+0x3a/0xa20 [ 2355.958149] should_failslab+0x5/0x20 [ 2355.958683] kmem_cache_alloc+0x5b/0x310 [ 2355.959278] create_object.isra.0+0x3a/0xa20 [ 2355.959873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.960578] kmem_cache_alloc_trace+0x151/0x320 [ 2355.961241] io_issue_sqe+0x2492/0x7700 [ 2355.962011] ? io_connect+0x610/0x610 [ 2355.962560] ? __lockdep_reset_lock+0x180/0x180 [ 2355.963238] ? lock_acquire+0x197/0x470 [ 2355.963802] ? slab_free_freelist_hook+0x180/0x180 [ 2355.964504] ? find_held_lock+0x2c/0x110 [ 2355.965085] __io_queue_sqe+0x90/0x9d0 [ 2355.965645] ? io_issue_sqe+0x7700/0x7700 [ 2355.966468] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2355.967233] io_submit_sqes+0x4461/0x85c0 [ 2355.967838] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2355.968516] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2355.969174] ? lock_downgrade+0x6d0/0x6d0 [ 2355.969737] ? find_held_lock+0x2c/0x110 [ 2355.970323] ? io_submit_sqes+0x85c0/0x85c0 [ 2355.970915] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.971582] ? wait_for_completion_io+0x270/0x270 [ 2355.972266] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.972930] ? vfs_write+0x354/0xa70 [ 2355.973463] ? fput_many+0x2f/0x1a0 [ 2355.974006] ? ksys_write+0x1a9/0x260 [ 2355.974553] ? __ia32_sys_read+0xb0/0xb0 [ 2355.975146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2355.975893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2355.976663] do_syscall_64+0x33/0x40 [ 2355.977197] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.977950] RIP: 0033:0x7f4f84a17b19 [ 2355.978477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.981059] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2355.982192] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2355.983197] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2355.984200] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2355.985225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.986269] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2356.076925] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:36:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 12) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:36:56 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) r1 = gettid() setpriority(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r3 = getpid() perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xf7, 0x1, 0x99, 0x1, 0x0, 0xfff, 0x40002, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x55, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x401, 0x9, 0x8, 0x9, 0x8, 0x14, 0x0, 0x400, 0x0, 0x7}, r3, 0x5, r0, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000001380)) readv(r4, &(0x7f0000000600), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) r5 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="3deda9bc490a2b37941ac8b31414dfca5ed1b3a21952f42e3c005b66f9b95bcbaae9800e2b6b01ac659e3ac26c3723167ae04244c51691fce3c611f985181f24d7e17de22f77ac7e89623a13d4cae5407caf06d24d7adbe59ea39d00"/106, @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c00038008000300000000000800010001000000080001000200000008000400200000004c000269080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e0"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) 09:36:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 14) [ 2370.889191] FAULT_INJECTION: forcing a failure. [ 2370.889191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2370.890959] CPU: 0 PID: 14902 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2370.891881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.893011] Call Trace: [ 2370.893378] dump_stack+0x107/0x167 [ 2370.893894] should_fail.cold+0x5/0xa [ 2370.894119] FAULT_INJECTION: forcing a failure. [ 2370.894119] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.894428] __alloc_pages_nodemask+0x182/0x600 [ 2370.894443] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2370.894462] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2370.897991] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2370.898705] ? lock_downgrade+0x6d0/0x6d0 [ 2370.899252] ? mark_held_locks+0x9e/0xe0 [ 2370.899810] alloc_pages_vma+0xbb/0x410 [ 2370.900353] handle_mm_fault+0x152f/0x3500 [ 2370.900927] ? do_raw_spin_lock+0x121/0x260 [ 2370.901533] ? rwlock_bug.part.0+0x90/0x90 [ 2370.902113] ? __pmd_alloc+0x5e0/0x5e0 [ 2370.902695] __get_user_pages+0x61b/0x1380 [ 2370.903270] ? follow_page_mask+0x1900/0x1900 [ 2370.903872] ? down_read+0x10f/0x430 [ 2370.904402] ? down_write+0x160/0x160 [ 2370.904922] get_user_pages_unlocked+0x18a/0x690 [ 2370.905599] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2370.906336] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2370.906977] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2370.907736] ? pin_user_pages_unlocked+0x80/0x80 [ 2370.908380] ? trace_hardirqs_on+0x5b/0x180 [ 2370.909128] get_user_pages_fast+0x66/0xa0 [ 2370.909697] iov_iter_get_pages+0x297/0xf40 [ 2370.910317] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2370.910977] ? mempool_resize+0x7d0/0x7d0 [ 2370.911588] bio_iov_iter_get_pages+0x22a/0x1200 [ 2370.912228] ? bvec_alloc+0x17e/0x2f0 [ 2370.912858] ? bio_alloc_bioset+0x2a1/0x600 [ 2370.913438] ? bio_add_pc_page+0x100/0x100 [ 2370.914000] ? bvec_alloc+0x240/0x2f0 [ 2370.914527] ? iov_iter_npages+0x1fd/0xa70 [ 2370.915092] ? ext4_iomap_begin+0x1a0/0x700 [ 2370.915680] iomap_dio_bio_actor+0x77a/0xef0 [ 2370.916290] iomap_dio_actor+0x36f/0x560 [ 2370.916845] iomap_apply+0x289/0x810 [ 2370.917342] ? iomap_dio_rw+0x90/0x90 [ 2370.917865] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2370.918649] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2370.919388] ? mark_held_locks+0x9e/0xe0 [ 2370.919940] ? filemap_check_errors+0xa5/0x150 [ 2370.920562] __iomap_dio_rw+0x6cd/0x1110 [ 2370.921106] ? iomap_dio_rw+0x90/0x90 [ 2370.921634] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2370.922269] ? down_read+0x10f/0x430 [ 2370.922674] ? down_write+0x160/0x160 [ 2370.923084] iomap_dio_rw+0x31/0x90 [ 2370.923484] ext4_file_read_iter+0x2c7/0x4c0 [ 2370.923959] new_sync_read+0x424/0x6f0 [ 2370.924378] ? fsnotify+0xf50/0xf50 [ 2370.924770] ? ksys_lseek+0x1b0/0x1b0 [ 2370.925179] ? _cond_resched+0x12/0x80 [ 2370.925601] ? avc_policy_seqno+0x9/0x70 [ 2370.926028] ? selinux_file_permission+0x92/0x520 [ 2370.926575] ? __fget_files+0x296/0x4c0 [ 2370.927011] vfs_read+0x457/0x580 [ 2370.927388] ksys_read+0x12d/0x260 [ 2370.927772] ? vfs_write+0xa70/0xa70 [ 2370.928177] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2370.928742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.929299] do_syscall_64+0x33/0x40 [ 2370.929704] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2370.934311] RIP: 0033:0x7f35a254fb19 [ 2370.934728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.936753] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2370.937567] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2370.938433] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2370.939374] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2370.940325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.941269] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2370.942296] CPU: 1 PID: 14905 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2370.943297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.944415] Call Trace: [ 2370.944773] dump_stack+0x107/0x167 [ 2370.945260] should_fail.cold+0x5/0xa [ 2370.945815] ? io_issue_sqe+0x2492/0x7700 [ 2370.946394] should_failslab+0x5/0x20 [ 2370.946903] kmem_cache_alloc_trace+0x55/0x320 [ 2370.947538] io_issue_sqe+0x2492/0x7700 [ 2370.948076] ? io_connect+0x610/0x610 [ 2370.948626] ? __lockdep_reset_lock+0x180/0x180 [ 2370.949250] ? lock_acquire+0x197/0x470 [ 2370.949779] ? slab_free_freelist_hook+0x180/0x180 [ 2370.950443] ? find_held_lock+0x2c/0x110 [ 2370.950979] __io_queue_sqe+0x90/0x9d0 [ 2370.951510] ? io_issue_sqe+0x7700/0x7700 [ 2370.952069] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2370.952708] io_submit_sqes+0x4461/0x85c0 [ 2370.953290] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2370.953953] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2370.954627] ? lock_downgrade+0x6d0/0x6d0 [ 2370.955178] ? find_held_lock+0x2c/0x110 [ 2370.955736] ? io_submit_sqes+0x85c0/0x85c0 [ 2370.956350] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2370.957012] ? wait_for_completion_io+0x270/0x270 [ 2370.957699] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.958345] ? vfs_write+0x354/0xa70 [ 2370.958846] ? fput_many+0x2f/0x1a0 [ 2370.959344] ? ksys_write+0x1a9/0x260 [ 2370.959875] ? __ia32_sys_read+0xb0/0xb0 [ 2370.960430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2370.961171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.961868] do_syscall_64+0x33/0x40 [ 2370.962385] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2370.963076] RIP: 0033:0x7f0fb66d2b19 [ 2370.963619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2370.966118] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 09:36:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 42) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:36:56 executing program 6: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000180), 0x1}, 0x40030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000086dd6096153f00305600fc0200000000000000000000ff0200000000000000000000000000010200907800000000600009e6000000000000ac"], 0x0) syz_emit_ethernet(0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbbbbbbbbbb81001300080503070b117169ca47524d4f040000000000002567874d9c75975b7b119c356300d43c47bff4d6883c12cf"], 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = dup(r0) close_range(r3, r1, 0x2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)) recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/183, 0xb7, 0x22041, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="022f666968653000"]) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0000884701000000040008000300a801cc93bac400f55c011d04b581d94f0c03bdbca29701db20cfa5195c9839f71814780f7d2a260cc98504b8e50405f73899fc231e835a499117104e35225899423648baac341ada31834cbc6a69fdfa839e39aa32ec1d3d028ed8a7a538610f65ef3f96f7a816098e732fda7e2972905f8061efb2cc71c7fa8306a7e74eacfc5f0158cb938321e18c4c347823b3403dba73411421cc8611f3855d9060958a60c5694223c8bba2e9419696d04c19f1515a9e7c929745"], 0x89) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x88000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000200)={0x14db, 0x0, 0x5, 0x0, 0x5703}) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmmsg$inet6(r6, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x2, 0x0) [ 2370.967308] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2370.968378] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2370.969335] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2370.970349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2370.971307] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2370.974932] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2370.976320] FAULT_INJECTION: forcing a failure. [ 2370.976320] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.977948] CPU: 1 PID: 14907 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2370.978882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2370.980007] Call Trace: [ 2370.980363] dump_stack+0x107/0x167 [ 2370.980864] should_fail.cold+0x5/0xa [ 2370.981377] ? io_issue_sqe+0x2492/0x7700 [ 2370.981939] should_failslab+0x5/0x20 [ 2370.982461] kmem_cache_alloc_trace+0x55/0x320 [ 2370.983087] io_issue_sqe+0x2492/0x7700 [ 2370.983633] ? io_connect+0x610/0x610 [ 2370.984148] ? __lockdep_reset_lock+0x180/0x180 [ 2370.984775] ? lock_acquire+0x197/0x470 [ 2370.985308] ? slab_free_freelist_hook+0x180/0x180 [ 2370.986009] ? find_held_lock+0x2c/0x110 [ 2370.986584] __io_queue_sqe+0x90/0x9d0 [ 2370.987109] ? io_issue_sqe+0x7700/0x7700 [ 2370.987674] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2370.988308] io_submit_sqes+0x4461/0x85c0 [ 2370.988902] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2370.989573] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2370.990232] ? lock_downgrade+0x6d0/0x6d0 [ 2370.990784] ? find_held_lock+0x2c/0x110 [ 2370.991340] ? io_submit_sqes+0x85c0/0x85c0 [ 2370.991956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2370.992641] ? wait_for_completion_io+0x270/0x270 [ 2370.993290] ? rcu_read_lock_any_held+0x75/0xa0 [ 2370.993910] ? vfs_write+0x354/0xa70 [ 2370.994436] ? fput_many+0x2f/0x1a0 [ 2370.994939] ? ksys_write+0x1a9/0x260 [ 2370.995444] ? __ia32_sys_read+0xb0/0xb0 [ 2370.996035] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2370.996733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2370.997431] do_syscall_64+0x33/0x40 [ 2370.997939] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2370.998641] RIP: 0033:0x7f4f84a17b19 [ 2370.999132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.001657] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2371.002690] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2371.003652] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2371.004606] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2371.005552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.006519] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2371.028708] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:36:56 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xc}, {0x6, 0x0, 0x0, 0xa34}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) fcntl$getflags(r0, 0x401) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) read(r2, &(0x7f0000000180)=""/102400, 0x19000) [ 2371.077200] FAULT_INJECTION: forcing a failure. [ 2371.077200] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.079009] CPU: 0 PID: 14916 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2371.079939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.081048] Call Trace: [ 2371.081406] dump_stack+0x107/0x167 [ 2371.081899] should_fail.cold+0x5/0xa [ 2371.082426] should_failslab+0x5/0x20 [ 2371.082943] __kmalloc_track_caller+0x79/0x370 [ 2371.083555] ? security_context_to_sid_core+0xb4/0x890 [ 2371.084264] kmemdup_nul+0x2d/0xa0 [ 2371.084744] security_context_to_sid_core+0xb4/0x890 [ 2371.085424] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2371.086175] ? do_raw_spin_lock+0x121/0x260 [ 2371.086760] ? rwlock_bug.part.0+0x90/0x90 [ 2371.087326] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.087998] ? do_raw_spin_unlock+0x4f/0x220 [ 2371.088585] ? _raw_spin_unlock+0x1a/0x30 [ 2371.089187] security_context_to_sid+0x35/0x50 [ 2371.089807] selinux_kernfs_init_security+0x19d/0x4c0 [ 2371.090512] ? selinux_file_mprotect+0x610/0x610 [ 2371.091147] ? find_held_lock+0x2c/0x110 [ 2371.091692] ? __kernfs_new_node+0x2ad/0x860 [ 2371.092288] ? lock_downgrade+0x6d0/0x6d0 [ 2371.092847] ? rwlock_bug.part.0+0x90/0x90 [ 2371.093426] security_kernfs_init_security+0x4e/0xb0 [ 2371.094132] __kernfs_new_node+0x531/0x860 [ 2371.094713] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2371.095378] ? __lock_acquire+0x1657/0x5b00 [ 2371.095965] ? perf_trace_lock+0xac/0x490 [ 2371.096524] ? __lockdep_reset_lock+0x180/0x180 [ 2371.097185] kernfs_new_node+0x93/0x120 [ 2371.097738] __kernfs_create_file+0x51/0x350 [ 2371.098372] cgroup_addrm_files+0x3c8/0x9b0 [ 2371.098961] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2371.099646] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2371.100260] ? cgroup_file_name+0x210/0x210 [ 2371.100879] ? cgroup_propagate_control+0x3b9/0x520 [ 2371.101557] css_populate_dir+0x304/0x460 [ 2371.102130] cgroup_mkdir+0xa13/0xf50 [ 2371.102648] ? cgroup_destroy_locked+0x710/0x710 [ 2371.103286] kernfs_iop_mkdir+0x14d/0x1e0 [ 2371.103845] vfs_mkdir+0x493/0x700 [ 2371.104323] do_mkdirat+0x150/0x2b0 [ 2371.104816] ? user_path_create+0xf0/0xf0 [ 2371.105378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.106144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.106872] do_syscall_64+0x33/0x40 [ 2371.107370] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2371.108063] RIP: 0033:0x7f7635ef0b19 [ 2371.108561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.111022] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2371.112038] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2371.112542] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2371.112991] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2371.113000] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.113008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.113023] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2371.118407] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2371.123123] FAULT_INJECTION: forcing a failure. [ 2371.123123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2371.124793] CPU: 1 PID: 14920 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2371.125719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.126892] Call Trace: [ 2371.127270] dump_stack+0x107/0x167 [ 2371.127778] should_fail.cold+0x5/0xa [ 2371.128307] __alloc_pages_nodemask+0x182/0x600 [ 2371.128970] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2371.129654] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2371.130520] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2371.131261] ? lock_downgrade+0x6d0/0x6d0 [ 2371.131836] ? mark_held_locks+0x9e/0xe0 [ 2371.132392] alloc_pages_vma+0xbb/0x410 [ 2371.132946] handle_mm_fault+0x152f/0x3500 [ 2371.133532] ? do_raw_spin_lock+0x121/0x260 [ 2371.134145] ? rwlock_bug.part.0+0x90/0x90 [ 2371.134746] ? __pmd_alloc+0x5e0/0x5e0 [ 2371.135311] __get_user_pages+0x61b/0x1380 [ 2371.135926] ? follow_page_mask+0x1900/0x1900 [ 2371.136548] ? down_read+0x10f/0x430 [ 2371.137076] ? down_write+0x160/0x160 [ 2371.137618] get_user_pages_unlocked+0x18a/0x690 09:36:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 15) [ 2371.138292] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2371.139238] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2371.139915] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2371.140698] ? pin_user_pages_unlocked+0x80/0x80 [ 2371.141367] ? trace_hardirqs_on+0x5b/0x180 [ 2371.142024] get_user_pages_fast+0x66/0xa0 [ 2371.142644] iov_iter_get_pages+0x297/0xf40 [ 2371.143255] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2371.143946] ? mempool_resize+0x7d0/0x7d0 [ 2371.144533] bio_iov_iter_get_pages+0x22a/0x1200 [ 2371.145216] ? bvec_alloc+0x17e/0x2f0 [ 2371.145771] ? bio_alloc_bioset+0x2a1/0x600 [ 2371.146381] ? bio_add_pc_page+0x100/0x100 [ 2371.146994] ? bvec_alloc+0x240/0x2f0 [ 2371.147536] ? iov_iter_npages+0x1fd/0xa70 [ 2371.148154] ? ext4_iomap_begin+0x1a0/0x700 [ 2371.148753] iomap_dio_bio_actor+0x77a/0xef0 [ 2371.149429] iomap_dio_actor+0x36f/0x560 [ 2371.150013] iomap_apply+0x289/0x810 [ 2371.150543] ? iomap_dio_rw+0x90/0x90 [ 2371.151098] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2371.151913] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2371.152655] ? mark_held_locks+0x9e/0xe0 [ 2371.153247] ? filemap_check_errors+0xa5/0x150 [ 2371.153884] __iomap_dio_rw+0x6cd/0x1110 [ 2371.154478] ? iomap_dio_rw+0x90/0x90 [ 2371.155035] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2371.155823] ? down_read+0x10f/0x430 [ 2371.156360] ? down_write+0x160/0x160 [ 2371.156927] iomap_dio_rw+0x31/0x90 [ 2371.157442] ext4_file_read_iter+0x2c7/0x4c0 [ 2371.158071] new_sync_read+0x424/0x6f0 [ 2371.158605] ? fsnotify+0xf50/0xf50 [ 2371.159096] ? ksys_lseek+0x1b0/0x1b0 [ 2371.159655] ? _cond_resched+0x12/0x80 [ 2371.160227] ? avc_policy_seqno+0x9/0x70 [ 2371.160800] ? selinux_file_permission+0x92/0x520 [ 2371.161429] ? __fget_files+0x296/0x4c0 [ 2371.161986] vfs_read+0x457/0x580 [ 2371.162625] ksys_read+0x12d/0x260 [ 2371.163113] ? vfs_write+0xa70/0xa70 [ 2371.163627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.164350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.165076] do_syscall_64+0x33/0x40 [ 2371.165619] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2371.166389] RIP: 0033:0x7f35a254fb19 [ 2371.166946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.169519] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2371.170604] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2371.171577] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2371.172578] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.173561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.174579] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 09:36:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x80000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:36:57 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa00009c1) creat(&(0x7f0000000040)='./file0\x00', 0x0) 09:36:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 13) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) [ 2371.277831] audit: type=1400 audit(1701250617.286:132): avc: denied { watch_reads } for pid=14927 comm="syz-executor.6" path="/syzkaller-testdir826501360/syzkaller.cXivms/271/file0" dev="sda" ino=16008 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 09:36:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 43) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) [ 2371.331318] FAULT_INJECTION: forcing a failure. [ 2371.331318] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.332937] CPU: 1 PID: 14933 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2371.333874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.335034] Call Trace: [ 2371.335395] dump_stack+0x107/0x167 [ 2371.335892] should_fail.cold+0x5/0xa [ 2371.336417] ? create_object.isra.0+0x3a/0xa20 [ 2371.337037] should_failslab+0x5/0x20 [ 2371.337550] kmem_cache_alloc+0x5b/0x310 [ 2371.338126] create_object.isra.0+0x3a/0xa20 [ 2371.338716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.339405] kmem_cache_alloc_trace+0x151/0x320 [ 2371.340030] io_issue_sqe+0x2492/0x7700 [ 2371.340588] ? io_connect+0x610/0x610 [ 2371.341104] ? __lockdep_reset_lock+0x180/0x180 [ 2371.341739] ? lock_acquire+0x197/0x470 [ 2371.342286] ? slab_free_freelist_hook+0x180/0x180 [ 2371.342942] ? find_held_lock+0x2c/0x110 [ 2371.343501] __io_queue_sqe+0x90/0x9d0 [ 2371.344031] ? io_issue_sqe+0x7700/0x7700 [ 2371.344594] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2371.345235] io_submit_sqes+0x4461/0x85c0 [ 2371.345814] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2371.346526] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2371.347179] ? lock_downgrade+0x6d0/0x6d0 [ 2371.347743] ? find_held_lock+0x2c/0x110 [ 2371.348293] ? io_submit_sqes+0x85c0/0x85c0 [ 2371.348906] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.349591] ? wait_for_completion_io+0x270/0x270 [ 2371.350287] ? rcu_read_lock_any_held+0x75/0xa0 [ 2371.350939] ? vfs_write+0x354/0xa70 [ 2371.351455] ? fput_many+0x2f/0x1a0 [ 2371.351974] ? ksys_write+0x1a9/0x260 [ 2371.352496] ? __ia32_sys_read+0xb0/0xb0 [ 2371.353066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.353819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.354543] do_syscall_64+0x33/0x40 [ 2371.355067] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2371.355772] RIP: 0033:0x7f4f84a17b19 [ 2371.356296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.358847] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2371.359885] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2371.360873] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2371.361887] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2371.362845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.363835] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2371.364271] FAULT_INJECTION: forcing a failure. [ 2371.364271] name failslab, interval 1, probability 0, space 0, times 0 [ 2371.370797] CPU: 0 PID: 14935 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2371.371733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.372835] Call Trace: [ 2371.373196] dump_stack+0x107/0x167 [ 2371.373686] should_fail.cold+0x5/0xa [ 2371.374223] ? create_object.isra.0+0x3a/0xa20 [ 2371.374848] should_failslab+0x5/0x20 [ 2371.375364] kmem_cache_alloc+0x5b/0x310 [ 2371.375914] create_object.isra.0+0x3a/0xa20 [ 2371.376503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2371.377187] __kmalloc_track_caller+0x177/0x370 [ 2371.377806] ? security_context_to_sid_core+0xb4/0x890 [ 2371.378527] kmemdup_nul+0x2d/0xa0 [ 2371.379003] security_context_to_sid_core+0xb4/0x890 [ 2371.379687] ? security_compute_sid.part.0+0x16e0/0x16e0 [ 2371.380413] ? do_raw_spin_lock+0x121/0x260 [ 2371.380989] ? rwlock_bug.part.0+0x90/0x90 [ 2371.381562] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2371.382234] ? do_raw_spin_unlock+0x4f/0x220 [ 2371.382831] ? _raw_spin_unlock+0x1a/0x30 [ 2371.383391] security_context_to_sid+0x35/0x50 [ 2371.384010] selinux_kernfs_init_security+0x19d/0x4c0 [ 2371.384696] ? selinux_file_mprotect+0x610/0x610 [ 2371.385332] ? find_held_lock+0x2c/0x110 [ 2371.385888] ? __kernfs_new_node+0x2ad/0x860 [ 2371.386493] ? lock_downgrade+0x6d0/0x6d0 [ 2371.387054] ? rwlock_bug.part.0+0x90/0x90 [ 2371.387628] security_kernfs_init_security+0x4e/0xb0 [ 2371.388312] __kernfs_new_node+0x531/0x860 [ 2371.388892] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2371.389528] ? __lock_acquire+0x1657/0x5b00 [ 2371.390132] ? perf_trace_lock+0xac/0x490 [ 2371.390697] ? __lockdep_reset_lock+0x180/0x180 [ 2371.391334] kernfs_new_node+0x93/0x120 [ 2371.391869] __kernfs_create_file+0x51/0x350 [ 2371.392466] cgroup_addrm_files+0x3c8/0x9b0 [ 2371.393055] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2371.393730] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2371.394341] ? cgroup_file_name+0x210/0x210 [ 2371.394915] ? cgroup_propagate_control+0x3b9/0x520 [ 2371.395595] css_populate_dir+0x304/0x460 [ 2371.396157] cgroup_mkdir+0xa13/0xf50 [ 2371.396674] ? cgroup_destroy_locked+0x710/0x710 [ 2371.397311] kernfs_iop_mkdir+0x14d/0x1e0 [ 2371.397867] vfs_mkdir+0x493/0x700 [ 2371.398376] do_mkdirat+0x150/0x2b0 [ 2371.398866] ? user_path_create+0xf0/0xf0 [ 2371.399430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.400130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.400834] do_syscall_64+0x33/0x40 [ 2371.401334] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2371.402021] RIP: 0033:0x7f7635ef0b19 [ 2371.402672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.405117] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2371.406137] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2371.407087] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2371.408035] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.408981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.409924] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 09:36:57 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000000140)) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000240)="4759fa50b88d0fc2b19db10a36c58b4a1b36008afdcc57340fd6d303055c4b62c46e5dc240bb477b58f666ce40758461dbce2f7850957d39f2a0e87e6138eea161b1e73d926e9efa819db696a571953d6e3c567985b2b142422227ebd7f1ed15e4d946e95d172d6eff097477d00a871b819dd5e19a1d6e3f4b4199fd22fa3bf703b9227e0bec651223923023a6d9d540ae7912ad40027cd8423c55cd588c29b59ecbe9d162842982dc12bc3ebb504e76b4f7b38a907c9ce94f6483317c623d3bdbcf49b2395e49c0eef73eaa6c401559c63c00af737e814b979db990709f", 0xde, 0x7fffffff}, {&(0x7f0000000340)="9e485ad78136e89883e17340e0039ab9387db4e50e4730014d35488def00d7a219b5423fd6ea47b164febba92a590493293a7121b63feb72eae197d59c9db90c536181313687b2525f9770169f3abda43563137c083cef69bce29460cae26ab1395736c222888e3f55196ce93b4c2ec3fcdcb81a97d487031e651cb84453ede98c618dc02d2b82865416729ee404948c63cc03c1837eae30bd3bb63e6c92835397b2575cb589396ebba8d769f3bbfe6b82febff2841d5c077e7cdcd7719fe962125c2897d93880d680f1c0f461ce5071eebc87f90d", 0xd5, 0xe00000000000000}], 0x4041, &(0x7f0000000180)={[{'iso9660\x00'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsroot={'smackfsroot', 0x3d, '%\'**]/'}}, {@permit_directio}]}) r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', 0x1000, 0xa, &(0x7f00000019c0)=[{&(0x7f0000000480)="825f93c68603e2b31a8050b911514d256668240d9b43d5e7ab87b78257e4a5b0fef66c353bb05c830606acc554d10185942f4104b40779204e2cf3efca235646ab6b", 0x42, 0x4000000000000000}, {&(0x7f0000000500)="4a3a2ca16d87af14bca1c95bf075998ec3515d60d21e5565a7b611ab21f8633491c68976e54ac27334dfa04b0fe55933d202f802100b8c6b2e8e010fbc45379ad5bdee78dbd06c9015fc625af8ed20b55698f6b39976bbd3555c23512ba53483146fca2696bb5937aa5179fcbf70f831feca18304889fa60fb56b3677d709be67aad1325e90b135d6d731809689cd3a0bc23b66c1c7fcc6ea1791bd96d9ba3c2ae372be9b3b5712b6d814997729354f04c0a4b737bb86d14c7b1014f4f323774ce2dff4e791d52a84600e54ca3a112", 0xcf, 0x6}, {&(0x7f0000000600)="a369d3811ac4207f484048f3f6d4f08c63db5a439a85facc61dd2dfc3d698567077022074ec0b19e03120136fa25a37bf4f9bf80a96b22339cf1a53482de066c42583e16a65c852be6bb44033dcf4bb3b52b02446f1dff837a956a1878dcd67dbbd9126f9c448072f8d63b0ff161bef3a0ed3510f8b248147bfabc5e4c2ecdf53d56cc622a2557d5a63a4d2b20f9d2ff927417a94a0cdd8c32f5b03ff2517bac2df81caee5055f8b74bab47d7948ed833f39cd8dda06fe2fc8f89b04e682e091e27d502972848c665bc624da7fbeea995ca3e041627eecc9c43b9be7b70169a476668c3cd2ba862e1b4efe", 0xeb, 0x3}, {&(0x7f0000000700)="a9c0f027a99cafc28db81e07a8b50dbad4ea565e8e133a8f9c910123b903e0dc823117732c8d6027df08", 0x2a, 0x1}, {&(0x7f0000000740)="c83351c82fdab0d8520141dfe5a429f5d56d3193a23bb3af12753da7020fba80c3635c85a3845603f682a8456f9050f482eb8d070ce2691228a8edce4120eb66b2a1f324052f3fe93c19fe7005bfc08d19e8bd92ad65e8a15e65370d29c320befe19770cfbe4c634e9ffbab57d09f9f795bd1b9bf063698caa8bf21827643a2a28556c0541c1c3bb3ab6d89c3e1f62d7bcfaf5eab8bf46bdac7f8a5479ee6d", 0x9f}, {&(0x7f0000000800)="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", 0x1000, 0x80000001}, {&(0x7f0000001800)="7b8e", 0x2, 0x2}, {&(0x7f0000001840)="2151d6c2c7a12bf190cdf75e6194657af3212479af09fdb22b0a4fb40b897efdd66cdc50313354d0bd91342b9ee90eb2710dc60bbe5d1a2af85ee33efe96b630f90ea3564872795cc739130c42107b0df790eefb19bb0fb7471a8ce7b2babf1c4309f6e1d5e4e417ae2f4523c91a85badf4961d35a223799f0e9e5c82e432475879fc701bf31dd13ec706ef5f7ed38916c5f22532147852901ded2bce56e09897c0eb3f4bb938a4602c73b9335a22f27892af4bc6d44b4bf92766ab21e0945af8c1ea385a6fd379c1b0a241f1c77bdfaae27abe19a5b3e2aa252", 0xda, 0xe4}, {&(0x7f0000001940)="1f9fb067", 0x4, 0x54cb}, {&(0x7f0000001980)="bcac03457bb712b2935cd4f8bd8d03e19ca816d6aeb33e22c16277de881a706df0903fb9bcc0f726327639fcb32465bfbfcc757d80c2a9", 0x37, 0xffff}], 0x210011, &(0x7f0000001ac0)={[{@shortname_mixed}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}], [{@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@subj_type={'subj_type', 0x3d, 'iso9660\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x33}}]}) openat(r0, &(0x7f0000001b80)='./file0\x00', 0x40a00, 0x40) 09:36:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0x240380, 0x0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x2) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000005c0)=0x6787, 0x4) pwritev2(r2, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0xffffffe9}], 0x1, 0x7ffd, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd_index=0x3, 0x200, &(0x7f0000000780)=[{&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/235, 0xeb}], 0x3, 0x8}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) r4 = fsmount(r1, 0x0, 0x0) r5 = dup2(r0, r1) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x7, 0xee, 0x81, 0x0, 0xafbf, 0x148, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x120c0, 0x0, 0x101, 0x7, 0x1f, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0xffffffffffffffff, 0x5, r5, 0x2) io_uring_enter(r4, 0x4b25, 0xd75e, 0x2, &(0x7f0000000040)={[0x9059]}, 0x8) [ 2371.447767] ISOFS: Unable to identify CD-ROM format. 09:36:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 16) [ 2371.474963] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2371.477080] nfs: Unknown parameter 'iso9660' [ 2371.489312] FAULT_INJECTION: forcing a failure. [ 2371.489312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2371.490993] CPU: 0 PID: 14946 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2371.491930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2371.493041] Call Trace: [ 2371.493410] dump_stack+0x107/0x167 [ 2371.493909] should_fail.cold+0x5/0xa [ 2371.494451] __alloc_pages_nodemask+0x182/0x600 [ 2371.495115] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2371.495698] FAT-fs (loop6): Unrecognized mount option "fsmagic=0x0000000000007fff" or missing value [ 2371.495787] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2371.497864] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2371.498544] ? lock_downgrade+0x6d0/0x6d0 [ 2371.499003] ? mark_held_locks+0x9e/0xe0 [ 2371.499442] alloc_pages_vma+0xbb/0x410 [ 2371.499869] handle_mm_fault+0x152f/0x3500 [ 2371.500323] ? do_raw_spin_lock+0x121/0x260 [ 2371.500819] ? rwlock_bug.part.0+0x90/0x90 [ 2371.501265] ? __pmd_alloc+0x5e0/0x5e0 [ 2371.501705] __get_user_pages+0x61b/0x1380 [ 2371.502186] ? follow_page_mask+0x1900/0x1900 [ 2371.502671] ? down_read+0x10f/0x430 [ 2371.503073] ? down_write+0x160/0x160 [ 2371.503493] get_user_pages_unlocked+0x18a/0x690 [ 2371.504007] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2371.504607] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2371.505127] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2371.505731] ? pin_user_pages_unlocked+0x80/0x80 [ 2371.506346] ? trace_hardirqs_on+0x5b/0x180 [ 2371.506941] get_user_pages_fast+0x66/0xa0 [ 2371.507519] iov_iter_get_pages+0x297/0xf40 [ 2371.508116] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2371.508772] ? mempool_resize+0x7d0/0x7d0 [ 2371.509348] bio_iov_iter_get_pages+0x22a/0x1200 [ 2371.509996] ? bvec_alloc+0x17e/0x2f0 [ 2371.510550] ? bio_alloc_bioset+0x2a1/0x600 [ 2371.511135] ? bio_add_pc_page+0x100/0x100 [ 2371.511714] ? bvec_alloc+0x240/0x2f0 [ 2371.512230] ? iov_iter_npages+0x1fd/0xa70 [ 2371.512806] ? ext4_iomap_begin+0x1a0/0x700 [ 2371.513400] iomap_dio_bio_actor+0x77a/0xef0 [ 2371.514140] iomap_dio_actor+0x36f/0x560 [ 2371.514736] iomap_apply+0x289/0x810 [ 2371.515285] ? iomap_dio_rw+0x90/0x90 [ 2371.515847] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2371.516726] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2371.517515] ? mark_held_locks+0x9e/0xe0 [ 2371.518149] ? filemap_check_errors+0xa5/0x150 [ 2371.518825] __iomap_dio_rw+0x6cd/0x1110 [ 2371.519421] ? iomap_dio_rw+0x90/0x90 [ 2371.520005] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2371.520697] ? down_read+0x10f/0x430 [ 2371.521253] ? down_write+0x160/0x160 [ 2371.521821] iomap_dio_rw+0x31/0x90 [ 2371.522376] ext4_file_read_iter+0x2c7/0x4c0 [ 2371.523031] new_sync_read+0x424/0x6f0 [ 2371.523608] ? fsnotify+0xf50/0xf50 [ 2371.524149] ? ksys_lseek+0x1b0/0x1b0 [ 2371.524707] ? _cond_resched+0x12/0x80 [ 2371.525277] ? avc_policy_seqno+0x9/0x70 [ 2371.525870] ? selinux_file_permission+0x92/0x520 [ 2371.526597] ? __fget_files+0x296/0x4c0 [ 2371.527184] vfs_read+0x457/0x580 [ 2371.527703] ksys_read+0x12d/0x260 [ 2371.528216] ? vfs_write+0xa70/0xa70 [ 2371.528782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2371.529539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2371.530313] do_syscall_64+0x33/0x40 [ 2371.530863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2371.531618] RIP: 0033:0x7f35a254fb19 [ 2371.532164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2371.534904] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2371.536020] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2371.537095] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2371.538172] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2371.539228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2371.540294] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2371.556477] ISOFS: Unable to identify CD-ROM format. [ 2371.572056] nfs: Unknown parameter 'iso9660' 09:37:12 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000005b40), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x51, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xe1, 0x9, 0x2, 0x6, 0x0, 0x8d, 0x3052, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x93, 0x8}, 0x18d1, 0xfff, 0xff, 0x5, 0x3, 0xe02a, 0x8, 0x0, 0x101}, 0x0, 0x8, r2, 0x8) read(r1, &(0x7f0000000000), 0x1b4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1, &(0x7f00000000c0)={@remote, r3}, 0x14) 09:37:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') faccessat(r1, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) r2 = creat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2040020, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/vcsa#\x00'}}, {@access_client}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@uid_lt={'uid<', r4}}]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2386.620063] FAULT_INJECTION: forcing a failure. [ 2386.620063] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.621738] CPU: 1 PID: 14964 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2386.622691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.623837] Call Trace: [ 2386.624202] dump_stack+0x107/0x167 [ 2386.624693] should_fail.cold+0x5/0xa [ 2386.625230] should_failslab+0x5/0x20 [ 2386.625744] __kmalloc_track_caller+0x79/0x370 [ 2386.626373] ? simple_xattr_set+0x93/0x610 [ 2386.626970] kstrdup+0x36/0x70 [ 2386.627412] simple_xattr_set+0x93/0x610 [ 2386.627976] kernfs_xattr_set+0x50/0x80 [ 2386.628522] selinux_kernfs_init_security+0x26d/0x4c0 [ 2386.629222] ? selinux_file_mprotect+0x610/0x610 [ 2386.629877] ? find_held_lock+0x2c/0x110 [ 2386.630457] ? __kernfs_new_node+0x2ad/0x860 [ 2386.631065] ? rwlock_bug.part.0+0x90/0x90 [ 2386.631639] security_kernfs_init_security+0x4e/0xb0 [ 2386.632334] __kernfs_new_node+0x531/0x860 [ 2386.632915] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2386.633557] ? __lock_acquire+0x1657/0x5b00 [ 2386.634134] ? perf_trace_lock+0xac/0x490 [ 2386.634705] ? __lockdep_reset_lock+0x180/0x180 [ 2386.635336] kernfs_new_node+0x93/0x120 [ 2386.635873] __kernfs_create_file+0x51/0x350 [ 2386.636503] cgroup_addrm_files+0x3c8/0x9b0 [ 2386.637121] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2386.637826] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2386.638436] ? cgroup_file_name+0x210/0x210 [ 2386.639017] ? cgroup_propagate_control+0x3b9/0x520 [ 2386.639696] css_populate_dir+0x304/0x460 [ 2386.640261] cgroup_mkdir+0xa13/0xf50 [ 2386.640776] ? cgroup_destroy_locked+0x710/0x710 [ 2386.641413] kernfs_iop_mkdir+0x14d/0x1e0 [ 2386.641968] vfs_mkdir+0x493/0x700 [ 2386.642480] do_mkdirat+0x150/0x2b0 [ 2386.642972] ? user_path_create+0xf0/0xf0 [ 2386.643552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.644264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.644979] do_syscall_64+0x33/0x40 [ 2386.645496] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2386.646226] RIP: 0033:0x7f7635ef0b19 [ 2386.646741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.649266] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2386.650344] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2386.651340] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2386.652319] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.653324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.654318] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2386.655753] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 [ 2386.664777] FAULT_INJECTION: forcing a failure. [ 2386.664777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2386.666542] CPU: 1 PID: 14970 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2386.667514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.668667] Call Trace: [ 2386.668759] FAULT_INJECTION: forcing a failure. [ 2386.668759] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.669031] dump_stack+0x107/0x167 [ 2386.669053] should_fail.cold+0x5/0xa [ 2386.671637] __alloc_pages_nodemask+0x182/0x600 [ 2386.672268] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2386.672970] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2386.673807] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2386.674588] ? lock_downgrade+0x6d0/0x6d0 [ 2386.675158] ? mark_held_locks+0x9e/0xe0 [ 2386.675722] alloc_pages_vma+0xbb/0x410 [ 2386.676305] handle_mm_fault+0x152f/0x3500 [ 2386.676941] ? do_raw_spin_lock+0x121/0x260 [ 2386.677554] ? rwlock_bug.part.0+0x90/0x90 [ 2386.678147] ? __pmd_alloc+0x5e0/0x5e0 [ 2386.678730] __get_user_pages+0x61b/0x1380 [ 2386.679337] ? follow_page_mask+0x1900/0x1900 [ 2386.679958] ? down_read+0x10f/0x430 [ 2386.680483] ? down_write+0x160/0x160 [ 2386.681017] get_user_pages_unlocked+0x18a/0x690 [ 2386.681672] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2386.682446] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2386.683098] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2386.683845] ? pin_user_pages_unlocked+0x80/0x80 [ 2386.684516] ? trace_hardirqs_on+0x5b/0x180 [ 2386.685089] get_user_pages_fast+0x66/0xa0 [ 2386.685708] iov_iter_get_pages+0x297/0xf40 [ 2386.686333] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2386.686988] ? mempool_resize+0x7d0/0x7d0 [ 2386.687575] bio_iov_iter_get_pages+0x22a/0x1200 [ 2386.688244] ? bvec_alloc+0x17e/0x2f0 [ 2386.688758] ? bio_alloc_bioset+0x2a1/0x600 [ 2386.689322] ? bio_add_pc_page+0x100/0x100 [ 2386.689899] ? bvec_alloc+0x240/0x2f0 [ 2386.690431] ? iov_iter_npages+0x1fd/0xa70 [ 2386.691024] ? ext4_iomap_begin+0x1a0/0x700 [ 2386.691640] iomap_dio_bio_actor+0x77a/0xef0 [ 2386.692284] iomap_dio_actor+0x36f/0x560 [ 2386.692859] iomap_apply+0x289/0x810 [ 2386.693382] ? iomap_dio_rw+0x90/0x90 [ 2386.693929] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2386.694754] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2386.695498] ? mark_held_locks+0x9e/0xe0 [ 2386.696077] ? filemap_check_errors+0xa5/0x150 [ 2386.696733] __iomap_dio_rw+0x6cd/0x1110 [ 2386.697309] ? iomap_dio_rw+0x90/0x90 [ 2386.697867] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2386.698562] ? down_read+0x10f/0x430 [ 2386.699089] ? down_write+0x160/0x160 [ 2386.699631] iomap_dio_rw+0x31/0x90 [ 2386.700147] ext4_file_read_iter+0x2c7/0x4c0 [ 2386.700776] new_sync_read+0x424/0x6f0 [ 2386.701323] ? fsnotify+0xf50/0xf50 [ 2386.701838] ? ksys_lseek+0x1b0/0x1b0 [ 2386.702389] ? _cond_resched+0x12/0x80 [ 2386.702950] ? avc_policy_seqno+0x9/0x70 [ 2386.703515] ? selinux_file_permission+0x92/0x520 [ 2386.704214] ? __fget_files+0x296/0x4c0 [ 2386.704773] vfs_read+0x457/0x580 [ 2386.705273] ksys_read+0x12d/0x260 [ 2386.705777] ? vfs_write+0xa70/0xa70 [ 2386.706328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.707056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.707779] do_syscall_64+0x33/0x40 [ 2386.708304] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2386.709003] RIP: 0033:0x7f35a254fb19 [ 2386.709522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.712079] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2386.713137] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2386.714126] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2386.715147] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.716133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.717138] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2386.718158] CPU: 0 PID: 14972 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2386.719121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.720215] Call Trace: [ 2386.720570] dump_stack+0x107/0x167 [ 2386.721057] should_fail.cold+0x5/0xa [ 2386.721564] ? create_object.isra.0+0x3a/0xa20 [ 2386.722175] should_failslab+0x5/0x20 [ 2386.722704] kmem_cache_alloc+0x5b/0x310 [ 2386.723251] create_object.isra.0+0x3a/0xa20 [ 2386.723845] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2386.724526] kmem_cache_alloc_trace+0x151/0x320 [ 2386.725145] io_issue_sqe+0x2492/0x7700 [ 2386.725700] ? io_connect+0x610/0x610 [ 2386.726210] ? __lockdep_reset_lock+0x180/0x180 [ 2386.726842] ? lock_acquire+0x197/0x470 [ 2386.727386] ? slab_free_freelist_hook+0x180/0x180 [ 2386.728031] ? find_held_lock+0x2c/0x110 [ 2386.728586] __io_queue_sqe+0x90/0x9d0 [ 2386.729120] ? io_issue_sqe+0x7700/0x7700 [ 2386.729679] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2386.730328] io_submit_sqes+0x4461/0x85c0 [ 2386.730900] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2386.731558] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2386.732197] ? lock_downgrade+0x6d0/0x6d0 [ 2386.732746] ? find_held_lock+0x2c/0x110 [ 2386.733287] ? io_submit_sqes+0x85c0/0x85c0 [ 2386.733879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2386.734543] ? wait_for_completion_io+0x270/0x270 [ 2386.735195] ? rcu_read_lock_any_held+0x75/0xa0 [ 2386.735804] ? vfs_write+0x354/0xa70 [ 2386.736319] ? fput_many+0x2f/0x1a0 [ 2386.736949] ? ksys_write+0x1a9/0x260 [ 2386.737504] ? __ia32_sys_read+0xb0/0xb0 [ 2386.738062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.738908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.739598] do_syscall_64+0x33/0x40 [ 2386.740106] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2386.740780] RIP: 0033:0x7f0fb66d2b19 [ 2386.741283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.743714] RSP: 002b:00007f0fb3c48188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2386.744734] RAX: ffffffffffffffda RBX: 00007f0fb67e5f60 RCX: 00007f0fb66d2b19 [ 2386.745689] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2386.746672] RBP: 00007f0fb3c481d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2386.747636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.748590] R13: 00007ffd34aa395f R14: 00007f0fb3c48300 R15: 0000000000022000 [ 2386.756231] FAULT_INJECTION: forcing a failure. [ 2386.756231] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.757844] CPU: 1 PID: 14968 Comm: syz-executor.7 Not tainted 5.10.201 #1 [ 2386.758329] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2386.758791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.758797] Call Trace: [ 2386.758815] dump_stack+0x107/0x167 [ 2386.758836] should_fail.cold+0x5/0xa [ 2386.762556] ? io_issue_sqe+0x2492/0x7700 [ 2386.763148] should_failslab+0x5/0x20 [ 2386.763677] kmem_cache_alloc_trace+0x55/0x320 [ 2386.764316] io_issue_sqe+0x2492/0x7700 [ 2386.764901] ? io_connect+0x610/0x610 [ 2386.765443] ? __lockdep_reset_lock+0x180/0x180 [ 2386.766111] ? lock_acquire+0x197/0x470 [ 2386.766705] ? slab_free_freelist_hook+0x180/0x180 [ 2386.767388] ? find_held_lock+0x2c/0x110 [ 2386.767962] __io_queue_sqe+0x90/0x9d0 [ 2386.768526] ? io_issue_sqe+0x7700/0x7700 [ 2386.769113] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2386.769780] io_submit_sqes+0x4461/0x85c0 [ 2386.770422] ? __do_sys_io_uring_enter+0x6b5/0x1920 [ 2386.771113] __do_sys_io_uring_enter+0x6b5/0x1920 [ 2386.771796] ? lock_downgrade+0x6d0/0x6d0 [ 2386.772410] ? find_held_lock+0x2c/0x110 [ 2386.772967] ? io_submit_sqes+0x85c0/0x85c0 [ 2386.773626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2386.774302] ? wait_for_completion_io+0x270/0x270 [ 2386.774933] ? rcu_read_lock_any_held+0x75/0xa0 [ 2386.775546] ? vfs_write+0x354/0xa70 [ 2386.776066] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2386.776770] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2386.777565] ? ksys_write+0x1a9/0x260 [ 2386.778095] ? __ia32_sys_read+0xb0/0xb0 [ 2386.778730] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.779472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.780193] do_syscall_64+0x33/0x40 [ 2386.780720] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2386.781427] RIP: 0033:0x7f4f84a17b19 [ 2386.781945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.784554] RSP: 002b:00007f4f81f8d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2386.785619] RAX: ffffffffffffffda RBX: 00007f4f84b2af60 RCX: 00007f4f84a17b19 [ 2386.786667] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2386.787674] RBP: 00007f4f81f8d1d0 R08: 0000000000000000 R09: fffffffffffffe27 [ 2386.788687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.789710] R13: 00007ffc959169cf R14: 00007f4f81f8d300 R15: 0000000000022000 [ 2386.804928] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:37:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x200000}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:37:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000081b225bebb1968350000000001400000000000000000000000007c32197606f8ade41e85a76760c63551bcee042a5c90402cd3d68bc73af38582e681a782721fcf44630dc2124ef4bf1092c8254227d8b943bd816341161de5567caa3b7eb5e933240a94c476ee18a5bc74aa3a2649cc55aa09997b19022ceba9da6f6d1747e41728ae5456fbbeab7433b18c37325d2c3300000000000000000065ce834e1b3917eabc538befadbebf4ced880175c495b2c6c2215b18d67cd65ec451cd8b43f0f213d3ffd0ef684869ac1110b9af9c5496ce3555329253689a3be8b7baf836b3595b07e6a63e199efb51258edbef68612beba546e5e328cb472a64c9d5f84f1ed0a562e2df6eb760c9e0fad05a0c6082b7f5ef9da19cc82cbd96330e5a6b7cddf4ddb794d5e5dd27f4076d648d1d76236a849f4046b13015e6d945ec0a9ecc15bf85e72e624f949c483db6fdd32ddf6fbfff4bd956999a19106b0cffdd28a5ce84fe67227b3f6de2cacaeced92e758a0a0cb0e55da2140790d4f21d7176aa9754efbc395176e389f1682f2d83a5fbf9e835a6bfd49af149190f22253a1d61cce9f0344f3045418793b0b8265e0b43df0448fc34ac43caaef110168b64bfc902b24647398e5b4f8ad2ce986b4920b8c220b5c89275c29c7decb81fb950000000040ddb827b44d010c0000c98e52702b059eac222eecba0197eedcfb2181ed287fad9c290de202b64349f90652599f5e5502d5904084eb98ef37f66802e57c187ad97551d2037eb89eb8e26cc6127a28b406a5e9949a381bdf78028030bf89fd805a0c9ac7798554186f42c1157a4652125b8581902a347753c1a6272a382ee89fab33af8d2e27ec8ad96d4e850319919dd6d613b6", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 44) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:37:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 11) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index, 0x0, 0x0}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:37:12 executing program 6: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(0x0, 0x0, 0x21) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, &(0x7f0000000240)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) getrusage(0x2, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0x2, 0xfffffffffffffff9, 0x0, 0xfffff41d, 0x0, 0x0, {0x2}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 09:37:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x7871, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe27) (fail_nth: 14) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x32}, @in=@dev}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 09:37:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 17) 09:37:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x400300}, 0x200000}], 0x7ffff000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) 09:37:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x900020, &(0x7f0000000900)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0xffffffff) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/253, 0xfd}], 0x1, 0x0, 0x3) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64=r2, @ANYRESHEX=r1]) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000300)='ip6gretap0\x00', &(0x7f0000000440)='./file2\x00', 0xffffffffffffff9c) creat(0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r4, &(0x7f0000000200)='./file0\x00', 0x86) (fail_nth: 45) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) 09:37:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYRES16=r0]) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) signalfd4(r2, &(0x7f0000000b80), 0x8, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0xde, &(0x7f0000000140)="a9b488b59dfb721a5896481fd8f2a0460e30c74abfc4baeb64782d6d856e2f84474a90d34e0711f06d449daa1c110660d3d2040000002b56b751f8cf6c12c9dd8a45b8cbe46cea0f06c1f4ad1bb5120c3d5da828fc5d48ea251695805855932a2ef1d515f51beb11470969d5b01fe19e90bec928f1daf32c29d78b0ff513c6863c75b9586220dbd80e23f6d2d6f343d60bcb2080c1fb76496b790bf1d2612eac40417734d38085e806b308553341f047790e1dbf8f87ad9f90700d10320f3a31b914cd1d5c2e452c7a35e0ef1e861e3df688912c832019d80bfdfe5f10e1", 0x41, 0x0, &(0x7f0000000240)="1c818cb645fbce0ab5b6756b4e6c9308a9769b6c42f5cc777b71a709925676cebee08da2af48093dd5d36deb1c7bad6f03ef169526eea7ac042971317766a3dcda"}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800101, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f00000000c0)="1f8f1c329b2f17a64d52c7481f966472bf367fcad8c0816a9c06c159ef058c87da2aea4c8cfcd289021e9bc4448bb46d6f7e0ca57618b2b48d33d5634ccf6a2bccbc53fd3eb76dd264576ea8a54bef134830") [ 2386.903189] FAULT_INJECTION: forcing a failure. [ 2386.903189] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.905760] CPU: 0 PID: 14987 Comm: syz-executor.0 Not tainted 5.10.201 #1 [ 2386.906722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.907881] Call Trace: [ 2386.908239] dump_stack+0x107/0x167 [ 2386.908740] should_fail.cold+0x5/0xa [ 2386.909256] should_failslab+0x5/0x20 [ 2386.909770] __kmalloc_track_caller+0x79/0x370 [ 2386.910393] ? sidtab_sid2str_get+0x17e/0x720 [ 2386.911003] kmemdup+0x23/0x50 [ 2386.911444] sidtab_sid2str_get+0x17e/0x720 [ 2386.912030] sidtab_entry_to_string+0x33/0x110 [ 2386.912650] security_sid_to_context_core+0x33c/0x5d0 [ 2386.913354] selinux_kernfs_init_security+0x239/0x4c0 [ 2386.914050] ? selinux_file_mprotect+0x610/0x610 [ 2386.914704] ? find_held_lock+0x2c/0x110 [ 2386.915259] ? __kernfs_new_node+0x2ad/0x860 [ 2386.915851] ? rwlock_bug.part.0+0x90/0x90 [ 2386.916437] security_kernfs_init_security+0x4e/0xb0 [ 2386.917148] __kernfs_new_node+0x531/0x860 [ 2386.917736] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 2386.918387] ? __lock_acquire+0x1657/0x5b00 [ 2386.918974] ? perf_trace_lock+0xac/0x490 [ 2386.919544] ? __lockdep_reset_lock+0x180/0x180 [ 2386.920188] kernfs_new_node+0x93/0x120 [ 2386.920729] __kernfs_create_file+0x51/0x350 [ 2386.921336] cgroup_addrm_files+0x3c8/0x9b0 [ 2386.921927] ? cgroup_css.part.0.isra.0+0x110/0x110 [ 2386.922660] ? cgroup_kn_set_ugid+0x175/0x1f0 [ 2386.923270] ? cgroup_file_name+0x210/0x210 [ 2386.923855] ? cgroup_propagate_control+0x3b9/0x520 [ 2386.924527] css_populate_dir+0x304/0x460 [ 2386.925102] cgroup_mkdir+0xa13/0xf50 [ 2386.925623] ? cgroup_destroy_locked+0x710/0x710 [ 2386.926278] kernfs_iop_mkdir+0x14d/0x1e0 [ 2386.926846] vfs_mkdir+0x493/0x700 [ 2386.927326] do_mkdirat+0x150/0x2b0 [ 2386.927845] ? user_path_create+0xf0/0xf0 [ 2386.928405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2386.929151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2386.929858] do_syscall_64+0x33/0x40 [ 2386.930387] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2386.931081] RIP: 0033:0x7f7635ef0b19 [ 2386.931581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.934091] RSP: 002b:00007f7633466188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2386.935126] RAX: ffffffffffffffda RBX: 00007f7636003f60 RCX: 00007f7635ef0b19 [ 2386.936091] RDX: 0000000000000086 RSI: 0000000020000200 RDI: 0000000000000008 [ 2386.937058] RBP: 00007f76334661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.938024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.939048] R13: 00007ffea99cb48f R14: 00007f7633466300 R15: 0000000000022000 [ 2386.940631] cgroup: cgroup_addrm_files: failed to add cgroup.type, err=-12 09:37:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) (fail_nth: 18) 09:37:12 executing program 6: openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x3bac, &(0x7f0000000040)={0x0, 0x5489, 0x8, 0x3, 0x206}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x4, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000580)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x6000, @fd, 0x40, 0x6, 0x8, 0x5, 0x1}, 0x6) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000006c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x8, 0x3, 0x0, 0x7f, 0x0, 0x1}, 0x3ff) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000094e3c2"]) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x409}, {r6, 0x140}, {r8}, {r4, 0x2015}, {r5, 0x4000}], 0x5, &(0x7f0000000280), &(0x7f0000000500)={[0x8001]}, 0x8) [ 2387.020792] FAULT_INJECTION: forcing a failure. [ 2387.020792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2387.022435] CPU: 1 PID: 14997 Comm: syz-executor.4 Not tainted 5.10.201 #1 [ 2387.023345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2387.024427] Call Trace: [ 2387.024791] dump_stack+0x107/0x167 [ 2387.025282] should_fail.cold+0x5/0xa [ 2387.025801] __alloc_pages_nodemask+0x182/0x600 [ 2387.026463] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2387.027122] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2387.027943] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2387.028652] ? lock_downgrade+0x6d0/0x6d0 [ 2387.029210] ? mark_held_locks+0x9e/0xe0 [ 2387.029767] alloc_pages_vma+0xbb/0x410 [ 2387.030355] handle_mm_fault+0x152f/0x3500 [ 2387.030965] ? do_raw_spin_lock+0x121/0x260 [ 2387.031544] ? rwlock_bug.part.0+0x90/0x90 [ 2387.032129] ? __pmd_alloc+0x5e0/0x5e0 [ 2387.032678] __get_user_pages+0x61b/0x1380 [ 2387.033256] ? follow_page_mask+0x1900/0x1900 [ 2387.033871] ? down_read+0x10f/0x430 [ 2387.034406] ? down_write+0x160/0x160 [ 2387.034932] get_user_pages_unlocked+0x18a/0x690 [ 2387.035577] ? internal_get_user_pages_fast+0xfd8/0x23a0 [ 2387.036308] ? pin_user_pages_locked+0x7b0/0x7b0 [ 2387.036971] internal_get_user_pages_fast+0x14a6/0x23a0 [ 2387.037718] ? pin_user_pages_unlocked+0x80/0x80 [ 2387.038376] ? trace_hardirqs_on+0x5b/0x180 [ 2387.038965] get_user_pages_fast+0x66/0xa0 [ 2387.039544] iov_iter_get_pages+0x297/0xf40 [ 2387.040128] ? csum_and_copy_to_iter+0x14a0/0x14a0 [ 2387.040793] ? mempool_resize+0x7d0/0x7d0 [ 2387.041358] bio_iov_iter_get_pages+0x22a/0x1200 [ 2387.042008] ? bvec_alloc+0x17e/0x2f0 [ 2387.042532] ? bio_alloc_bioset+0x2a1/0x600 [ 2387.043112] ? bio_add_pc_page+0x100/0x100 [ 2387.043680] ? bvec_alloc+0x240/0x2f0 [ 2387.044196] ? iov_iter_npages+0x1fd/0xa70 [ 2387.044768] ? ext4_iomap_begin+0x1a0/0x700 [ 2387.045356] iomap_dio_bio_actor+0x77a/0xef0 [ 2387.045968] iomap_dio_actor+0x36f/0x560 [ 2387.046543] iomap_apply+0x289/0x810 [ 2387.047052] ? iomap_dio_rw+0x90/0x90 [ 2387.047567] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 2387.048356] ? delete_from_page_cache_batch+0xa30/0xa30 [ 2387.049071] ? mark_held_locks+0x9e/0xe0 [ 2387.049640] ? filemap_check_errors+0xa5/0x150 [ 2387.050269] __iomap_dio_rw+0x6cd/0x1110 [ 2387.050818] ? iomap_dio_rw+0x90/0x90 [ 2387.051348] ? iomap_dio_bio_actor+0xef0/0xef0 [ 2387.051975] ? down_read+0x10f/0x430 [ 2387.052480] ? down_write+0x160/0x160 [ 2387.053009] iomap_dio_rw+0x31/0x90 [ 2387.053504] ext4_file_read_iter+0x2c7/0x4c0 [ 2387.054107] new_sync_read+0x424/0x6f0 [ 2387.054651] ? fsnotify+0xf50/0xf50 [ 2387.055144] ? ksys_lseek+0x1b0/0x1b0 [ 2387.055662] ? _cond_resched+0x12/0x80 [ 2387.056192] ? avc_policy_seqno+0x9/0x70 [ 2387.056734] ? selinux_file_permission+0x92/0x520 [ 2387.057387] ? __fget_files+0x296/0x4c0 [ 2387.057932] vfs_read+0x457/0x580 [ 2387.058423] ksys_read+0x12d/0x260 [ 2387.058909] ? vfs_write+0xa70/0xa70 [ 2387.059417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2387.060123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2387.060828] do_syscall_64+0x33/0x40 [ 2387.061338] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2387.062031] RIP: 0033:0x7f35a254fb19 [ 2387.062572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2387.065260] RSP: 002b:00007f359fac5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2387.066351] RAX: ffffffffffffffda RBX: 00007f35a2662f60 RCX: 00007f35a254fb19 [ 2387.067377] RDX: 00000000001b4000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2387.068392] RBP: 00007f359fac51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2387.069420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2387.070454] R13: 00007ffede2ce5ff R14: 00007f359fac5300 R15: 0000000000022000 [ 2401.423991] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888044bc74e0 (size 144): comm "syz-executor.0", pid 14964, jiffies 4297053564 (age 22.898s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 48 06 67 65 00 00 00 00 ........H.ge.... 56 ce 87 25 00 00 00 00 48 06 67 65 00 00 00 00 V..%....H.ge.... backtrace: [<0000000077965b02>] __kernfs_iattrs+0xbc/0x470 [<00000000c10cac40>] kernfs_xattr_set+0x2b/0x80 [<0000000079d6fed4>] selinux_kernfs_init_security+0x26d/0x4c0 [<00000000a7c7fcf8>] security_kernfs_init_security+0x4e/0xb0 [<00000000c080092c>] __kernfs_new_node+0x531/0x860 [<000000007862b59b>] kernfs_new_node+0x93/0x120 [<0000000066d56ddc>] __kernfs_create_file+0x51/0x350 [<000000002765b181>] cgroup_addrm_files+0x3c8/0x9b0 [<000000009039aa34>] css_populate_dir+0x304/0x460 [<000000002244b516>] cgroup_mkdir+0xa13/0xf50 [<0000000040e05bcd>] kernfs_iop_mkdir+0x14d/0x1e0 [<000000006ca817ee>] vfs_mkdir+0x493/0x700 [<00000000716c5300>] do_mkdirat+0x150/0x2b0 [<000000009bb81553>] do_syscall_64+0x33/0x40 [<00000000925aa885>] entry_SYSCALL_64_after_hwframe+0x62/0xc7 BUG: leak checking failed VM DIAGNOSIS: 09:37:35 Registers: info registers vcpu 0 RAX=ffffffff83e5b500 RBX=0000000000000000 RCX=ffffffff83e435bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5bb08 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff856725c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5b50e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffabee5f58 CR3=000000001b8a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0a64656c69616620676e696b63656863 XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=124c436e861682f8d690e6bb1f5f03db XMM09=82e3b3162594a54b1d3d185c698ef490 XMM10=e194eee8e3c5504e51f63a7292cf8eda XMM11=aaf1c997bd9a4ea6b997d32f82feb002 XMM12=4cd6ea40abd08422fa33b8cb07986ba6 XMM13=b79354057c8420f81e29f73724b648dc XMM14=3b2cdb97e8e81bec6014c31a12a37995 XMM15=a00746ddc6c1e2ca2b774876ccfb343a info registers vcpu 1 RAX=ffffffff83e5b500 RBX=0000000000000001 RCX=ffffffff83e435bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5bb08 RBP=ffffed100112e000 RSP=ffff88800897fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff856725c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5b50e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f829bd2e2f0 CR3=000000001b8a0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000411bb64000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000