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", @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x6, 0x5a, 0x0, 0x0, @str=':\x00'}, @typed={0x8, 0x31, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x2e, 0x0, 0x0, @uid=r5}]}]}, 0x118c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40844) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) [ 1550.022312] kauditd_printk_skb: 76 callbacks suppressed [ 1550.022341] audit: type=1326 audit(1710338928.192:3598): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:08:48 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:08:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x8) 14:08:48 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000480)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0a6bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeacf7c7c80eddea7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff1bc485a6f87289cb59221b89412a738bec0040470d39ab2da8398c54a22678465ab940bd3760836107f7c7e9d6dd2c0e8e2f89c5886a78fb4ea07e9f380907767797cdf1b37167940955613104ad20818f1c393c438dabcad2c531388482e14cfda4433a58ae357b0d0036bd043a72e3d424e6268fef76a854da48f5a31ca23f97254ca1dac63ba6814fc13f82c7bbe3f001f7366efeb850771a3ac8de55a9464bb97771e8e3e2cc28822851cb6c0dcd9a43a6fadf", 0x4b7, 0x7}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1550.044757] audit: type=1326 audit(1710338928.209:3599): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.047192] audit: type=1326 audit(1710338928.209:3600): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.051120] audit: type=1326 audit(1710338928.209:3601): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.053198] audit: type=1326 audit(1710338928.209:3602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.056907] audit: type=1326 audit(1710338928.212:3603): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.060503] audit: type=1326 audit(1710338928.212:3604): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.063248] audit: type=1326 audit(1710338928.212:3605): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11096 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1550.066278] audit: type=1326 audit(1710338928.212:3606): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11101 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1550.069240] audit: type=1326 audit(1710338928.213:3607): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11101 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1550.099173] FAULT_INJECTION: forcing a failure. [ 1550.099173] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.100381] CPU: 1 PID: 11110 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1550.101087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1550.101910] Call Trace: [ 1550.102182] dump_stack+0x107/0x167 [ 1550.102552] should_fail.cold+0x5/0xa [ 1550.102945] ? create_object.isra.0+0x3a/0xa20 [ 1550.103413] should_failslab+0x5/0x20 [ 1550.103801] kmem_cache_alloc+0x5b/0x310 [ 1550.104213] ? sidtab_sid2str_get+0x65/0x720 [ 1550.104662] create_object.isra.0+0x3a/0xa20 [ 1550.105113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1550.105624] __kmalloc_track_caller+0x177/0x370 [ 1550.106094] ? sidtab_sid2str_get+0x17e/0x720 [ 1550.106552] kmemdup+0x23/0x50 [ 1550.106883] sidtab_sid2str_get+0x17e/0x720 [ 1550.107319] ? audit_log_format+0xca/0x120 [ 1550.107756] sidtab_entry_to_string+0x33/0x110 [ 1550.108224] security_sid_to_context_core+0x33c/0x5d0 [ 1550.108751] security_secid_to_secctx+0x72/0xc0 [ 1550.109232] audit_log_task_context+0xf0/0x170 [ 1550.109693] ? audit_log_format+0x120/0x120 [ 1550.110134] ? from_kuid+0x85/0xc0 [ 1550.110510] audit_log_task+0x1cd/0x310 [ 1550.110910] ? __audit_log_nfcfg+0x210/0x210 [ 1550.111369] audit_seccomp+0x76/0x200 [ 1550.111722] ? lock_downgrade+0x6d0/0x6d0 [ 1550.112088] __seccomp_filter+0x669/0x1530 [ 1550.112472] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1550.112911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1550.113306] ? wait_for_completion_io+0x270/0x270 [ 1550.113703] ? fput_many+0x2f/0x1a0 [ 1550.114012] ? ksys_write+0x1a9/0x260 [ 1550.114322] __secure_computing+0x191/0x2f0 [ 1550.114674] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1550.115105] do_syscall_64+0xf/0x40 [ 1550.115400] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1550.115814] RIP: 0033:0x7fef23554b19 [ 1550.116136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1550.117613] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1550.118233] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1550.118797] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1550.119391] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.119967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.120536] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:08:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa000000) [ 1550.171544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:08:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x58, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000004200210e0000000093acaf8d3cc07f065dcf300a148924d97bb4dd591aa2f2ca71812f70b0c9"], 0x14}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) read(0xffffffffffffffff, &(0x7f0000000540)=""/194, 0xc2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) ioctl$CDROMSTART(r3, 0x5308) timerfd_create(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040), &(0x7f0000001e00)=ANY=[@ANYBLOB="00fb150581f7c2351a73f346b3a60f5ed8fb3287f17c5c56da1921e4f2846ec9ee14e24da172fe695424a04c539efa360405078cc6347813419aea300e2d8460d2ce63ecf73b4605069f304f03400fcfb8f1b2fd02096e2edbc8c4b2b15abd9e57f9c86ed27001d171559e28aff34ca83da666d2de7cd4fd920a5e1e046af5414c58769ac50c67fbc181ed62d4b8c877e1272639218dea9a8b9f2f1df74e0fa03a4c40a29d33f08d568215fcb557b567679f16118ded94eaf87e6682301d4ffc9eaddf21ae556434f6a8794c8383e94e49455ce106592ed1c86ae199f10a82c36939c3edb6686fa834342e6928e9a66cb17fc4f5b280b1dacc4e8b944cf9b1b687eeded8a997c6dbd6a02a340e8e6b0a5d0581239d7aada9e4038103c5a91995dd1f37a0928c33b1dc0bbf36a9d4160ea47ad41daf61909c1bf55d09113c1aaaf85dcb267d24773957ca7bef8a9daf9c2a8a450f36ea6bb2c1b1ddd9e477051b341ec1a9e51a29b5a58304f8622b8256289edd53fc9a9bcb1fd741d03bc28caabebe7a45fae218fd730d57fac7eccd61ce725a5512530d0ce3877c474588d7f8d728a92fb5e0b476b8e5543a94fa4cf9ff2a6dcd6bbdf66b2bc657180f5e8d73ba527d025c19a2217218098368d56f3431f27c6264a0b1362cb8987f0ff25c5fee728695d774d872e81d78d893133bc397b501541d8b17049d556173393f3e2f023aadd8b3bf0d55324460287b1d6e9bc439ea08bef7ed2bc36847d6f08733888e49398914bef09815d0955db9c7666230df5cad8665eaef266a8bcada41bdf725867df192c9ee025d843169b802bfb9630194d6003e9c62bcd4b2f2d7f997030722810845515d5ef87558ed38bc7337a326d93b25417103cfc768f67dd1f4716a0aeb7fc6fb03f0f0bf24956f36f991afc64a407972f55a975d3e65274b4d9f2f315e5190595814ab13d68088555890e98926ac39240f8f3f7c9706945199a4f3c7993f3e6d8f68c0c9ee060b5b06ca1921245c7e3017342bd0370eee5e17bb8da88d426ecc9c73b71a1a6c38d7693d8614aba822c20f6312183b6f27a3b37610d7589f880d196e87b35116cbeea6a5ce194c3ac647a906d499c69046cb190c48a35a985e232be4d33db5ca59d9d57ccdea2a3fe3428fb802f76986673c8acf9cf4cd1216f50e1f2454d4b4b380ae6e76ea7c2f7243a4ba50e8197e636ab846a842d93d6dc7197203e609c1814303f40988451f82f2fa426179781d9652515057dac66bc858f24d0f8efd11ca93df99eb3f289be057971fe64ec935d18ae1f1ef7aecc865f0ac4d24134cc802d7e8772a7541953cfb0b1ac689edbaf78d718cafab320bc762d9b5134375fa3116a8c142d11b95d9da38ae3f029a2ac99805c58994671e3e972e8a4182cbfffabbbfe52de7fda0957cd87ffa336260f510d0416530446189d738c8486752cf6a749cb3a07da5c35c7e784434decc6075586261f84c1ba85468681c1fde1c2f66b5ff4bffc406bf390f5a589c6bbdc4bcb638c3ef547f02b4bbb477d67bcffd99a2ff22859e49ea9e2efaab7485c80ef3f1afb0a823c330ee8099d6feb010959bd2057c80934a98355af2dcdb4abcfa48b4cb913e421259dd738b1013f6d731e5fdb58230b3884cd0b34818b89a58d753878a04206830ba64ce5af4a318b78237904344f28350ed0601536822d70524c19adbf099ac7d86e6995a048f1e7625776bc514b388e7584c3866a87c7b3af2cb268813cc2e50e290ddca296e63970a61c22ab58bd4d4e09134f1c6e780e7f24b485aef178b398ef9ee918493d0b4eab64da0bacb8cdd7d8698667844e06de7200419907a39bce330ece7390e23e5d7bc7b237b831da899d86c9c94ed56ec0a8d7d718df38d07748bd5821173b6d8f59c26f3bfd89bfda2c4c41fc79011eaf7a04d180ff9dd3dd1f7b79c815fc69c93fd9a977ec9f45e897898866e70c5415760b5df4d20da2ca8bc613ec61a901516d41e31997c6882f69b6d2b8e077c7d3f6e70cc5177fdc69e42dfd26c6d8c4e0c5801f600ef9d98a2fe0988aaddbd961bedf0d7ec87ccc1beb41f74574f2c988667c48ee478dfcb0079e1dcbb7d073c0c77c9bb1cef79f3afb03e8675367a8d0585aabf7452f5ca303928fcb1773899699442b41930779c39d13d8115d93448eaca33bf84655920758a0508570d808bac7727da4f65fd97a4df5f4e7abcbada9ffec9c65c6295ce95bd699a263ca84dae70c240ac10ea3ce63107f6de17b856e7c54d639e74f02d9cf164547d45d516cd056c6859f01cfd8779fd8c672ee3e0556b3d00b98c9fa09a5070fcd05f2b2711eb5ffc90cae59cb2f1e0b4a64c8cf4a80c5f01de12269a65b816b9db32d755d2cc0de221eefc6a36b250e50109d77a17e26d9251efc0e764cc3c8b47f2369a42fe08b29e24b2cd862298df875bed5232edf36d577fd165f619a7fc50a10b26e13b3256cd278b38a97305f1efb2553922092c4cecd077c6c462f8573e108f51e18d0fafe0dc83b02fff931da0c92fbad1fad887a69d8164a33b25a6a3ecde580a85a5245930e2e0070fe409977683a603173d3b8dd84d56e3dd4608caf6f6ada6c586dc928bb2775f738892098ad4b3ae719a78cb81e4cbcd1a22cdde5effaba12f1f3d7b2aad7f268a82e8e84dfabfcc1ba62633e5cd998320e075d0479cca015985cd7bf24982d18637a90af34403e38d0fdb7fad727f751e8e75a1fd399682267eecf46c199b263a3a282c910bcdf1f8c0ccbabcec9e2ffad1187513f4ce1a65fb7d8c2f2c91df1c68beea0d8fca97dd96867c93823b451fa9064f4c9d44b2e8cc408d32ab7a2158586e17e1b722faff6cccd235a981d4169e93f86c2f94a792d67ec3e9961509a33565c5cb5e9ca9e383109f7d7525ae38873efa5d604aa7c1d1c40e735e3f19c3b07cf5cf8564bfcf148a9c38fce25ae8eb9f879eb3901eccd35a2a07cbfc062263bb3f4483fb335185fa2e8855e3b1886f390a41243d47f125b4a8431e1e9c0b9c38a613a7ea75d4efa4a2d54b23092c93daf568d9a637f3f5f68c317c7279e36e5b318b223bc8ca1fe12f11c1df403a215ee6b341f273a6cdbbeb6ae959b07c156d8d5953205cd08a1d61e599b68c8a8fb76e02a8d9d35e601abcd6ba73182c86394658f3493a5766b40a2bd0c6e24f18391d1534a0b6f7d92650612f342d26d34f53dc40455112e9ab53b3cd1033381133a1ef3689ef07e18ebacea0df3325fba09ccfe647761525286d83d1fae2462f7c57fb66a19bb1952234514afc4847180f99e8b092379b2e2943e0d85559c1c0001e01f666a0f225e1b12871a5555fd9db52dcd8d59a4b18bf2aa1cd8f5fff79a2cbcf966589430066d7b23884e245a5100339fcf5371f78cc5129a7c15ac1b13f25846cb26f1bf948d585b65232ed352a51790fdcbd742e82ced987604fc0eb38512839c8014fa7b26ce2892052c9cc2ae9ba66f0640e1e993ccf35b773d349f4cc8c05f4507c0d06470f64bf410f73770568c174f4798594ff8a703d93f9a25781e223f5a2bf25e1a653aea14d19f9222d6118182ec5d259d4c2e1a553bb9c754c8c73c36bcfffde176d4ef34b6e613ec4acbc2882afd49c4aa66dcfda053d71b3909e01ac7192b1579a15b0164b04198ae6c6fd7e313711b5b78c901bf24d685b362d637a04dcbb5cef5bf9adb12fd7e1d523f0650cbef7165aaa46bcf4f3d2478271806771c9dca9c1b7d73395653f6d2a6c3f480c54a0e34cd8e6bc6a83a06e6383a3b609e3873fb069c1850b3da70faae92b8183a59580d167113b1e8dbdc9040a2da991ce598a99d68e82b37c2b7dd5246d198749d63ac1c53aa8c203d66b0df8ade18ac2c6dc5aeed1c30f0bf00773767ac93f20afdb92326decd4ea69e0df0ff968ea6f11c57cfcea200154d4e3a31eebc0c2a154f26733efdb6e78dfd66e548cbffb81bdc3be1b9121682829cf9fadcf93f5ec60c3b024da7edb26d0416c859086e3c99172041a85fc613e84caa7dad95812259ddc2761f7002f84222fbf877cf458578873e4ebbab7ef41a1449c7c7e7564af2f6e29008e32bfe5d0c7185e12f8479a79c6b73ade6cb8958fa22ec9e7958c9937607abc9a1d6212bc3bd3cb07f1dd2e89f12e48202dd4791d881ef6bb3ee53327671806c382460c5ca80510891ea66456bef277bd7015f9df99a1d9a479c250f9fa5729368dfc5547fb133aadb11aed20887246a87f4ed20610670330cd595613f0841c4993744f30747325e695c287f53592e5655b22ff3be2efbccd6d976c3deb4cdd4baa0c3aa6fd1d6c203a67740d377b8886b8a89861993c5eb99add94be8df8758f646b5cf4b5d493fd4ba0fc346f277065eaf1522b3802e1790a0b77c91be342ad7f9fb9bf67ed9c7c987ef3ccf18bc9ae11f952b28348d8b542c7b22c4a548a3f7553648e2db75fe74e7542c79cbc1c4cfc93fea97c8340e1c2cce3e520338614e3a92a4820402f7659283ef1d1762bd3e5227c9ca301d14a3829efe3407ebf64137b3dd554b58171bf1aa09017c311b474b11ded31ccf67696dd9e7bb0683833b264e740610b224016429efabab22e5dcbf33bc372675383ba05bad06d6059031303ee416a940bb93ab1e196c45a45a254d11c5eda5e9fa6693a5808c79da32183e8dfc83fed1d655e3cf0f6d7c1da5fff2737b77b218a85a7843dafcffcb53148bb7f046f92ea40435da470197cca389f705b63682c4f5d3d6c50d7c7a2955c3ad45a330b48fb4a63791d3c4617ce62afd3749c6385d95c3f39d2e633247aa51c8ad82821d8d497b1c38476ea66e6aca79e7c332edb86f3dd3bd50677c1979a2722633f160214c6c48c5d56ea3ab98376222ef4effa1988887fc61a19326e2b026a44ab5c2b7ec6a390b163c82c387653551c8171d034f7d56f4a0fb9175144735982e50690dfeebe31566532ea46a4eb47f38a6e2bf3b7cdb07aff75764c4cc0ddb076973e6e4560e88eacffb68187d78d21765f604f4a9e6dd948aeca1dc8e8602dc464ebe8bd4dce9116fb3e5a14367cc7796a18919727af35eb4e01f7685b546f33cbb6cf3ba094a5c62115a5357f1bc28f6c72c2b79a997094f535c55dadefa0d0d78e12e41fc561856aad07f17e390f3d23c71569e1d0b708882363796ee97971bacfa514c4b4470961bcab324db4ec726580916f754581126f60f64b1703933208c2d8d294d970452ee826828c794e9c42f87c1ed23b56793a2ce838222fe195e28c77b2067c4bb7a5e2e07f24541cc8f334e0c08e55bcfcb8526baecab7e34a39d1b7826c1836e7cbd6634ed87203ff694671a1bba1177798b9ff2a4e169014ca9ea14ce00ba14b75a04a326e3c7a53776988a76f50cccf2abe1a94031462752ce1d10f653ffdf00bc07e927a064e5e915a627e9aec49417e33710d781ebd29848c59a8d9c6a9f09d7d5ec25b9618e19a1e3989415b6512267b19b8396e5c2c24782cfc687b3034ef3ad7192fca4e7b2f76347c1f77cd28230dce8ad95d014f2a402d73a6d1c78fc9628362a0a6a1f59244554c980263170617edf4eecdb95b044fc0d5cc19b69a8e399895bb7367fb5f571f153ee5b137e7c3456157e6ac5ae43e42e098ef779c91088f970c96cc451abce8b6ecd9637fdc2087fd0afd7d3ea0c8cc918312cba6639eff124c46eb1225bfc495be421eaea863718a713cb21a017d0d352e18f801b1523d754c7c0a800ee4262acca726ba7ee3cc4c9cb3e8d77ef6302c3720b395fb62346de92096d44560d9a77fb04eb7085d04f2ecfc6cf0f4c29730e369f719ba7a978319065ae1f710cb0ff19ec2d0b3304dc819fdff6135e5226ac502c1"], 0x1015, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup(r4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78}) r6 = accept$packet(r0, &(0x7f0000000340), &(0x7f0000000380)=0x14) close_range(r6, r1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@polexpire={0xc8, 0x1b, 0x20, 0x70bd28, 0x25dfdbfb, {{{@in6=@remote, @in=@multicast1, 0x4e24, 0x8001, 0x4e23, 0x9, 0xa, 0xa0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x3fca, 0x7, 0x3, 0x1c45, 0x7fffffff, 0x9, 0x3}, {0x7, 0x2, 0x100000001, 0x402}, 0xfffff5c1, 0x6e6bbc, 0x2}, 0xac}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) [ 1550.185488] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:08:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xa) 14:08:48 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:08:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) write(r0, &(0x7f0000000180)="9e3828fc0490669d3aeecd6d8b4309bd100fc6ad6c98c210a0d51f6c74758cf84d48a8223329dbce981395bc0ba48fe5a98610b717edee744726599db13b9e7fb6b065a0dc4aad44b75f1a8a02287120a90d20a8676ffe3814ae855e7ef89b26a0f20fce3556649127c09727b01028c44fe2223ad06f0380d1ee6d3fa945b1684a60b5305a320530f70c38bbf781f4ca70197242af7fbcd55cd275d0c52286c6", 0xa0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000480)={0x1, 0x0, 0x1000, 0xb3, &(0x7f0000000300)="e343522452e112953abd8d7561acf16bf59b9890dad70efa16f18e9942e87842915aeb4110262edeecb632baec37ce9dde27f35ce4f97fa3dc56ca5d44eb0b28f58debbc3f585a163b0a848a816030d406307505f9a6dbdbc0df312836df94b3e163def96a0e4b4bbe8bd2aa6aa312a51c8f8b7ba24bf0e84ac16d2f4e4cba07fd796c1fb2eecfc8462d566a74a0d1fa2198735f18e0d4818694fbac5a2fce80bfba36f6814837707e3275d7c0da3e32a9a056", 0x89, 0x0, &(0x7f00000003c0)="b3a60212dc0713366722bb11d131ad99b7e25403b66f53f09cb12c9aad07bf0a925ed8ad12cbadc00c896b010e21b053e32aa565464f59a085052036b9689c2dc227865795704ccba9860a712402b17e778220e0ada2a918fab522e644fab35d4e4d7a7cb0db6f08cd6add6009992a1f12d2aec4316be3013235fca6bd713a352cd49a9e047b1f551e"}) r3 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000040), &(0x7f0000000240), 0x2, 0x2) 14:08:48 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) openat(0xffffffffffffffff, &(0x7f00000005c0)='./mnt\x00', 0x60200, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat(r1, &(0x7f0000000600)='./mnt\x00', 0x20000, 0x4d) r2 = open(&(0x7f0000000140)='./mnt\x00', 0x400000, 0x14c) recvmsg$unix(r2, &(0x7f0000000400)={&(0x7f0000000640), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/184, 0xb8}], 0x2, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x110}, 0x2040) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/98, 0x62) [ 1550.330577] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1550.332885] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:01 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) openat2(r1, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)={0x501042, 0x80, 0x3}, 0x18) creat(&(0x7f0000000140)='./file1\x00', 0x50) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/96, 0x60) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './mnt\x00'}) 14:09:01 executing program 4: r0 = syz_io_uring_setup(0x274d, &(0x7f00000002c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x542f, &(0x7f0000000240)={0x0, 0x1228, 0x10, 0xb, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_setup(0x5a5d, &(0x7f0000000540)={0x0, 0xa52e, 0x4, 0x2, 0x373, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_submit(r3, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4024}, 0x1}, 0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r7 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='UGn\xaf\x83\xc5)h\xdf\xb2%}6\xf6\xf3\xb80\xb6L{n\xc2\xd1iE.\xfcE\xe1xk\xf6@\x05\xf0\xb80u\x1cX\xd9\xf0H\x04j\xa6\xa5\x13[#\xe2l\xacJ\xa5=\xe4\xd5\xc4\xc0\xba\xddm\xca\xcd\xfab\x06i\x1a\xf7\xa7h\xee\xcf\xc4\b*B\a5s\x87\x96\x9c.bO<\xe4;Co\xfc\x17N\xaf\x94zt,O=w[\x87\x840\xd2\xb3P\x1c\xa9M\xdc\x100N[\x8d+\xe5cC\xefN84)\fi\xd2\xda\xe5\xed\xa9\xd5=\x04(\xe2z\xf4\v\xf1\xd4\xceG\xaf9\bJA\xa8@\xb1\x9bGXem\x05', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) r8 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x53, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r7, r0, r8]}, 0xffffffffffffff27) [ 1563.223477] kauditd_printk_skb: 43 callbacks suppressed [ 1563.223489] audit: type=1326 audit(1710338941.393:3651): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.225760] audit: type=1326 audit(1710338941.393:3652): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.228738] audit: type=1326 audit(1710338941.399:3653): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.230832] audit: type=1326 audit(1710338941.399:3654): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.238492] audit: type=1326 audit(1710338941.399:3655): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.244897] audit: type=1326 audit(1710338941.401:3656): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:09:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x10000000) 14:09:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000040)={0x10, 0x2, {0x3, @struct={0x3, 0xfffffff7}, 0x0, 0x100000000, 0x9, 0x1, 0xd423, 0x9, 0x10, @usage=0x7ff, 0x3, 0x400, [0x9, 0x96, 0x6, 0x3, 0x2, 0x2]}, {0x7, @struct={0x8, 0x2}, 0x0, 0x3, 0xfffffffffffffffb, 0x73dd, 0x0, 0x0, 0x48b, @usage=0xfffffffffffffe01, 0x7f, 0x0, [0x8001, 0x8000, 0x80000000, 0xd7, 0x2eb4, 0x700]}, {0x8, @usage=0x9, 0x0, 0xb80, 0xfffffffffffffffb, 0x4c3b62a8, 0x9, 0x4, 0x444, @usage, 0x40000, 0x0, [0x8d0, 0x800, 0x0, 0x9, 0x0, 0x5]}, {0x4, 0x9, 0xfffffffeffffffff}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={r3, 0x1, 0x49b1f3e2}) 14:09:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x201, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 9) 14:09:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x48) 14:09:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xef}, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x25, &(0x7f0000000080)={0x0, 0x3302}, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = eventfd(0x0) r5 = dup2(r4, r3) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/183, 0xb7}], 0x1, &(0x7f0000000480)=""/160, 0xa0}, 0x0, 0x2, 0x0, {0x42, r7}}, 0x0) io_uring_enter(r0, 0x27a2, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) fsetxattr$security_ima(r4, &(0x7f0000000100), &(0x7f0000000200)=@md5={0x1, "026c3e2b72e0a6b7b143b272a14fa385"}, 0x11, 0x0) [ 1563.266088] audit: type=1326 audit(1710338941.426:3657): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.280590] audit: type=1326 audit(1710338941.426:3658): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.289536] audit: type=1326 audit(1710338941.433:3659): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.299117] audit: type=1326 audit(1710338941.433:3660): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11154 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1563.305210] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1563.307798] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1563.311379] FAULT_INJECTION: forcing a failure. [ 1563.311379] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.312434] CPU: 1 PID: 11173 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1563.313024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.313703] Call Trace: [ 1563.313935] dump_stack+0x107/0x167 [ 1563.314244] should_fail.cold+0x5/0xa [ 1563.314564] ? audit_log_d_path+0xce/0x190 [ 1563.314908] should_failslab+0x5/0x20 [ 1563.315220] kmem_cache_alloc_trace+0x55/0x320 [ 1563.315603] audit_log_d_path+0xce/0x190 [ 1563.315944] audit_log_d_path_exe+0x40/0x70 [ 1563.316310] audit_log_task+0x278/0x310 [ 1563.316639] ? __audit_log_nfcfg+0x210/0x210 [ 1563.317013] audit_seccomp+0x76/0x200 [ 1563.317329] ? lock_downgrade+0x6d0/0x6d0 [ 1563.317681] __seccomp_filter+0x669/0x1530 [ 1563.318040] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1563.318426] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1563.318835] ? wait_for_completion_io+0x270/0x270 [ 1563.319240] ? fput_many+0x2f/0x1a0 [ 1563.319554] ? ksys_write+0x1a9/0x260 [ 1563.319881] __secure_computing+0x191/0x2f0 [ 1563.320242] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1563.320687] do_syscall_64+0xf/0x40 [ 1563.320997] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1563.321430] RIP: 0033:0x7fef23554b19 [ 1563.321739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.323263] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1563.323902] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1563.324495] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1563.325079] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.325667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.326261] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:09:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffff) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 14:09:01 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) signalfd4(r1, &(0x7f0000000140)={[0x3]}, 0x8, 0x800) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:09:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a0009000000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0100000000000000000000000000000000000000000000e7ffffffffffffff0000000000000000000000f7ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00000000000000d9f9cd97cc5bab4d583c8f547ee3000000000000000000003d5f431a45c78f440c22cd82ca857190cf220dc3947335776747e97e9262aa890bf06600afe3"], 0x104}}, 0x0) 14:09:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20000000) 14:09:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4c) 14:09:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @none={0x0, 0xffff}}, 0x14) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(r1, r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x878) 14:09:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1563.469178] FAULT_INJECTION: forcing a failure. [ 1563.469178] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.470284] CPU: 1 PID: 11198 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1563.470539] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1563.470864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.470869] Call Trace: [ 1563.470886] dump_stack+0x107/0x167 [ 1563.470903] should_fail.cold+0x5/0xa [ 1563.473513] ? create_object.isra.0+0x3a/0xa20 [ 1563.473901] should_failslab+0x5/0x20 [ 1563.474214] kmem_cache_alloc+0x5b/0x310 [ 1563.474563] ? audit_log_format+0xca/0x120 [ 1563.474921] create_object.isra.0+0x3a/0xa20 [ 1563.475299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1563.475740] kmem_cache_alloc_trace+0x151/0x320 [ 1563.476139] audit_log_d_path+0xce/0x190 [ 1563.476481] audit_log_d_path_exe+0x40/0x70 [ 1563.476843] audit_log_task+0x278/0x310 [ 1563.477184] ? __audit_log_nfcfg+0x210/0x210 [ 1563.477563] audit_seccomp+0x76/0x200 [ 1563.477883] ? lock_downgrade+0x6d0/0x6d0 [ 1563.478276] __seccomp_filter+0x669/0x1530 [ 1563.478657] ? seccomp_notify_ioctl+0xda0/0xda0 [ 1563.479128] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1563.479603] ? wait_for_completion_io+0x270/0x270 [ 1563.480029] ? fput_many+0x2f/0x1a0 [ 1563.480343] ? ksys_write+0x1a9/0x260 [ 1563.480680] __secure_computing+0x191/0x2f0 [ 1563.481089] syscall_trace_enter.constprop.0+0x84/0x1e0 [ 1563.481554] do_syscall_64+0xf/0x40 [ 1563.481862] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1563.482327] RIP: 0033:0x7fef23554b19 [ 1563.482700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.484379] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1563.485066] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1563.485678] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1563.486279] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1563.486889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1563.487556] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1563.493678] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1563.497369] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1563.583040] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1563.602933] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1563.613477] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x3ff, 0x40400) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) dup2(r2, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r6) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x1) sendfile(r7, r0, &(0x7f0000000080)=0x1d0, 0x8) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0xffff) 14:09:14 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x302, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:14 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x450745c438580058) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x60401, 0x0) lseek(r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0xe11, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9b952ab36e84e519bb81c1b133e6800000081aabda9f5e000000000000000d08"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg0\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000020101010007000007f7ff03800c00028005000204ff00001000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x800) syncfs(r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r2) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x50, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)='veth1\x00', 0x100, 0x1, 0x800}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0021000100000000000000040002000800000100000000"], 0x1c}}, 0x0) 14:09:14 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x40000000) 14:09:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000400)=@gcm_128={{0x303}, "8dab8f7a18aa2dfe", "58c9ba8089f4a5317694e61a60a905b3", "db29f20d", "c8cd176494d1cd6b"}, 0x28) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) dup2(0xffffffffffffffff, r2) chdir(&(0x7f0000000140)='./mnt\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) openat(r0, &(0x7f00000004c0)='./mnt\x00', 0x24200, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) faccessat2(r3, &(0x7f0000000480)='./mnt\x00', 0x10f, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) faccessat2(r5, &(0x7f0000000500)='./file0\x00', 0x120, 0x200) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)="153e5f9f100a5b", 0x7}, {&(0x7f0000000180)="f9468f21de4de6da02cb546703a4490021e1ae1933705f95384cfbbf1a92a5159d39d1f7d6d73ab195fa30ac52a2679abadb90543ddb44033bf6c13444001adfdf945fb4fb5f2cf53abdefff9680e53402cd68281eb41e24b287284e237864d30da19ee3a7dda54fd2d527097d0f96790986a2cca90d7ca1a7484c83d8840d", 0x7f}, {&(0x7f00000002c0)="ce78e4bc0c398e476b58baac7831511c989cf35f92c84c36bec73322bef7211f7f4af880645bd8ea0f28939f51fddddf0d6cb32b36653199b52c751b1629e6879f8d14dda0f183711683470284153de967ca9785c1947684944aee96f78f6c702d2c4acf683c37fdf64363f4d7cd867fdabd21605e36b15be00f8f420496d134745e8268b4f880e6b8f9d37f7701adc06a3178200fc38aaabe4f87777b1c4500e94228d729791a28214797b3bc1e3212cb108d4e32617bf3f08d0e8497328d447b8191bab354a1d779fec01b6f67", 0xce}], 0x3, 0x7, 0x0) [ 1576.788362] kauditd_printk_skb: 59 callbacks suppressed [ 1576.788381] audit: type=1326 audit(1710338954.958:3720): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1576.793094] audit: type=1326 audit(1710338954.959:3721): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1576.799560] FAULT_INJECTION: forcing a failure. 14:09:14 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 11) 14:09:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x68) [ 1576.799560] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.800748] CPU: 1 PID: 11225 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1576.801338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1576.802006] Call Trace: [ 1576.802231] dump_stack+0x107/0x167 [ 1576.802530] should_fail.cold+0x5/0xa [ 1576.802861] ? alloc_super+0x52/0xa90 [ 1576.803180] should_failslab+0x5/0x20 [ 1576.803497] kmem_cache_alloc_trace+0x55/0x320 [ 1576.803872] ? do_raw_spin_lock+0x121/0x260 [ 1576.804235] ? fput+0x20/0x20 [ 1576.804503] alloc_super+0x52/0xa90 [ 1576.804807] ? fput+0x20/0x20 [ 1576.805070] sget_fc+0x13e/0x750 [ 1576.805352] ? set_anon_super+0xc0/0xc0 [ 1576.805710] audit: type=1326 audit(1710338954.959:3722): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1576.805898] ? rpc_kill_sb+0x1b0/0x1b0 [ 1576.805908] get_tree_keyed+0x55/0x210 [ 1576.805919] vfs_get_tree+0x8e/0x300 [ 1576.805934] __do_sys_fsconfig+0x8da/0xc20 [ 1576.805947] ? fscontext_read+0x310/0x310 [ 1576.805959] ? trace_event_raw_event_x86_fpu+0x390/0x390 14:09:15 executing program 1: r0 = pidfd_open(0x0, 0x0) dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e53a9222cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r7, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0xd}, [{0x2, 0x6, r3}, {0x2, 0x3, r3}, {0x2, 0x2, r1}, {0x2, 0x2, r6}, {0x2, 0x0, r1}, {0x2, 0xf, r3}, {0x2, 0x4, r3}, {0x2, 0x0, r7}, {0x2, 0x4, r1}], {}, [{0x8, 0x4, r2}], {0x10, 0x7}}, 0x74, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 1576.805976] ? __secure_computing+0x199/0x2f0 [ 1576.805993] do_syscall_64+0x33/0x40 [ 1576.806003] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1576.806019] audit: type=1326 audit(1710338954.959:3723): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 14:09:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 12) 14:09:15 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./mnt/file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000001c0)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000000100)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x3044080, &(0x7f0000012900)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x2, 0x7ff, 0x0, 0x1f, 0x0, 0x1}, 0x8) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x2400, 0x143) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './mnt/file0\x00'}) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000340)={{r3}, 0x80, 0x0, 0x8}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mkdirat(r4, &(0x7f0000000300)='./mnt\x00', 0x8) [ 1576.806025] RIP: 0033:0x7fef23554b19 [ 1576.806036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.806042] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1576.806053] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1576.806060] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1576.806065] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1576.806071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.806077] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1576.806128] audit: type=1326 audit(1710338954.959:3724): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1576.816876] audit: type=1326 audit(1710338954.968:3726): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11226 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1576.816996] audit: type=1326 audit(1710338954.969:3727): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11226 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1576.817117] audit: type=1326 audit(1710338954.959:3725): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11223 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1576.817224] audit: type=1326 audit(1710338954.971:3728): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11226 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1576.817328] audit: type=1326 audit(1710338954.971:3729): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11226 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1576.868035] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1576.897087] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1576.900791] FAULT_INJECTION: forcing a failure. [ 1576.900791] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.902830] CPU: 0 PID: 11239 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1576.903968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1576.905345] Call Trace: [ 1576.905785] dump_stack+0x107/0x167 [ 1576.906394] should_fail.cold+0x5/0xa [ 1576.907020] ? alloc_super+0x52/0xa90 [ 1576.907660] should_failslab+0x5/0x20 [ 1576.908295] kmem_cache_alloc_trace+0x55/0x320 [ 1576.909045] ? do_raw_spin_lock+0x121/0x260 [ 1576.909776] ? fput+0x20/0x20 [ 1576.910302] alloc_super+0x52/0xa90 [ 1576.910914] ? fput+0x20/0x20 [ 1576.911429] sget_fc+0x13e/0x750 [ 1576.911993] ? set_anon_super+0xc0/0xc0 [ 1576.912651] ? rpc_kill_sb+0x1b0/0x1b0 [ 1576.913305] get_tree_keyed+0x55/0x210 [ 1576.913957] vfs_get_tree+0x8e/0x300 [ 1576.914582] __do_sys_fsconfig+0x8da/0xc20 [ 1576.915291] ? fscontext_read+0x310/0x310 [ 1576.915987] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1576.916898] ? __secure_computing+0x199/0x2f0 [ 1576.917656] do_syscall_64+0x33/0x40 [ 1576.918279] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1576.919119] RIP: 0033:0x7fef23554b19 [ 1576.919734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1576.922758] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1576.924010] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1576.925196] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1576.926377] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1576.927544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.928725] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:09:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6c) 14:09:15 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1577.114387] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1577.119334] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:29 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5c}, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x1e9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x328) pipe(&(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffc, 0x0, 0x0, @buffer={0x0, 0x1000, &(0x7f0000001e00)=""/4096}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=0x0, @ANYBLOB="1900cf96a1bfb85e7be75e08251d80"], 0x20}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x52, 0x5, 0x7, 0x7, 0x0, 0x1, 0xe0004, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x10608, 0x7, 0x10001, 0x1, 0x2, 0x1b, 0x4f4b, 0x0, 0xfffffffd, 0x0, 0x100000000}, 0x0, 0x5, 0xffffffffffffffff, 0x1) fallocate(r3, 0x8, 0x8, 0x9) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000df25000008000b000000", @ANYRES32=0x0, @ANYBLOB="0500040000000000050002000a000000080008006401010106000a004e20000004000500060001004e210000050004000300000014000900fc020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4006801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 14:09:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x74) 14:09:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x48000000) 14:09:29 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) syz_io_uring_setup(0x542f, &(0x7f0000000240)={0x0, 0x1228, 0x10, 0x3, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x96f2, 0x0, 0x7, 0x5, 0x1}, 0x6f6) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:09:29 executing program 7: setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1}, 0x14) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:09:29 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 13) [ 1591.734884] kauditd_printk_skb: 47 callbacks suppressed [ 1591.734909] audit: type=1326 audit(1710338969.905:3777): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11276 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:09:29 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:29 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f0000000340)="9c0784415f1a3adc3074a21282997bae8e384767a2f2a5f937582f3874598ab735ba6be04d0a6eeefd0bc0fa668be84b6dcea88848f1d96057841f8f95814d8903db0a6092744e4c83394a50937b3ff34109c66767125dcd914ac6373acb3774af2cbad9c72246595e810497121b1a6bde33a9e2225a7f235b42c10b0af739d83680764c10c29d3759a9231dba2870dd5d12acec19734e239314253d2d4c6471561bc32616a7a613f7d3ab9e80cfb2fecff9d0787ae21c94ec65977a41d409590c87e1ac794f343f", 0xc8, 0x101}, {&(0x7f00000004c0)="211b57cb360d03331eb2f3cae6d6a40380fb904a4b8de37911ea3a5386137fb47285", 0x22, 0x3}], 0x84040, &(0x7f0000000580)=ANY=[@ANYRESOCT]) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xd0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2547}, {0x6, 0x16, 0xfffe}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40805) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000700)={r2, r3, 0x5}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f003b8e00006eb6fbb60400"]) [ 1591.746745] audit: type=1326 audit(1710338969.911:3778): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11276 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1591.757056] FAULT_INJECTION: forcing a failure. [ 1591.757056] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.758526] CPU: 1 PID: 11278 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1591.759204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.759910] Call Trace: [ 1591.760183] dump_stack+0x107/0x167 [ 1591.760503] should_fail.cold+0x5/0xa [ 1591.760809] ? selinux_sb_alloc_security+0x41/0x220 [ 1591.761323] should_failslab+0x5/0x20 [ 1591.761670] kmem_cache_alloc_trace+0x55/0x320 [ 1591.762128] ? down_write_nested+0xe4/0x160 [ 1591.762512] selinux_sb_alloc_security+0x41/0x220 [ 1591.763000] security_sb_alloc+0x46/0xa0 [ 1591.763322] ? fput+0x20/0x20 [ 1591.763640] alloc_super+0x1ed/0xa90 [ 1591.763939] ? fput+0x20/0x20 [ 1591.764255] sget_fc+0x13e/0x750 [ 1591.764529] ? set_anon_super+0xc0/0xc0 [ 1591.764936] ? rpc_kill_sb+0x1b0/0x1b0 [ 1591.765340] get_tree_keyed+0x55/0x210 [ 1591.765737] vfs_get_tree+0x8e/0x300 [ 1591.766126] __do_sys_fsconfig+0x8da/0xc20 [ 1591.766564] ? fscontext_read+0x310/0x310 [ 1591.766979] ? fput_many+0x2f/0x1a0 [ 1591.767357] ? __secure_computing+0x199/0x2f0 [ 1591.767822] do_syscall_64+0x33/0x40 [ 1591.768201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1591.768626] RIP: 0033:0x7fef23554b19 [ 1591.769009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.769637] audit: type=1326 audit(1710338969.916:3780): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11271 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1591.770448] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1591.774566] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1591.775278] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1591.775988] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.776698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.777413] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1591.779714] audit: type=1326 audit(1710338969.924:3781): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1591.803364] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1591.806947] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1591.813576] audit: type=1326 audit(1710338969.924:3782): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1591.833857] audit: type=1326 audit(1710338969.925:3783): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1591.861323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:09:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 1591.883102] audit: type=1326 audit(1710338969.925:3784): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 [ 1591.884868] audit: type=1326 audit(1710338969.925:3785): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:09:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x382, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4c000000) 14:09:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7a) [ 1591.903878] audit: type=1326 audit(1710338969.925:3786): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1591.910007] audit: type=1326 audit(1710338969.926:3787): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11272 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1591.913306] EXT4-fs (loop4): Unrecognized mount option "no" or missing value 14:09:30 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 14) [ 1591.929276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 14:09:30 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000480)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1591.971848] FAULT_INJECTION: forcing a failure. [ 1591.971848] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.972891] CPU: 1 PID: 11311 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1591.973451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.974077] Call Trace: [ 1591.974290] dump_stack+0x107/0x167 [ 1591.974585] should_fail.cold+0x5/0xa [ 1591.974896] ? selinux_sb_alloc_security+0x41/0x220 [ 1591.975292] should_failslab+0x5/0x20 [ 1591.975598] kmem_cache_alloc_trace+0x55/0x320 [ 1591.975954] ? down_write_nested+0xe4/0x160 [ 1591.976294] selinux_sb_alloc_security+0x41/0x220 [ 1591.976684] security_sb_alloc+0x46/0xa0 [ 1591.977001] ? fput+0x20/0x20 [ 1591.977251] alloc_super+0x1ed/0xa90 [ 1591.977547] ? fput+0x20/0x20 [ 1591.977792] sget_fc+0x13e/0x750 [ 1591.978053] ? set_anon_super+0xc0/0xc0 [ 1591.978368] ? rpc_kill_sb+0x1b0/0x1b0 [ 1591.978679] get_tree_keyed+0x55/0x210 [ 1591.978981] vfs_get_tree+0x8e/0x300 [ 1591.979273] __do_sys_fsconfig+0x8da/0xc20 [ 1591.979616] ? fscontext_read+0x310/0x310 [ 1591.979941] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1591.980366] ? __secure_computing+0x199/0x2f0 [ 1591.980724] do_syscall_64+0x33/0x40 [ 1591.981011] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1591.981425] RIP: 0033:0x7fef23554b19 [ 1591.981724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.983139] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1591.983737] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1591.984283] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1591.984903] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.985464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.986017] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1592.011524] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1592.033689] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fork() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x110}, 0x4004) 14:09:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x300) [ 1592.062864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11321 comm=syz-executor.4 14:09:30 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa34e0141d6261c16ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffbfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1592.087980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11323 comm=syz-executor.4 14:09:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x64030000) 14:09:30 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @rand_addr=0x64010100}, {0x1, @broadcast}, 0x40, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x7c8) 14:09:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x44040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34550abe, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x74c9ccf2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x100, 0x40) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r2) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x6, 0x3}, {0x495, 0x6}, {0x0, 0xb6}, {0x2003, 0xd6}, {0x100}, {0x7, 0x7}, {0x0, 0x6}, {0x400}]}) unshare(0x48020200) unshare(0x20000000) keyctl$invalidate(0x15, 0x0) add_key(&(0x7f0000002280)='logon\x00', &(0x7f00000022c0)={'syz', 0x2}, &(0x7f0000002300)="4920b37ce696c65cfcce56c9ac143fc50bc9dc39c957ef04503980a1456bdf92492b7ec81c831ad241a46ba067df9029f742b0ba4a439dcb3e334e8895b63b0bade0b0bc1e6b8a486724e8958a2c34467fc1da7a07072014919b136093063952", 0x60, 0x0) add_key$fscrypt_v1(&(0x7f0000002380), &(0x7f00000023c0)={'fscrypt:', @desc2}, &(0x7f0000002400)={0x0, "97859b2dd6763779b04e84bf07ae80550232bc25d2740d188095cf6f2572d6741df6af43c8492137b59d612a4bb76be12f0c984fd412901ec9b388f9b659dd6a", 0x3b}, 0x48, 0x0) keyctl$revoke(0x3, 0x0) unshare(0x28000000) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e21, 0x0, @mcast2, 0xc85}}, 0x0, 0x0, 0x32, 0x0, "74e0622da6a2f8290d7710b4de954ca9970b6752b2fa0c857268cee022678bd7ac81a3760d437eb6c8a5235240332464b4a4c71d374e09466e5cc11bfc63055c5e1b94bc0814c61362f1835e44c61237"}, 0xd8) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000100)='\x00\x0e=\xf0\xde\xf3\xed\x10\xbaJL\xcfA\x12\xbf\xb8\x1fb[M\xb3\x88=\xd3\xa3,\x1e%\v!\x97\x8c\x99%\xb2\xac4\xddf\xf1^\xcdZ>\x04\x9az\f\x1dZw\xe5l\x84\x99A\xb4\xf6+\x87\xfb\x8e1\xda\x8c\x18\xc5\xbbs\nr\xcauq\x1e/\xe9@P#{~\x88\xc5R\xdc3\x85\xa0\x7f\'\x06\x9b\xab\xa6\r\xb8\xfa\xdc\xcdk\xb6\x1b}IU\x816r\xe7o\x15\x8f\x87\x97\v\x85\xe6%xc\xfd\xbd\x89_%\x05\x109\xdb\xa8X5\xe7\xf4,zf\xa1\xd5DV\xc8\xaa\x1d5\b\"\xf0D\xaa{bnQ;\x86\xc1c`\x9e\x8c\xb1>\xeb\f\xaf\x84\x8d\xdf\xc4\x163\x98\xc6g') 14:09:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:30 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 15) [ 1592.153502] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1592.155796] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1592.174465] FAULT_INJECTION: forcing a failure. [ 1592.174465] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.175440] CPU: 1 PID: 11345 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1592.176114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1592.176821] Call Trace: [ 1592.177094] dump_stack+0x107/0x167 [ 1592.177469] should_fail.cold+0x5/0xa [ 1592.177869] ? create_object.isra.0+0x3a/0xa20 [ 1592.178329] should_failslab+0x5/0x20 [ 1592.178710] kmem_cache_alloc+0x5b/0x310 [ 1592.179128] create_object.isra.0+0x3a/0xa20 [ 1592.179586] kmemleak_alloc_percpu+0xa0/0x100 [ 1592.180044] pcpu_alloc+0x4e2/0x1240 [ 1592.180447] __percpu_init_rwsem+0x22/0x150 [ 1592.180891] alloc_super+0x232/0xa90 [ 1592.181284] ? fput+0x20/0x20 [ 1592.181604] sget_fc+0x13e/0x750 [ 1592.181960] ? set_anon_super+0xc0/0xc0 [ 1592.182368] ? rpc_kill_sb+0x1b0/0x1b0 [ 1592.182763] get_tree_keyed+0x55/0x210 [ 1592.183161] vfs_get_tree+0x8e/0x300 [ 1592.183544] __do_sys_fsconfig+0x8da/0xc20 [ 1592.183978] ? fscontext_read+0x310/0x310 [ 1592.184391] ? fput_many+0x2f/0x1a0 [ 1592.184775] ? __secure_computing+0x199/0x2f0 [ 1592.185246] do_syscall_64+0x33/0x40 [ 1592.185625] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1592.186140] RIP: 0033:0x7fef23554b19 [ 1592.186517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.188340] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1592.189104] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1592.189830] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1592.190548] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.191257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1592.191970] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:09:43 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="80", 0x1}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x1f, 0xf7, 0x8f, 0x0, 0xfffffffffffff001, 0x0, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000003c0), 0x2}, 0x40000, 0xa6, 0x4, 0x0, 0x7ff, 0xff, 0x40, 0x0, 0x4, 0x0, 0xef4}, r1, 0x6, r0, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2004c050) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000002c0)={0x1, 0x80000000}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x158) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010100000100000018000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) bind$packet(r7, 0x0, 0x0) 14:09:43 executing program 7: write(0xffffffffffffffff, &(0x7f0000000040)="522067c1dcb49dd351920b3f65a9f54d08d70830a3d511ec92bef4c11d6736b290742b03a31c7c354a990fed2f8d45b502df9a6ee3197f1c581a3730688c8e2abd97995dffd74c8e8452be2aaa42b6e1f9eb862845733a0b31b8604539928e5702b4ff995563050afd3881b101ab45ed1bac42", 0x73) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1f, 0x1, 0x2, 0x1f, 0x0, 0x0, 0x8811, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1800000, 0x0, @perf_bp={&(0x7f00000000c0), 0x33e8f261f424286b}, 0x810, 0x3ff, 0x0, 0x0, 0x401, 0x101, 0xfff8, 0x0, 0x2, 0x0, 0x20}, 0x0, 0xa, 0xffffffffffffffff, 0xa) 14:09:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0/file0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'syz_tun\x00'}) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80, 0x0) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) 14:09:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x321) 14:09:43 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1605.580990] kauditd_printk_skb: 158 callbacks suppressed [ 1605.581009] audit: type=1326 audit(1710338983.751:3945): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11355 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1605.584991] FAULT_INJECTION: forcing a failure. [ 1605.584991] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.586495] CPU: 0 PID: 11356 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1605.587392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1605.588398] Call Trace: [ 1605.588757] dump_stack+0x107/0x167 [ 1605.589248] should_fail.cold+0x5/0xa [ 1605.589772] ? create_object.isra.0+0x3a/0xa20 [ 1605.590384] should_failslab+0x5/0x20 [ 1605.590895] kmem_cache_alloc+0x5b/0x310 [ 1605.591449] ? mark_held_locks+0x9e/0xe0 [ 1605.592002] create_object.isra.0+0x3a/0xa20 [ 1605.592601] kmemleak_alloc_percpu+0xa0/0x100 [ 1605.593206] pcpu_alloc+0x4e2/0x1240 [ 1605.593741] __percpu_init_rwsem+0x22/0x150 [ 1605.594331] alloc_super+0x232/0xa90 [ 1605.594842] ? fput+0x20/0x20 [ 1605.595274] sget_fc+0x13e/0x750 [ 1605.595495] audit: type=1326 audit(1710338983.752:3946): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11355 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1605.595715] ? set_anon_super+0xc0/0xc0 [ 1605.598753] ? rpc_kill_sb+0x1b0/0x1b0 [ 1605.599278] get_tree_keyed+0x55/0x210 [ 1605.599808] vfs_get_tree+0x8e/0x300 [ 1605.600327] __do_sys_fsconfig+0x8da/0xc20 [ 1605.600876] ? fscontext_read+0x310/0x310 [ 1605.601456] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1605.602210] ? __secure_computing+0x199/0x2f0 [ 1605.602833] do_syscall_64+0x33/0x40 [ 1605.603337] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1605.603992] RIP: 0033:0x7fef23554b19 [ 1605.604499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1605.607178] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1605.608412] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1605.609636] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1605.610514] audit: type=1326 audit(1710338983.752:3947): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11355 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1605.610810] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.610826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1605.613050] audit: type=1326 audit(1710338983.753:3948): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11355 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1605.614131] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:09:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x68000000) 14:09:43 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1004d4f, &(0x7f0000000900)={0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c7edaa6222771ad3f6b1daa553eda4476393824a47f9cebf9e1c98f53707b4c303cde47e50265b7674dab4f93ee559d776fb160d31292a23e46473974c953d0f6efeaa13d8b42808ee9c4286489f7562", 0x50}, {&(0x7f0000000300)}], 0x2, 0x2, 0x7, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1605.633476] audit: type=1326 audit(1710338983.754:3949): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11355 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1605.641589] audit: type=1326 audit(1710338983.755:3950): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11355 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1605.654170] audit: type=1326 audit(1710338983.788:3951): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11359 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1605.660913] audit: type=1326 audit(1710338983.788:3952): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11359 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1605.672033] audit: type=1326 audit(1710338983.788:3953): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11359 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1605.678646] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1605.680843] audit: type=1326 audit(1710338983.789:3954): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11359 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 [ 1605.684528] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:43 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x500) 14:09:43 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) umount2(&(0x7f0000000140)='./mnt\x00', 0x4) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x585142, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) openat(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0x80000, 0x0) 14:09:43 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3c2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:43 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6c000000) 14:09:43 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 17) [ 1605.848244] FAULT_INJECTION: forcing a failure. [ 1605.848244] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.849495] CPU: 1 PID: 11397 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1605.850181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1605.850987] Call Trace: [ 1605.851257] dump_stack+0x107/0x167 [ 1605.851641] should_fail.cold+0x5/0xa [ 1605.852035] ? create_object.isra.0+0x3a/0xa20 [ 1605.852510] should_failslab+0x5/0x20 [ 1605.852901] kmem_cache_alloc+0x5b/0x310 [ 1605.853329] create_object.isra.0+0x3a/0xa20 [ 1605.853803] kmemleak_alloc_percpu+0xa0/0x100 [ 1605.854269] pcpu_alloc+0x4e2/0x1240 [ 1605.854670] __percpu_init_rwsem+0x22/0x150 [ 1605.855115] alloc_super+0x232/0xa90 [ 1605.855501] ? fput+0x20/0x20 [ 1605.855824] sget_fc+0x13e/0x750 [ 1605.856175] ? set_anon_super+0xc0/0xc0 [ 1605.856590] ? rpc_kill_sb+0x1b0/0x1b0 [ 1605.856995] get_tree_keyed+0x55/0x210 [ 1605.857400] vfs_get_tree+0x8e/0x300 [ 1605.857791] __do_sys_fsconfig+0x8da/0xc20 [ 1605.858213] ? fscontext_read+0x310/0x310 [ 1605.858640] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1605.859212] ? __secure_computing+0x199/0x2f0 [ 1605.859676] do_syscall_64+0x33/0x40 [ 1605.860064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1605.860585] RIP: 0033:0x7fef23554b19 [ 1605.860974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1605.862856] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1605.863626] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1605.864336] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1605.865061] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1605.865772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1605.866499] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1605.946097] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:09:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x600) 14:09:57 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x74000000) 14:09:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@debug={'debug', 0x3d, 0x4}}, {@loose}], [{@measure}, {@context={'context', 0x3d, 'root'}}, {@uid_lt={'uid<', r6}}, {@obj_role={'obj_role', 0x3d, '\''}}]}}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a9b3803a", @ANYRES16=r7, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f00000001c0)={'gre0\x00', 0x1}) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000300)={{0x6, 0x7}, 0x100, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x4044890) [ 1619.458217] kauditd_printk_skb: 51 callbacks suppressed [ 1619.458233] audit: type=1326 audit(1710338997.628:4006): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11411 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1619.467507] audit: type=1326 audit(1710338997.636:4007): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11415 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1619.468962] device lo entered promiscuous mode [ 1619.469967] audit: type=1326 audit(1710338997.636:4008): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11415 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1619.484539] audit: type=1326 audit(1710338997.637:4009): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11415 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:09:57 executing program 4: r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20048050) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x200f5ef, 0x0) r7 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x8000000000000, 0x0, &(0x7f0000001400), 0x0, 0x0) openat(r7, &(0x7f0000000240)='./file1\x00', 0x480000, 0x31) sendfile(r8, r4, 0x0, 0x7ffffff9) 14:09:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 18) 14:09:57 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x7) creat(&(0x7f0000000180)='./file0\x00', 0x50) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:09:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000001500)={0x9, 0x38, [0x9a, 0x24000, 0x4, 0x80000001], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) execveat(r0, 0x0, &(0x7f00000003c0)=[&(0x7f00000001c0)='-\']{#\xad\x00', &(0x7f0000000200)='%}\x00', &(0x7f0000000240)='smackfsfloor', 0x0, 0x0], &(0x7f00000004c0)=[&(0x7f0000000400)='seclabel', &(0x7f0000000440)='smackfsfloor', &(0x7f0000000480)='\x00'], 0x100) syz_mount_image$vfat(0x0, 0x0, 0x9, 0x0, 0x0, 0x8c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000002e1e667a6c6531"], 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$P9_RREADLINK(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="1000000017010007002e2f7b696c6531"], 0x10) openat(r3, &(0x7f00000015c0)='./file1\x00', 0x832003, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(r6, &(0x7f0000000080)='./file1\x00', 0x581001, 0x89) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {r4}}, './file1\x00'}) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x4, 0x0, 0x80, 0x40, 0x0, 0x81, 0x1080, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x10001, 0xffff}, 0x20, 0xffffffffffffffff, 0x4, 0x8, 0x1, 0x0, 0x8000, 0x0, 0x9e1, 0x0, 0x800}, r7, 0xf, 0xffffffffffffffff, 0x8) [ 1619.505125] FAULT_INJECTION: forcing a failure. [ 1619.505125] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.506339] CPU: 1 PID: 11416 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1619.507188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1619.508260] Call Trace: [ 1619.508550] dump_stack+0x107/0x167 [ 1619.509052] should_fail.cold+0x5/0xa [ 1619.509456] ? create_object.isra.0+0x3a/0xa20 [ 1619.509944] should_failslab+0x5/0x20 [ 1619.510335] kmem_cache_alloc+0x5b/0x310 [ 1619.510763] ? mark_held_locks+0x9e/0xe0 [ 1619.511300] create_object.isra.0+0x3a/0xa20 [ 1619.511769] kmemleak_alloc_percpu+0xa0/0x100 [ 1619.512245] pcpu_alloc+0x4e2/0x1240 [ 1619.512663] __percpu_init_rwsem+0x22/0x150 [ 1619.513115] alloc_super+0x232/0xa90 [ 1619.513512] ? fput+0x20/0x20 [ 1619.513878] sget_fc+0x13e/0x750 [ 1619.514335] ? set_anon_super+0xc0/0xc0 [ 1619.514855] ? rpc_kill_sb+0x1b0/0x1b0 [ 1619.515347] get_tree_keyed+0x55/0x210 [ 1619.515768] vfs_get_tree+0x8e/0x300 [ 1619.516230] __do_sys_fsconfig+0x8da/0xc20 [ 1619.516680] ? fscontext_read+0x310/0x310 [ 1619.517117] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1619.517705] ? __secure_computing+0x199/0x2f0 [ 1619.518181] do_syscall_64+0x33/0x40 [ 1619.518567] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1619.519094] RIP: 0033:0x7fef23554b19 [ 1619.519486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1619.521824] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1619.522619] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1619.523347] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1619.524076] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.524807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1619.525549] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1619.539325] audit: type=1326 audit(1710338997.641:4010): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11415 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1619.542072] audit: type=1326 audit(1710338997.650:4011): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11411 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000000500)={{r9}, "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"}) sendfile(r0, r8, 0x0, 0x100000001) 14:09:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x700) 14:09:57 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 19) [ 1619.559558] audit: type=1326 audit(1710338997.650:4012): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11411 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1619.567792] audit: type=1326 audit(1710338997.650:4013): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11411 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1619.574836] audit: type=1326 audit(1710338997.658:4014): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11415 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1619.578567] audit: type=1326 audit(1710338997.658:4015): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11415 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:09:57 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x8, &(0x7f0000001700)=[{&(0x7f0000000480)="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", 0x1000, 0x401}, {&(0x7f0000000140)="b1e715097cc03ec947ba068e4879bf0a068da1db396b78266a39c43bda68e8dbed922546ccc678dafd062b140aa2c732f90da18c83bdeadf577048b787f9cd6c4ce6ace783345caff0809421e623798a76c68108e3167095ba2bf74c54", 0x5d, 0x6}, {&(0x7f00000002c0)="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", 0xff, 0x80000000}, {&(0x7f00000001c0)="44aa88a8bff8f7d7611c53637ddb5023c3a62266c1fb6f7e972bcac90ba25d8da1d6cb5c45041962aba8ac5ab2bdfc9e108cfbe1e7daf8cdd894a2f9ed3d2de7d5eaefc63f9662a2923127b8a60c945c781a2f0fb31af7b02b406c2a51f363375ef78eb03865a4a4acddee7b2c25c831b79ce59389ae86890461066ac168a5d0884e43abf4ab2d420963c78ad5a3f77029783cab67f0267f21189f078ac8d7d6", 0xa0, 0xffffffffffff8001}, {&(0x7f0000001480)="80e7a5c26137c5a56433dc57d825051cd7aab59b7997e3d14dbdb6a6b4c5c771de42118c5a838c72f1f796d7dbed423c18dbf28edc22c30b952812c42ecf0e43f2ac811df026420686a6dc30ed5783fea57e3d6c8d67183a3086b67598f2c25fb12a28540736092c86753ae43ec39dd9f6516aa9ef5ac58bd91c746287f23b820b2139545ae5876f421843f2eb", 0x8d, 0x200}, {&(0x7f0000001540)="c28a1672a868e3dce3492a5c25e58981eb18256f0f2f95aaae8a8d273710c2331a18cc0dc81d3618e1b2c715b88a66ad544210d842a4e41b8736809f977a7ab80a1e8985ba4c0d0a0c290b972998e8cff5de06013a249c87b1b1cb7cf718eaf28ddd4d0160b88cc3d821804415b36e884483da945c2f9b6451fd04d6e43437c13e598cecac36261cd6ce8722edb02493ccb862067eda2ea6d3dcdacd0150912db0e7815c3f7ba00b3a1b55b13849714e8a8bc9a4c15f818cd46bee67d77779af0acbbea060fd38df259a565d8b8f4b89a75b9f33df5e97540e99f02b233baf177d54a6", 0xe3, 0x80000001}, {&(0x7f00000003c0)="53e58023b540fe33cb8dd0c81d3f8266c4e6120b0e7c645efb1eb5aa77cd8bbf", 0x20, 0x7}, {&(0x7f0000001640)="ea2f60bfca67a338ba298185cd2c73c0e5670707f7c601ee0b03873386d93c7e8d08379cce43ab7cd3b715180883209e56dc5c068fc43391325c93198a4505007060b319e69faf23f9d4567fbebae4a446979cc62fb8d86a71898b74620cbcec011c5868b703454bd13878ebcc7fd23312f900d347413f7830fbad65ee5d23ed169b33c02b7ddc39498a9281ace20f6356b2ab1d370a9a67b070f8c0bba6ed93e84c65fbc224d922e07a101fe9419a25b28382", 0xb3, 0x8}], 0x820060, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1619.599821] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1619.648233] FAULT_INJECTION: forcing a failure. [ 1619.648233] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.650601] CPU: 1 PID: 11440 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1619.651759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1619.653129] Call Trace: [ 1619.653603] dump_stack+0x107/0x167 [ 1619.654327] should_fail.cold+0x5/0xa [ 1619.654976] ? create_object.isra.0+0x3a/0xa20 [ 1619.655812] should_failslab+0x5/0x20 [ 1619.656441] kmem_cache_alloc+0x5b/0x310 [ 1619.657250] ? mark_held_locks+0x9e/0xe0 [ 1619.658058] create_object.isra.0+0x3a/0xa20 [ 1619.658926] kmemleak_alloc_percpu+0xa0/0x100 [ 1619.659671] pcpu_alloc+0x4e2/0x1240 [ 1619.660329] __percpu_init_rwsem+0x22/0x150 [ 1619.661109] alloc_super+0x232/0xa90 [ 1619.661847] ? fput+0x20/0x20 [ 1619.662484] sget_fc+0x13e/0x750 [ 1619.663110] ? set_anon_super+0xc0/0xc0 [ 1619.663855] ? rpc_kill_sb+0x1b0/0x1b0 [ 1619.664484] get_tree_keyed+0x55/0x210 [ 1619.665147] vfs_get_tree+0x8e/0x300 [ 1619.665811] __do_sys_fsconfig+0x8da/0xc20 [ 1619.666540] ? fscontext_read+0x310/0x310 [ 1619.667405] ? fput_many+0x2f/0x1a0 [ 1619.668149] ? __secure_computing+0x199/0x2f0 [ 1619.668989] do_syscall_64+0x33/0x40 [ 1619.669640] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1619.670591] RIP: 0033:0x7fef23554b19 [ 1619.671381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1619.674772] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1619.676174] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1619.677412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1619.678660] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1619.679953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1619.681377] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:09:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7a000000) 14:09:57 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:09:57 executing program 3: lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x8}, 0x16, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) setxattr$security_ima(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@v2={0x5, 0x1, 0x3, 0x0, 0x59, "b5f3e2f911b358f2ef8f2ad8514ecdb62711fb9f77c638e248c7f89d971cd16c793b77db155b78a8d9438ffc2fc90c48de5ed76bd6e054b4762d4774ba4600a2824bbe8e7bd9c9b51f53704a6acb5b035c9e26400f90aa76b7"}, 0x62, 0x2) openat(r1, &(0x7f00000002c0)='./file0/file0\x00', 0x52000, 0x20) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:09:57 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) [ 1619.858731] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1619.869431] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:09:58 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801", 0x17}, {0x0, 0x0, 0x1800}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) r1 = open_tree(r0, &(0x7f0000000180)='./file0\x00', 0x8000) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x40100, 0xc1, 0x2}, 0x18) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x2004c2, 0x103) 14:09:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xa00) [ 1619.984477] device lo left promiscuous mode [ 1620.005836] device lo entered promiscuous mode [ 1620.010604] device lo left promiscuous mode 14:10:11 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3e2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:10:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa1ffffff) 14:10:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x120) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)=0x1) read(r0, &(0x7f0000000100)=""/99, 0x63) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:10:11 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='./file1\x00', 0x80000, 0x182) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) 14:10:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x8, 0x0, 0x0, 0x9, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) sendfile(r0, r1, 0x0, 0xffff) [ 1633.453457] kauditd_printk_skb: 57 callbacks suppressed [ 1633.453473] audit: type=1326 audit(1710339011.623:4073): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11483 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1633.458114] audit: type=1326 audit(1710339011.628:4074): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11483 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1633.465166] audit: type=1326 audit(1710339011.635:4075): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11489 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1633.469543] audit: type=1326 audit(1710339011.638:4076): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11483 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1633.470811] FAULT_INJECTION: forcing a failure. [ 1633.470811] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.472918] CPU: 0 PID: 11495 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1633.473662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1633.474565] Call Trace: [ 1633.474856] dump_stack+0x107/0x167 [ 1633.475263] should_fail.cold+0x5/0xa [ 1633.475675] ? create_object.isra.0+0x3a/0xa20 [ 1633.476170] should_failslab+0x5/0x20 [ 1633.476585] kmem_cache_alloc+0x5b/0x310 [ 1633.477026] ? mark_held_locks+0x9e/0xe0 [ 1633.477476] create_object.isra.0+0x3a/0xa20 [ 1633.477966] kmemleak_alloc_percpu+0xa0/0x100 [ 1633.478419] audit: type=1326 audit(1710339011.638:4077): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11483 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1633.478460] pcpu_alloc+0x4e2/0x1240 [ 1633.480869] __percpu_init_rwsem+0x22/0x150 [ 1633.481332] alloc_super+0x232/0xa90 [ 1633.481750] ? fput+0x20/0x20 [ 1633.482084] sget_fc+0x13e/0x750 [ 1633.482450] ? set_anon_super+0xc0/0xc0 [ 1633.482892] ? rpc_kill_sb+0x1b0/0x1b0 [ 1633.483302] get_tree_keyed+0x55/0x210 [ 1633.483725] vfs_get_tree+0x8e/0x300 [ 1633.484142] __do_sys_fsconfig+0x8da/0xc20 [ 1633.484600] ? fscontext_read+0x310/0x310 [ 1633.485047] ? fput_many+0x2f/0x1a0 [ 1633.485454] ? __secure_computing+0x199/0x2f0 [ 1633.485958] do_syscall_64+0x33/0x40 [ 1633.486311] audit: type=1326 audit(1710339011.639:4078): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11489 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1633.486359] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1633.488907] RIP: 0033:0x7fef23554b19 [ 1633.489310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.491191] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1633.491935] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1633.492624] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1633.493308] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.494010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1633.494697] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1633.506842] audit: type=1326 audit(1710339011.640:4079): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11489 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1633.514504] audit: type=1326 audit(1710339011.640:4080): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11489 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1633.517612] audit: type=1326 audit(1710339011.640:4081): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11489 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1633.520797] audit: type=1326 audit(1710339011.640:4082): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11489 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:10:11 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x9286, 0x0, 0x0, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000014c0)=ANY=[@ANYBLOB="f90000006d33c715d4650901e9fa4a10eeb78101000000180000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530004f3373c2f9c62dd629892577ceb0da43aa021b9f067f2c0d1cf013c370092fc4b673b3f47e686d7095f4f90732ad48aa233aaf89ea32"]) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) fallocate(r1, 0x1, 0x5b7, 0x401) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000013c0)={"8d4a9343520ec52fb828d6b30c4cbf4f", 0x0, 0x0, {0x5, 0x80}, {0x2, 0x1ff}, 0x80000001, [0x8, 0x0, 0x268, 0x7, 0xf9, 0x3, 0x8, 0x0, 0x80, 0x9, 0x7fff, 0x3, 0x100000001, 0x9, 0x400, 0x1000]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000300)='./file0\x00', 0x25) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@private, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd01000010000100000000000000000000000600000000000000000000000000ac1414bb00000000000000000000000000000000000001010a00000011000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x1bc}}, 0x0) 14:10:11 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x2103) 14:10:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 20) 14:10:11 executing program 4: mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x72, &(0x7f0000000100)=0x18e, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x4, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="e8848ad26ba5ad2d51c197aa634cff53901b929a42104f01000000d9"], 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000080)) [ 1633.581835] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:10:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xbc030000) 14:10:11 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4000) 14:10:11 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(r0, r1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x10c) accept4$unix(r3, &(0x7f00000011c0)=@abs, 0x0, 0x80800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x21e000, 0x88) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c6530001ce720861242e2a1bb4552a0f0e683beda633daabc1f6daaa53fb532f6a192157605babbe6bc17c46e59feca3e918b87c5621e5ae7aedd684e9e742c9370793d2be76fbd63f521cf8737c38c4bb7e32fb1caf39382771b09031bf4b433758ada6a7400518f024c186b9de73fb00f6c905e77484bb4bb34498a0236d2b87287103bac82c802f7078973861f7fea00283397495b00f9f5ce16e3f36cd7dee0a1ed61b36e8a"]) mq_timedreceive(r5, &(0x7f0000000140)=""/106, 0x6a, 0x2, &(0x7f00000000c0)={0x77359400}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long}, 0x11) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r7, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r8}}, 0x80) 14:10:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000040)=0x6, 0xfffffffffffffffc) 14:10:11 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1633.709173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 14:10:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x6) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000580)="20000000000100000c000000d40000000f0000000100000000000046b1ebc300002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002c4c760346b28d0c3ee3c672c15b2b4a621f8432aa3688e02164d85eb28cc40abf2033c9c10d907292451ea1e9c119b07668cec6deff5313896e0a0a73d2a435026cdc7c55caae4634e19d7c068a6b4f627264edca3ed3faf4a2302edb4f9a4f31d686cc2a0328e2546c19274daf40b3f0d679cc64ca2496fc5f02cf0", 0xd6}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x401}], 0x410d2, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000480)={0x7, 0x4, 0x7, 0x0, 0xc, "d8cd757c9c754e4f"}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x288013, 0x0) syz_io_uring_setup(0x6bb0, &(0x7f0000000180)={0x0, 0x520e, 0x3b, 0x0, 0x3c7, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x4080}}, 0x2) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) open$dir(&(0x7f0000000140)='./file0\x00', 0x20500, 0x3) [ 1633.756244] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 14:10:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1633.827793] FAULT_INJECTION: forcing a failure. [ 1633.827793] name failslab, interval 1, probability 0, space 0, times 0 [ 1633.829242] CPU: 1 PID: 11530 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1633.829983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1633.830841] Call Trace: [ 1633.831131] dump_stack+0x107/0x167 [ 1633.831531] should_fail.cold+0x5/0xa [ 1633.831946] ? prealloc_shrinker+0xb0/0x2f0 [ 1633.832413] should_failslab+0x5/0x20 [ 1633.832822] __kmalloc+0x72/0x390 [ 1633.833215] prealloc_shrinker+0xb0/0x2f0 [ 1633.833666] ? __init_rwsem+0x129/0x1b0 [ 1633.834110] alloc_super+0x863/0xa90 [ 1633.834518] ? fput+0x20/0x20 [ 1633.834856] sget_fc+0x13e/0x750 [ 1633.835228] ? set_anon_super+0xc0/0xc0 [ 1633.835666] ? rpc_kill_sb+0x1b0/0x1b0 [ 1633.836092] get_tree_keyed+0x55/0x210 [ 1633.836513] vfs_get_tree+0x8e/0x300 [ 1633.836920] __do_sys_fsconfig+0x8da/0xc20 [ 1633.837384] ? fscontext_read+0x310/0x310 [ 1633.837836] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1633.838436] ? __secure_computing+0x199/0x2f0 [ 1633.838935] do_syscall_64+0x33/0x40 [ 1633.839339] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1633.839889] RIP: 0033:0x7fef23554b19 [ 1633.840295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.842258] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1633.843082] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1633.843853] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1633.844629] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.845405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1633.846174] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 22) [ 1646.958094] kauditd_printk_skb: 56 callbacks suppressed [ 1646.958109] audit: type=1326 audit(1710339025.128:4139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11539 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:10:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4800) 14:10:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:10:25 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000340)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000140)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1f}, {&(0x7f00000001c0)="b88dbc9f851806b845e0978c450a8590b2a5b33ea95be0dcfd41cd389927839bd1e06f866fd98686b047b34f6af59b47b5a246091fea3aa3993f6f745b71b96b4bf3d2f1f4b1ffca36c990743317f81348f91b655a3a7cf2", 0x58, 0xff}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x29c9cc5a86af9e5, 0x0) openat(r1, &(0x7f0000000180)='./mnt\x00', 0x40000, 0x20) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup(r2) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:10:25 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:10:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf5030000) 14:10:25 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @dev}}}, 0x200017c8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=unix,cache=loose,nodevmap,func=KEXEC_INITRAMFS_CHECK,fowner=', @ANYRESDEC=r2, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9bc}}, './file0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001e00)={r4, 0x5, 0x100000}) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) io_setup(0xffffffff, &(0x7f0000000300)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000340)="d0", 0x1, 0x8000}]) openat(r6, &(0x7f0000000200)='./file0\x00', 0x4000, 0x46) [ 1646.968975] audit: type=1326 audit(1710339025.128:4140): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11539 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1646.971211] audit: type=1326 audit(1710339025.128:4141): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11539 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1646.984681] FAULT_INJECTION: forcing a failure. [ 1646.984681] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.985716] CPU: 1 PID: 11549 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1646.986311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1646.987014] Call Trace: [ 1646.987229] dump_stack+0x107/0x167 [ 1646.987540] should_fail.cold+0x5/0xa [ 1646.987860] ? create_object.isra.0+0x3a/0xa20 [ 1646.988249] should_failslab+0x5/0x20 [ 1646.988582] kmem_cache_alloc+0x5b/0x310 [ 1646.988935] create_object.isra.0+0x3a/0xa20 [ 1646.989710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1646.990653] __kmalloc+0x16e/0x390 [ 1646.991319] prealloc_shrinker+0xb0/0x2f0 [ 1646.992075] ? __init_rwsem+0x129/0x1b0 [ 1646.992805] alloc_super+0x863/0xa90 [ 1646.993491] ? fput+0x20/0x20 [ 1646.994079] sget_fc+0x13e/0x750 [ 1646.994733] ? set_anon_super+0xc0/0xc0 [ 1646.995471] ? rpc_kill_sb+0x1b0/0x1b0 [ 1646.996185] get_tree_keyed+0x55/0x210 [ 1646.996903] vfs_get_tree+0x8e/0x300 [ 1646.997596] __do_sys_fsconfig+0x8da/0xc20 [ 1646.998408] ? fscontext_read+0x310/0x310 [ 1646.999163] ? fput_many+0x2f/0x1a0 [ 1646.999847] ? __secure_computing+0x199/0x2f0 [ 1647.000685] do_syscall_64+0x33/0x40 [ 1647.001371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1647.002322] RIP: 0033:0x7fef23554b19 [ 1647.003007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.006354] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1647.007748] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1647.009048] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1647.010360] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.011694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.012996] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x6}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r1, &(0x7f00000000c0)={0x200, 0x121, 0x15}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x23456}, 0x80) open(&(0x7f00000002c0)='./file0\x00', 0x10000, 0x124) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x5, 0x2007, @fd_index=0x6, 0xe30, &(0x7f00000001c0)="f0fb06ad25e6a99d197a24e682ddb5ae989f8538a9f29e7211f3e7d99813ebb570ebfa7d8d42bb9aa5620b5722b598001a35021ada825435a0bb1ce1", 0x3c, 0x8}, 0x3) write(r3, &(0x7f0000000240)="01", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x1}}, 0x5) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)={0x45, 0xffff, 0x1, 0x0, 0x0, [{{r3}, 0x4}]}) syz_io_uring_complete(r4) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x650483, 0x120) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x20d315) [ 1647.015773] audit: type=1326 audit(1710339025.128:4142): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11539 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1647.025275] audit: type=1326 audit(1710339025.146:4143): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11539 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1647.032310] audit: type=1326 audit(1710339025.153:4144): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11536 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1647.039871] audit: type=1326 audit(1710339025.153:4145): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11536 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1647.044828] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1647.044942] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1647.048052] audit: type=1326 audit(1710339025.154:4146): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11536 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1647.051229] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1647.054661] audit: type=1326 audit(1710339025.154:4147): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11536 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:10:25 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) syz_io_uring_setup(0x2488, &(0x7f0000000140)={0x0, 0xd99f, 0x10, 0x0, 0xf5, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/209, 0xd1, 0x20) [ 1647.063353] audit: type=1326 audit(1710339025.154:4148): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11536 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 14:10:25 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x151742, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:10:25 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3f2, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:10:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xfeffffff) 14:10:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1647.132129] FAULT_INJECTION: forcing a failure. [ 1647.132129] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.133451] CPU: 1 PID: 11571 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1647.134029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.134709] Call Trace: [ 1647.134929] dump_stack+0x107/0x167 [ 1647.135244] should_fail.cold+0x5/0xa [ 1647.135575] ? __list_lru_init+0xcd/0x890 [ 1647.135914] should_failslab+0x5/0x20 [ 1647.136228] __kmalloc+0x72/0x390 [ 1647.136538] __list_lru_init+0xcd/0x890 [ 1647.136865] alloc_super+0x8b8/0xa90 [ 1647.137182] ? fput+0x20/0x20 [ 1647.137452] sget_fc+0x13e/0x750 [ 1647.137741] ? set_anon_super+0xc0/0xc0 [ 1647.138084] ? rpc_kill_sb+0x1b0/0x1b0 [ 1647.138437] get_tree_keyed+0x55/0x210 [ 1647.138764] vfs_get_tree+0x8e/0x300 [ 1647.139087] __do_sys_fsconfig+0x8da/0xc20 [ 1647.139463] ? fscontext_read+0x310/0x310 [ 1647.139830] ? fput_many+0x2f/0x1a0 [ 1647.140136] ? __secure_computing+0x199/0x2f0 [ 1647.140512] do_syscall_64+0x33/0x40 [ 1647.140830] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1647.141242] RIP: 0033:0x7fef23554b19 [ 1647.141564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.143135] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1647.143786] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1647.144385] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1647.144985] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.145580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.146182] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:25 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @dev}}}, 0x200017c8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=unix,cache=loose,nodevmap,func=KEXEC_INITRAMFS_CHECK,fowner=', @ANYRESDEC=r2, @ANYBLOB="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"]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9bc}}, './file0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001e00)={r4, 0x5, 0x100000}) getdents64(r3, &(0x7f0000000880)=""/4096, 0x1000) io_setup(0xffffffff, &(0x7f0000000300)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r5, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000340)="d0", 0x1, 0x8000}]) openat(r6, &(0x7f0000000200)='./file0\x00', 0x4000, 0x46) 14:10:25 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x44000, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000026d3a86a5228fe61d9956e646e17f7846384b23957aa6497fdc95f76ec8268dbb8d0b2f37ca86ca4a6940c12dc8e3ccc2edd52590e5cbc7bf0ca85813fc987137aab9e23a21bcd7a421c16967837be3e5e0cd574c5781f597ca07ab93fbd7ea1fe4d6eaed08705ef9d76d8c0371bc144725129027d68eafb0849516a7681cb12a19d5b666b77a8670", 0xe2, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc01}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8090a0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:10:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 24) [ 1647.195318] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1647.211341] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1647.229875] FAULT_INJECTION: forcing a failure. [ 1647.229875] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.231266] CPU: 0 PID: 11589 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1647.231846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.232535] Call Trace: [ 1647.232760] dump_stack+0x107/0x167 [ 1647.233066] should_fail.cold+0x5/0xa [ 1647.233387] ? __list_lru_init+0xcd/0x890 [ 1647.233737] should_failslab+0x5/0x20 [ 1647.234071] __kmalloc+0x72/0x390 [ 1647.234362] __list_lru_init+0xcd/0x890 [ 1647.234694] alloc_super+0x8b8/0xa90 [ 1647.235014] ? fput+0x20/0x20 [ 1647.235283] sget_fc+0x13e/0x750 [ 1647.235562] ? set_anon_super+0xc0/0xc0 [ 1647.235904] ? rpc_kill_sb+0x1b0/0x1b0 [ 1647.236241] get_tree_keyed+0x55/0x210 [ 1647.236573] vfs_get_tree+0x8e/0x300 [ 1647.236885] __do_sys_fsconfig+0x8da/0xc20 [ 1647.237246] ? fscontext_read+0x310/0x310 [ 1647.237605] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1647.238088] ? __secure_computing+0x199/0x2f0 [ 1647.238479] do_syscall_64+0x33/0x40 [ 1647.238801] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1647.239237] RIP: 0033:0x7fef23554b19 [ 1647.239563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.241094] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1647.241735] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1647.242352] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1647.242960] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.243573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.244185] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:38 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:10:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4c00) 14:10:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000003d00000008000300", @ANYRES32=r4, @ANYBLOB="29f027081664cb7a4a530c031db91f5042d36520ee31746343e09db31442633c417041a104877e84a2a69e7600e48112d4ca5693aa77548cf36e818e87a6c0dc084629b5ad3478a0feb0e9bcf5e5bb44838ba7361460a3daf21ad328498055df2e235db1e689001404e33d0a6a23e80736592e10d58a558dc59234b9efec"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r6, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x20048814}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 14:10:38 executing program 4: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0xffff, &(0x7f0000000140)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsmount(r3, 0x1, 0x3) r4 = fsmount(r2, 0x0, 0x0) dup2(r2, r4) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x100000001) 14:10:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xffff1f00) 14:10:38 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f00008101000000001a000000000000002000000020000042919c72918f15dbd7f4655fd959b2a0605f9f84efd1ef01dd01000000d7f4655f0000000000000000", 0x51, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000480)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff8dc7dd8b21f1593f49ed323a23bf0cc72a4698affcef6ccac10d75a0bd375756a2cb2ab54e829e1cd593563772e4b3b69ff41874b4803b5db3832feca86bd8f54a831994e623c7bbd15b6c66ae40d5c4f0003a2a3fb88568b241445b82f6a700c2ac51a0154bae00eab93be151821ba28c822472d56cd3b841822b479dbbd150d075001863d4dddd376d98", 0x48d, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./mnt\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:10:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 14:10:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 25) [ 1660.658362] kauditd_printk_skb: 52 callbacks suppressed [ 1660.658995] audit: type=1326 audit(1710339038.828:4201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11600 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1660.662103] audit: type=1326 audit(1710339038.832:4202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11600 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1660.665849] audit: type=1326 audit(1710339038.835:4203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11600 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1660.669529] FAULT_INJECTION: forcing a failure. [ 1660.669529] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.670692] CPU: 1 PID: 11601 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1660.671389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1660.672221] Call Trace: [ 1660.672495] dump_stack+0x107/0x167 [ 1660.672865] should_fail.cold+0x5/0xa [ 1660.673256] ? kvmalloc_node+0x119/0x170 [ 1660.673673] should_failslab+0x5/0x20 [ 1660.674068] __kmalloc_node+0x76/0x420 [ 1660.674468] ? lockdep_init_map_type+0x2c7/0x780 [ 1660.674957] kvmalloc_node+0x119/0x170 [ 1660.675353] __list_lru_init+0x511/0x890 [ 1660.675774] alloc_super+0x8b8/0xa90 [ 1660.676154] ? fput+0x20/0x20 [ 1660.676474] sget_fc+0x13e/0x750 [ 1660.676819] ? set_anon_super+0xc0/0xc0 [ 1660.677231] ? rpc_kill_sb+0x1b0/0x1b0 [ 1660.677632] get_tree_keyed+0x55/0x210 [ 1660.678042] vfs_get_tree+0x8e/0x300 [ 1660.678426] __do_sys_fsconfig+0x8da/0xc20 [ 1660.678864] ? fscontext_read+0x310/0x310 [ 1660.679289] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1660.679848] ? __secure_computing+0x199/0x2f0 [ 1660.680315] do_syscall_64+0x33/0x40 [ 1660.680694] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1660.681212] RIP: 0033:0x7fef23554b19 [ 1660.681598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1660.683502] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1660.684272] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1660.684992] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1660.685714] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.686466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1660.687194] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1660.694671] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1660.697056] audit: type=1326 audit(1710339038.835:4204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11600 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1660.700763] audit: type=1326 audit(1710339038.835:4205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11600 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1660.708725] audit: type=1326 audit(1710339038.839:4206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11600 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1660.715827] audit: type=1326 audit(1710339038.858:4207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11597 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1660.721806] audit: type=1326 audit(1710339038.861:4208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11603 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1660.724872] audit: type=1326 audit(1710339038.861:4209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11603 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1660.727280] audit: type=1326 audit(1710339038.867:4210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11597 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1660.741446] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 14:10:38 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x9b7011, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1660.811871] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:10:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 26) 14:10:39 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xa7, 0xf3, 0x7, 0x5, 0x0, 0x200, 0x3400, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x841, 0x2, 0x2, 0x6, 0xfffffffffffffffb, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xf, r0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsync(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffff) 14:10:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6800) [ 1660.878814] FAULT_INJECTION: forcing a failure. [ 1660.878814] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.880296] CPU: 1 PID: 11624 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1660.881019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1660.881959] Call Trace: [ 1660.882250] dump_stack+0x107/0x167 [ 1660.882630] should_fail.cold+0x5/0xa [ 1660.883029] ? create_object.isra.0+0x3a/0xa20 [ 1660.883506] should_failslab+0x5/0x20 [ 1660.883900] kmem_cache_alloc+0x5b/0x310 [ 1660.884328] create_object.isra.0+0x3a/0xa20 [ 1660.884781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1660.885305] __kmalloc_node+0x1ae/0x420 [ 1660.885720] ? lockdep_init_map_type+0x2c7/0x780 [ 1660.886215] kvmalloc_node+0x119/0x170 [ 1660.886619] __list_lru_init+0x511/0x890 [ 1660.887042] alloc_super+0x8b8/0xa90 [ 1660.887432] ? fput+0x20/0x20 [ 1660.887750] sget_fc+0x13e/0x750 [ 1660.888096] ? set_anon_super+0xc0/0xc0 [ 1660.888509] ? rpc_kill_sb+0x1b0/0x1b0 [ 1660.888907] get_tree_keyed+0x55/0x210 [ 1660.889306] vfs_get_tree+0x8e/0x300 [ 1660.889766] __do_sys_fsconfig+0x8da/0xc20 [ 1660.890281] ? fscontext_read+0x310/0x310 [ 1660.890716] ? fput_many+0x2f/0x1a0 [ 1660.891229] ? __secure_computing+0x199/0x2f0 [ 1660.891797] do_syscall_64+0x33/0x40 [ 1660.892181] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1660.892717] RIP: 0033:0x7fef23554b19 [ 1660.893194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1660.895057] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1660.895830] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1660.896554] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1660.897274] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.898001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1660.898726] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xffffff7f) 14:10:39 executing program 3: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) 14:10:39 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='obj_user=K\x00']) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) write$P9_RREADLINK(r1, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='sockfs\x00', 0x2, &(0x7f0000000180)='^\x00') 14:10:39 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1661.061318] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:10:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000010000100170000000000000800000000050000000000000008000080040019ec"], 0x24}}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x4001) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) [ 1661.065135] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:10:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6c00) 14:10:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 27) [ 1661.168553] FAULT_INJECTION: forcing a failure. [ 1661.168553] name failslab, interval 1, probability 0, space 0, times 0 [ 1661.169964] CPU: 0 PID: 11656 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1661.170768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1661.171716] Call Trace: [ 1661.172030] dump_stack+0x107/0x167 [ 1661.172456] should_fail.cold+0x5/0xa [ 1661.172901] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1661.173487] should_failslab+0x5/0x20 [ 1661.173928] kmem_cache_alloc_trace+0x55/0x320 [ 1661.174470] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1661.175038] __list_lru_init+0x44d/0x890 [ 1661.175517] alloc_super+0x8b8/0xa90 [ 1661.175949] ? fput+0x20/0x20 [ 1661.176311] sget_fc+0x13e/0x750 [ 1661.176707] ? set_anon_super+0xc0/0xc0 [ 1661.177175] ? rpc_kill_sb+0x1b0/0x1b0 [ 1661.177627] get_tree_keyed+0x55/0x210 [ 1661.178084] vfs_get_tree+0x8e/0x300 [ 1661.178521] __do_sys_fsconfig+0x8da/0xc20 [ 1661.179013] ? fscontext_read+0x310/0x310 [ 1661.179489] ? fput_many+0x2f/0x1a0 [ 1661.179922] ? __secure_computing+0x199/0x2f0 [ 1661.180452] do_syscall_64+0x33/0x40 [ 1661.180880] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1661.181467] RIP: 0033:0x7fef23554b19 [ 1661.181894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1661.183988] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1661.184865] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1661.185679] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1661.186502] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1661.187320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1661.188133] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 28) 14:10:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:10:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) copy_file_range(r3, 0x0, r1, &(0x7f0000000180)=0x6, 0x8, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f00000001c0)={'U+'}, 0x16, 0x0) sendfile(r0, r1, 0x0, 0x20d315) 14:10:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xffffffa1) 14:10:52 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fa, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1674.598687] kauditd_printk_skb: 73 callbacks suppressed [ 1674.598700] audit: type=1326 audit(1710339052.769:4284): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1674.604183] audit: type=1326 audit(1710339052.774:4285): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:10:52 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/233, 0xe9}], 0x6, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x0) symlinkat(&(0x7f0000000140)='./mnt\x00', r1, &(0x7f0000000840)='./mnt\x00') chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:10:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7400) 14:10:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x88010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2007, @fd_index=0x9, 0x80, 0x7950, 0x0, 0x4, 0x1, {0x1}}, 0x0) close(r0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x7fff) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/134, 0x86}], 0x4, 0x8, 0x33) io_uring_enter(0xffffffffffffffff, 0x58ad, 0x6c25, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0500530f010000000a00189efc58bdf6933bf2000a001800030303030383000026a5719694f6be09620b6bbeae4b76b33fa03dfad92598db44dafe19bab277c5cca2b747c39906b3eb4be9ed98608f4f54f1f5f4f3799110a7d3c0f051577d5798b82253a1c020d0ba9b59833b80d9e32bd06e386d2dc99f52f488971273f78fb83e7ae2d58140bdd42b34456012e0c8e741048c5db2320c9da8bf022c1b341a2fd5d6b29b34464e85907a70f183a89b47a3878e43024d32e07701af5f54fbbfbb28aad6f6b6f7c7db86455efe0cdf6a3aea0aac0f2107"], 0x3c}}, 0x4c000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="30010000", @ANYRES16=r6, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x840}, 0x44000) [ 1674.618428] audit: type=1326 audit(1710339052.788:4286): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1674.621962] audit: type=1326 audit(1710339052.791:4287): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 [ 1674.632836] audit: type=1326 audit(1710339052.791:4288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1674.640519] audit: type=1326 audit(1710339052.792:4289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000001e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250e00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x207c}, 0x1, 0x0, 0x0, 0xd2252680cf166e7d}, 0x801) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc1e2a6132344fbeb}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="24000000ca155c82c8e048799cb49ae008d748b32506615d25075666e6ebfa56fd61e1022f672bfc0d225e8677a4a04bcd3590b55d28d80e1a6e7b228475a6ea82ea6decd60fc192e7410eb1ff1be5e24924ee25ac35b81d670e270f9563620d1dfa5de55bedb63beae850201351e99c837a69ebe0998acd66259b50d52ee71b8eaac5c8b18ed0c9d2d6581b59c5d2ec99848cf82f4fd9a17a2ff946a414600ca2f189466fc2ff5c7ba45e7027ebc2ae5020d27094c025", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x450}, 0x4080000) [ 1674.650682] audit: type=1326 audit(1710339052.798:4291): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1674.659751] FAULT_INJECTION: forcing a failure. [ 1674.659751] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.660485] audit: type=1326 audit(1710339052.798:4292): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11666 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1674.661403] CPU: 0 PID: 11678 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1674.664521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.665759] Call Trace: [ 1674.666156] dump_stack+0x107/0x167 [ 1674.666687] should_fail.cold+0x5/0xa [ 1674.667271] ? create_object.isra.0+0x3a/0xa20 [ 1674.667999] should_failslab+0x5/0x20 [ 1674.668557] kmem_cache_alloc+0x5b/0x310 [ 1674.669151] create_object.isra.0+0x3a/0xa20 [ 1674.669784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.670550] kmem_cache_alloc_trace+0x151/0x320 [ 1674.671274] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1674.671885] audit: type=1326 audit(1710339052.815:4293): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11672 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1674.671996] __list_lru_init+0x44d/0x890 [ 1674.674792] alloc_super+0x8b8/0xa90 [ 1674.675360] ? fput+0x20/0x20 [ 1674.675812] sget_fc+0x13e/0x750 [ 1674.676299] ? set_anon_super+0xc0/0xc0 [ 1674.676881] ? rpc_kill_sb+0x1b0/0x1b0 [ 1674.677401] get_tree_keyed+0x55/0x210 [ 1674.677631] audit: type=1326 audit(1710339052.816:4294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11672 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1674.677884] vfs_get_tree+0x8e/0x300 [ 1674.680502] __do_sys_fsconfig+0x8da/0xc20 [ 1674.681035] ? fscontext_read+0x310/0x310 [ 1674.681549] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1674.682234] ? __secure_computing+0x199/0x2f0 [ 1674.682799] do_syscall_64+0x33/0x40 [ 1674.683259] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1674.683889] RIP: 0033:0x7fef23554b19 [ 1674.684348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.686624] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1674.687574] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1674.688470] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1674.689354] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.690247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.691137] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:10:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7a00) [ 1674.732655] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:11:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 29) 14:11:07 executing program 4: unlinkat(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x300000000, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') getsockname(0xffffffffffffffff, &(0x7f0000000240)=@hci, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x88000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'net/ip6_tables_matches\x00'}}, {@fscache}, {@version_u}, {@cache_none}, {@debug}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@debug={'debug', 0x3d, 0x8001}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '],\'}]\'$#('}}, {@subj_type={'subj_type', 0x3d, ']**/'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise_type}]}}) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000200)={0xffff, 0x1, 0x40, 0x5, 0x4}, 0xc) 14:11:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x80000) 14:11:07 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x542f, &(0x7f0000000240)={0x0, 0x1228, 0x10, 0x3, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x410}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002380)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002280)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1, &(0x7f0000000180)=""/176, 0xb0}, 0x1}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000000580)=""/42, 0x2a}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/58, 0x3a}], 0x8, &(0x7f0000000740)=""/221, 0xdd}, 0x20}, {{&(0x7f0000000840)=@ieee802154, 0x80, &(0x7f0000001c80)=[{&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000900)=""/19, 0x13}, {&(0x7f0000000940)=""/189, 0xbd}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/246, 0xf6}, {&(0x7f0000001b00)=""/201, 0xc9}, {&(0x7f0000001c00)=""/43, 0x2b}, {&(0x7f0000001c40)=""/18, 0x12}], 0x8, &(0x7f0000001d00)=""/121, 0x79}, 0x2}, {{&(0x7f0000001e00)=@pppoe, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e80)=""/140, 0x8c}, {&(0x7f0000001f40)=""/100, 0x64}, {&(0x7f0000001fc0)=""/214, 0xd6}, {&(0x7f00000020c0)=""/78, 0x4e}], 0x4, &(0x7f0000002180)=""/216, 0xd8}, 0x3}], 0x4, 0x2120, &(0x7f00000023c0)={r4, r5+60000000}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0xffff) 14:11:07 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:11:07 executing program 1: r0 = socket(0x1a, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000021c0)={0x0, 0x4, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000025c0)={r2, 0xe41, 0x1, [0x6, 0x10000, 0x400, 0xb5, 0xfffffffffffffffe], [0x5, 0x0, 0x2, 0xffffffffffffff39, 0xf, 0xcfb, 0x0, 0x458, 0x400, 0x0, 0x200, 0x7, 0x3, 0x0, 0x7, 0xb98, 0x6, 0x6, 0x4, 0x4bfe, 0x8000, 0x6, 0x0, 0x100, 0x4, 0x8, 0x8, 0xfff, 0x20, 0x3ff, 0x6, 0x623, 0x8001, 0x3f, 0x1fb5, 0x81, 0x200000000, 0x9, 0xe3, 0x100000000, 0x8, 0x0, 0xfe00000000000000, 0x2, 0x2, 0x6, 0x7, 0x7, 0x1, 0x2, 0xb50c, 0x4, 0x5, 0x9, 0x6682, 0x242, 0x6a29, 0xffffffff80000000, 0xfffffffffffffff9, 0x7e, 0x3af2edb, 0x6, 0x4, 0x6, 0x0, 0xd4, 0x5, 0x8, 0x3, 0x9, 0xff, 0x7a4, 0x1, 0x6, 0x8, 0x8, 0xffff, 0x37, 0x1000, 0x10, 0x7ff, 0x1, 0x6, 0x80, 0x195ce539, 0xfffffffffffffff8, 0x53a, 0xfffffffffffffffe, 0x8000, 0x5, 0x2, 0x54fd213e, 0x1, 0x1ff, 0xfffffffffffff3a1, 0x0, 0x1, 0x7, 0x100000000000000, 0x200, 0x4928, 0x2, 0xffffffff00000001, 0x8, 0x6, 0x10000, 0x5, 0xffffffffffff7fff, 0x7c7, 0xacdc, 0x12e, 0x8, 0x6, 0x7ff, 0x5fa, 0x4, 0x4, 0x9, 0x1000, 0x0, 0xff]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x0, 0x469}}, './file0\x00'}) openat2(r3, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x1e1540, 0x7, 0x18}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="5dc9d09d3c11616c103df8e13a2959de1cbe08583340ad751e8eb6cd255ad0486b7454b547bb8c699d1070c4904e4cdc7cc15710e7c0a1e358a1a7b6d5b24426f4981e094562db74d418fb34596c1a79fbfdc8d3c5e8cf29b2a5925fba2a506bf0b42c77f6b118455894077eca84a5c32715892df03cefb7626f962912d60b10d9d58196c6d7bdace80ced8be1f7a91f1f4bc3e019715b0b", 0x98}, {&(0x7f00000001c0)="f4580a64f05f5ee4155e52d431348e046da50be81821068430e36ce72307c554246a834d25f9a52f834192f75ad60abd1bf16cf0ca27d9b79ff45d856bbae819cde477bd375a79d46d940594", 0x4c}, {&(0x7f00000002c0)="848513eb88c265d94fe6f53af0beb9502f78120c4d6474fb272d74240a9b9d92859a24399ff37964f8883ddf33c0f0d959bbccea421f230af1af32a05ca5310cdb724beb4122643deac393c44c22c9efbad4231b19c2455ab2717baea01d653eace482dc3f0bb974536b225e495fd1957710355d44a7f3e8e449bc2695bf695fbccf5e35b43f03f1b74eb4d84b774a57ada05a834a05913cea78fb776097c3e3bf396d79cd1169cbf20692ecc26584b392b9b2090d317ae20e60a174563d5b9265e4a37817df8fe8d9953d6ed029a9d728b43690321674ef", 0xd8}, {&(0x7f0000000440)="edfc5fa855598206875d31d4a616f2f1bb6e2f9d1225c0dbd3dfdf60dea58bd57658d5af1eac8228e9041d161ee2308afaf59dcc6295d980a8c80ae23522ad0c3749b5ab729691066f2db1b859654f961dfeff1ec41e6fa7c2c1d7efaab0daf58539dc2e62bf85b2748009c7a89378e482587e5e39c45e11122b1c331cc2163c4383e3e9ac76ab666128aee69c2695a4fa4d46682212f7be1c759dd58a", 0x9d}], 0x4, 0x0, 0x0, 0x20000800}, 0x48000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) socketpair(0x1, 0xa, 0x10001, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, r4, 0x2) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@empty}, 0x14) 14:11:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xfffffffe) 14:11:07 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1689.224944] kauditd_printk_skb: 23 callbacks suppressed [ 1689.224960] audit: type=1326 audit(1710339067.395:4317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1689.230996] audit: type=1326 audit(1710339067.395:4318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1689.244577] audit: type=1326 audit(1710339067.413:4319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11709 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1689.246935] audit: type=1326 audit(1710339067.413:4320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11709 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1689.253967] FAULT_INJECTION: forcing a failure. [ 1689.253967] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.255218] CPU: 0 PID: 11701 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1689.255946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.256798] Call Trace: [ 1689.257081] dump_stack+0x107/0x167 [ 1689.257478] should_fail.cold+0x5/0xa [ 1689.257881] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1689.258432] should_failslab+0x5/0x20 [ 1689.258838] kmem_cache_alloc_trace+0x55/0x320 [ 1689.259329] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.259870] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1689.260385] __list_lru_init+0x44d/0x890 [ 1689.260819] alloc_super+0x8b8/0xa90 [ 1689.261208] ? fput+0x20/0x20 [ 1689.261547] sget_fc+0x13e/0x750 [ 1689.261906] ? set_anon_super+0xc0/0xc0 [ 1689.262342] ? rpc_kill_sb+0x1b0/0x1b0 [ 1689.262753] get_tree_keyed+0x55/0x210 [ 1689.263173] vfs_get_tree+0x8e/0x300 [ 1689.263577] __do_sys_fsconfig+0x8da/0xc20 [ 1689.264030] ? fscontext_read+0x310/0x310 [ 1689.264462] ? fput_many+0x2f/0x1a0 [ 1689.264833] ? __secure_computing+0x199/0x2f0 [ 1689.265324] do_syscall_64+0x33/0x40 [ 1689.265728] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.266272] RIP: 0033:0x7fef23554b19 [ 1689.266677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.268597] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1689.269386] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1689.270090] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1689.270854] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.271606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.272351] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1689.275851] audit: type=1326 audit(1710339067.423:4321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:11:07 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x2800, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x24}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x10c, r0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x2, 0x5, 0x594}]}}}]}}]}, 0x10c}}, 0x20000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./mnt\x00', 0xc74adcfb91e68660, 0x1, 0x12345, {0x0, r4}}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r3, &(0x7f0000000080)=""/95, 0x5f) [ 1689.305198] audit: type=1326 audit(1710339067.423:4322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1689.307709] audit: type=1326 audit(1710339067.423:4323): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1689.316299] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1689.321695] audit: type=1326 audit(1710339067.424:4324): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1689.335589] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1689.373460] audit: type=1326 audit(1710339067.424:4325): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11699 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1689.375730] audit: type=1326 audit(1710339067.444:4326): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11709 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:11:07 executing program 1: r0 = syz_io_uring_setup(0x46ba, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3f0, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa58}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x1, 0x4, 0x3f}, {0x6, 0x81, 0x1, 0x6}]}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2ce08bf6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4065}, 0x80) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:11:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xc9ffff) 14:11:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1000000000000) 14:11:07 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:11:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x410a80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, 0x0) lseek(r2, 0x0, 0x2) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mand\x00', &(0x7f0000000200)='-\xfc\x04\x00\x00\x00\xfb>\xc3\xa6\xe4\x02R\\l\xce6\xda\"\xb6', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) lseek(r4, 0x7, 0x2) sendfile(r4, r3, &(0x7f0000000240), 0xbd) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0x1f, 0x0) 14:11:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 30) 14:11:07 executing program 7: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) sendfile(r4, r1, 0x0, 0x400000003) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x5, 0x2}) 14:11:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x1000000) 14:11:07 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e53a9222cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r1, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./mnt\x00', 0x9, 0x3, &(0x7f00000003c0)=[{&(0x7f00000002c0)="46986aa5e2c0d190f4ce3236eb618d652f8e0d3e495613e135506f178618326a7e44563ce457233cf4b60d6eba744e9c73d3f27cc359f9cea9cbc3c9092ba2220168312e4df65f74b0cad478797c414ae526c8a3fb591a60697fbf4fa0fedbfcc42d035bc46855afda28556ee4312e6f182e746f0605c591e97ae90d4e7a053482a1b686d9a8b8003becfc725daf7daff934668f7504bcaf1320d0a910a52162f7f6c10dfe5484ba9382d2e6cac77ee4cdfa71f222d1aa7d2215eb70a704ef367b6d4b07b5e21219c7859ff5c677f527ea24b65a97e9ebf1", 0xd8, 0x5}, {&(0x7f0000000480)="f240afdb17e21e5b0bb68034cf18dccee1ce4e21da90a73425162eeecff279eedaefac073f5e5b0b5273512627eb8323cb53062ef900b7312810ba66d7fc0acbcf4d794d37174234d3f3751c0891813556321336f7cfe5ce9d1191826424bc16be8d98b09c810718e21974f3cf274327891bb4a365633561c42497b46debf81ab37f72def625fec66814c409b9afa784709ab7", 0x93}, {&(0x7f0000000540)="00712276eadf3383aa3da88597c60e14f30fb8cb99168ed3b5366013c70e4045a5ed74428a3ba089e0183b9bc931064292dfcedc493f5fd274484f0da942a599e5797dacf7102bd97e8dcaa159b974ac182442c4004059ce323afd61aae9b47438cb0a3b8bbd0a8ed691bdf4168a9e0893f8853c106bf6c293173cf5eb131e645b8b58e71c6c51c3f23da92b4463", 0x8e, 0xffffffff80000001}], 0x800, &(0x7f0000000600)={[{'ext4\x00'}], [{@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_gt={'uid>', r1}}, {@dont_appraise}, {@appraise}]}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x80) 14:11:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4000000000000) [ 1689.627221] FAULT_INJECTION: forcing a failure. [ 1689.627221] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.628192] CPU: 0 PID: 11758 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1689.628752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.629409] Call Trace: [ 1689.629630] dump_stack+0x107/0x167 [ 1689.629927] should_fail.cold+0x5/0xa [ 1689.630235] ? create_object.isra.0+0x3a/0xa20 [ 1689.630613] should_failslab+0x5/0x20 [ 1689.630918] kmem_cache_alloc+0x5b/0x310 [ 1689.631246] create_object.isra.0+0x3a/0xa20 [ 1689.631611] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.632024] kmem_cache_alloc_trace+0x151/0x320 [ 1689.632406] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1689.632800] __list_lru_init+0x44d/0x890 [ 1689.633129] alloc_super+0x8b8/0xa90 [ 1689.633438] ? fput+0x20/0x20 [ 1689.633692] sget_fc+0x13e/0x750 [ 1689.633967] ? set_anon_super+0xc0/0xc0 [ 1689.634289] ? rpc_kill_sb+0x1b0/0x1b0 [ 1689.634608] get_tree_keyed+0x55/0x210 [ 1689.634922] vfs_get_tree+0x8e/0x300 [ 1689.635224] __do_sys_fsconfig+0x8da/0xc20 [ 1689.635576] ? fscontext_read+0x310/0x310 [ 1689.635906] ? fput_many+0x2f/0x1a0 [ 1689.636207] ? __secure_computing+0x199/0x2f0 [ 1689.636572] do_syscall_64+0x33/0x40 [ 1689.636877] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1689.637285] RIP: 0033:0x7fef23554b19 [ 1689.637594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.639066] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1689.639679] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1689.640247] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1689.640819] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.641386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.641951] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1689.647148] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:11:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 31) 14:11:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0xfff, 0x8, &(0x7f0000003500)=[{&(0x7f0000000300)="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", 0x1000, 0x1f}, {&(0x7f0000001300)="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", 0x1000, 0x5}, {&(0x7f0000000180)="f5cd756944e6e715b554fbe5ca01bbe1851476d99b28d3deb9132be54cb28485ced1709850348326151bd3c74cba7a589c722d9c89d225439258cca25104b28edf77421b4086045e50a246acead9b40283e7cb8be991956b98cd461486bb47c51ff881271e6a3f9d7c6c1b6f0c03cf4973923cf7c7", 0x75, 0x76a5}, {&(0x7f0000002300)="4aeb0ff8aba900923293f99766066b39686e2b7754b56a77d8160358c83a89697d5cd4defa4a7dc0057fdf8a33b961f0bf8df2c012b7347c8f0df80e218f65d4e566697957d161ee369ff74d6aa205a7a9c0d91319b3841e7cd4940d19bcce9dab5916cce4139e862c2a0de0df65f84fc702e21301324a3cb5b4d8cd1dd843eafb9059ce0484155083afb5272f98653fab2ab15c57e5513c583028f8c9b1501bbdd5fc6bac9f2ff4bf2338ffdeef6696222fbe560670cddcfd735ba63b4e7931761463f3320ab5fe20d83067ed5ed5d450c6d437aaf348dc2a699cd55eb159a3b076028e2a4545ee2a7a3fb520", 0xed, 0x2}, {&(0x7f0000002400)="ac33d7c291299b6012395ba998d90cb75836867dd768a3e3d0e369ca9178d384c0f40d7ce6078893560af0fedd2c319b9a2b5914305922faa4974245e31abaf3d3dcbb34a4131ffd0095a08f942a241c4457c30040e537edf7c730168bd6ff6b72a387a078d8025b75c8e574b04374af39473f69", 0x74, 0x40}, {&(0x7f0000002480)="3ac23334c39359e62e5a923f1b95eb2804a010c9267224af362553063aa84f8775c6a3bd7b2734900f7065026383e4f196e326733e9458cecbbb7a29d79798af61747cbc864744203a236f116efffa72e4a39cdaef8541403e2a31c2dcfb11f2c2c7a853d4cfe989ff564d8e32d3caa2c62f181e9209fd30254f66d71a92dfb726509eb7fd24ff02555f8c67a5ba9a92c8df84a92f5aecde65f0e81b8d92f81bc675958a7e7918d6a30bf4e883714841d393140bc5535d1f2cb3726d0a0c73e5a9b71a2d3096f1e2766da8b5eb5c613d6441d85e127a38a0c0822b00d0de1421d022ebb1f65e96eb3db7b25ffcb57b029bcfaa147236b934726f6962e1024ee2dbbbc864a3be1780d9bb9bc790cd00f93b18bd7eb18398d8c6b88e4ba10c55791bc4b3c7fda30131a74446e36b0e8db5f0ef1e741f695ed4875ddb07080a2ca5caaafcdaf75c112c63d9d536f77542f2c52d598f5b0c736f2d1a03d40abec6fd54f8a5cf252c3bf6190b470a05c7f6a14b91cb2c692553983f2785e6f4717ef4532287fe6fce612e581e191827354fb4b492fc3de6f2e3233a543e7bce3bddc9511ee6f5760c575f390b2c3694bf080c7fbaa7a03f7c99f0060af952bd58c20e160b3e0853a17dc7bc021224c7adbde9e837e160731fc16b212b8ede81acb5a871d9ee0c35d50c613b2195655c7977ed2e877a22377336ff8e208796c9c747f4d61f8f9f22ef1cc0bc05c57352e0df7a147755f3beb8ee71a2d3603209d5b11ab42fec9a39e527acf8c3b923eb31a07f9d38080a8afde3e769953c0e13829a64b45c61c1fcbfe236d7e3d3a3ed7dba701979e34319613274fef0e039b994dc7cb4f9621c22b4f2a1c9bf591e6af6e7ca9e64c2cb4149db711b6d1282b2544f6c68ef4e47549db56309a429e869d86314d77a95c592c79d2cead347f0afc0e5b129304e82842a121d47a966ad7ac8adc16dedf9d57ab84d958a6bcd0932a5b1cbd3270d7c6f2906994654992b2587fa883e2f29d11151d2a31722d92cb6a665e43986eedf84722117cbad9234981b3f7e88f5821d6621b47152243c22f854953e62c411f99b504ad90a83080b0711081b87ea2a54f2800e49742f73d080c5c688322ea4858aaf9a64df4b894b8f6a13155b8c8dff147286e82f24c48a02ff5370a289e9ff6921e9209f1bf439c38f8435345f70d3f8b5f454a54045b4a53b5f962be1de860231e10c3099b77107b98e18957277149fbb8cb95a580afb2bbf6f028f512cc06e437b83b662507d90400a405b86646eb1b3723cc0e4ac32f2967d2dbed4548d22a4f30005bf093f65f1b2aadf82bfa98ff7993f384a7e706b41c601ba13bc1e02b5ae67a1d275d2d12947fd5c9f5476a1c3c246c0cb3b8e9ca47c4eabc52d999f727f2bc1303a0062065b1a7636c4d4d168965b6c0a29616f76e5909d6eeaf92abe81ee7c7f5bd0e1016115f80a645175354151e403d5c563ca201f26c6f37df66f47ca4b87533a7e3dafaec0148f17a44c1bbc8f6e2a0af8441385ee4999c2d520d3c209c48a21047aed82f81cab21729f20774126b1bd000a835a55c3fe92c21476b05a6bb3979485b6740d81d59c3ff0a284e090ccc047b8d34247820db1fac767847c137cf62ccb3f0c3a985cb6bd522be418f27064ff2ba5bf9cbc48602e93e9491f938899afad0697a7a1186eee5518f2f0e6f8c3d4426e67a3419fe25e829963fe9269e966520c64667ddefe68dd27c9d4b35428272095afecabe6a9145726cbebeab4a46700b954c8418bc0613c9f6afe0920e9c147b7844ac5b848ffe386dd05d3b7a42a1c38537e964465b178530b594a898d7693cc343d0687d47b7cce88a67e2efb4d5d535f4f509704cec8135fed24b30ae0e321e935aff31489c663e76a22a2c32637c39b7a7167ffe4899226e645e7827599b850460a154771bd792afa4a32b9cf09250b457f18f013d15deae0cd3c345c5a0ee8a2b107604cda5482d069dc5b2b5bcd2ecfd581212380af96a9419d7ef5803ce1952497c5d8a673ca000d2b33f38460d91e0c90401622e88f8964482ed40f43327886281aa0d061498ca857007c635a03da1b563f9deb3bf3bb098d94a8d6559cb5923d4d41e360dd2b2431e4693160f1365019985c8793e7b0971ca73ae42d77291dcead64553da529084986db73f297070a6f48409923be27844422e6f01ef2663ab5461b60dff5ddcf1d5ab7bd9028d4917d29973dc28f53e10ccb9fcaabfe247cea36774ef4d58f282516103bfd971ff983c57d2021cff1938311390bc8600a656b92bd65770fa64115c983d6afb05baa5c8b7cb20e5d2dd0109684ef294cd138fd0f605b9ca9723307ba710c09cefd32c8acac6896e4f0fa73d4a03ee0bc7868975742f742b95a3362a2f9e30235fe41450a65f91eb4f1b2ca2c3e77deb59d1d9f53558cd342fb3dfbdcb38a8351b34e23680b425441d958689eb850a6a285e7cc51070470b80737ffba60e8e290341149faa06cc878d09c88310f0ef0fcad7fb1472b46d0b27b3931cc54417cd519428bbd027d472e8b22cb1dc849db95d9a6edcdcbd9fd2250906dab75f254846f45381d234229b3a931f8447a4c6d7dd3bb3b9180be08ad79088573cb591e743faf3d4b7317b8f2deb012e75ec8c0485dd84283a803fd27a2a837ae2e715e46f74fca1d0a1171d1592fcf8c5c4f0becb7e27ed7084b3bb4db5bcb5ef3d74f789c693dcbd874ba89cd253ee89e93f53e7df04652720f4f000793bd990c63da5b2edf687be1d51e29fe42b5d83bb13348401488b7c7de2419ff236c9a3563822335b60eb224b377b30f37715837c2732602baae6f4260c524abb6b494fa867f75770709f0d2b79b19f9a5b6f53a9cc978b4cbd721a11336c886fccf7cb570e70f093ec0c76913d65a17c36706db9873f55b425d2b8d63c6d4d6e3224880224db5b12fe68ab806cdb82bde251681cb8e0a17ac937a00842055d8db166176db3da4ceec53981813a6b94596afc058f9d048910e5da1a1b0bce2fa2736ed5a505fc753cc20831ccbc225abe7cb1d9e4d63c581ac95e67de9064fa077898649ed78df7e340c1614cbda8f96e8276b289fd674f586a0b41acc4949b1f33c4e249c2a143801b5c47294df41948ba5f6a5d5c4e4c0997225e158e4c46b140b39aeeb628ef39ca0046ad63b52e90fb9f08a5eb0545c32c56f0dc05ce9e717f1e36540907059cb665bd8d944b51f1e8a54d2da43f7de0e5e4ce71470f64c5c47b0d83dd2c7b9fad53c1bc0c8277b51280ef39426842ca99115533c55d19713a01b915fe927437eaa686ee2a5a02d3f82db9826c4d29c7d81ed8f28bed4f02b9885fe635cc31c60a733e6c8fdf1f1600c266f66d7eb247f347edee9c621f276620301d4ceea8a1dcc5f1fe9de4804c645fe3736e6386e4099eb5d19ee13b619924010f3d2d30abac9b929a79db08199bc04d3b76a4b9bb9c68cd41d7954971b5bf2c54713152432d213ccd2be27f9c3da9a17e4e487ec7b855ec770bb82e9cc39d468041cbc348bb67c3652293ef43aa06889bad719717174a850a58b17aeb56dadc8d9d74cbe99fe9de3c84a2a0f25ff8f765a7f0e619f1dd86b28da4c49dcb897b8ac3571d7468a3f21053e6e38013483610c8512db41b19d1a3fd9c74be7eb5e7276b85b3b3a5cb6c8caf06509096cd7dd0485ebe1f2eeedc833065056e1d37c61179c3bdaa66d53a42a41b879a720d322c8db108ef38249471d9183edc1ddc2975776e129e4469d92b543dee55a7d3e9c75c92a2ce7485ac2e6bdb52b270ec52184ec976854cb52f22ad219f2db2f130c9ffde9809d35ca3e49fc758b97fa32df115c3938ee51dfa07bd7beeb46dcb4eb968fa52481d473c488b4b94f30b135eb77ac38540dfea12a8a956769b5ead721ccc99e68ca7134663da2cab67ec1ea55019a564e7d8889732a342100d521954d9e4dccd35e4e18692c11fb1d4b74232ba16fb80f17648f6d4a696ed7eed35d6c7d91f60b496c6c9805caa982443be36ec49b78af7b461b735691c3d705d875bd22cb158e00a9697625b3d77cfaedd1186d75deb6484dc7c60de9256fe136a556a50f7a4a39f2556814218e15c157f910f48f950b64309d090f450dd416cfd157bddca28abbfa9adae887dbf186750e9d859c0da9d74fb73c6886eaf4ad02a6ece6568815e9415b7bb1ffc3448b602d7768621a4a28d11b933b3beed698be6a99b7fc80b86c6d30c8669dca354d4ade88b98019c2f0e0f45da3d0b97f942ee86bd1b01a79edf95cbb189e4b80fbf6fbcaf49fd35832849bdb04ed2363728295a1c04d350f14095ca7ec7fcb3d5bc7e6dd61b471ffa6721aeb28530bbff8e68b0810295c3494752bff28cd533b10c23b628939c582c2c6a2bfc244bee422acc49e46de0cea232496c0ff6e3f7944b2a04f946f89ae8c9e8c31c14fc2fd7c8a632b977cd67ed421b8efa05933022779ee528c16e6c1d579135aa68259904a44b90696076bd6bc024bdce3d790f4bf7541470f1917dde671c365cb4d90e55d5d521223717eff98c418eb43b8ddcbc72964bd8822312e823ce585bd69796a655e82f55279f10ecc71183924bf28b0b45b56c10f982664ff0affe50c458224b28ce65352e4ad010b4aa3da1a58fce18e5a506c5769186e4440eb868e329026af0f029ac8dd20718dfdc2e4d87a79bb5ea561a6fdf9862361f3aad87eab6a121910b27d6c06d8f2d41a37a3a0e2a33b702dd103b4497d693336a0b69590360825e7e4072b27a28ff4f62cdf618dfa3ca50d02c6389c2c8972ac97c1f4206e149bdaff3f9c6143e7fda508b843bc6d0e71a0b6059a508cede2648e03580f3021d685e66be382222f2d421119254f059dcb2eb27ea10fb6e71cd875a16ea7ae95cd3532641224a7188750e8e818a2ca8bd22e76c0870128c64d5f8b26d56828bf016d8009cc036c6a21d7a4f9a74b7f3ac25f6f7785e884553e6a7b287e32933f8085b2149eb223e15f9ae5e86ce736089ac1296bf05f8d8551c3870b61044da9e3344636c3e07e02af9fbb9c8652771b87dd866afde2274842a990fe20c7501179c83e18a27db2f29091bb117549e1b85cf8986cfd86c9c9d3c877da745962376a5999a3b3cec26b638ff2b854e01032fe20b2d8a7ff7fd5138fd231cd84f16cbe3aaec2136eac4193cf538441c05ecadb82b760f30e60e95a1890300c4e7c65f4fda8c62ef78420630e64b7d0ac4b41e311e86fa5a905e4f6d001d45de333284a8fccf95cadf9da0bb398750fad21f3486e85c7d39bd334b61382a938db9f4715365a0d3d5e80fce7064e2c80086b5038f0c00c20b3c442e334324a7c00dbc97e7b65057ef1be415789465fff0f2653b4c1cdc12db68f0a5222ffb036fdcc9366edd34cdc6f5f254969aecac43ed015d348f2ce58f40f003f95257806ffbddc790ad3d9e3eef1f4ba5be2b5bd4877056cd08a4eb1c9e2b1fd9077c756f76d9345424ceb50ab88d41476a29233703af091bac5f10dcc3c07ab4f1681eae407c04100bb7ab5c7710dd2d673aaab463f4f1220e0acbc99910d343da7d22facd278da8eff2467cb01340491bc3013b08aed93c6005c0fac61b75703c5f94707b47028c71913964738f9db22af63615820d9354c55059589376c86a3748d967ec2bccd48ad21281683d1d9beccc666a5e911e7cc3bf45dc94c6360760aa73bb02941d61f5ca38f42e3f284f44d579a829ea6f831fa071535d9db19cd2bb507aea5f489e626dfe6d5ce", 0x1000, 0x4}, {&(0x7f0000003480), 0x0, 0x100}, {&(0x7f00000034c0)="ad84d4908432ecfed2825452bfd1c55e30d8e38fccc4863a7f3ce98159c168432f5e368361e75188f78a1fe42800d4aa414be278e4af", 0x36, 0x101}], 0x8c0002, &(0x7f00000035c0)={[{@uni_xlateno}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#./&'}}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}]}) r2 = openat(r0, &(0x7f0000003480)='./file2\x00', 0x404040, 0x110) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(r1, &(0x7f0000003b00)='./file2\x00', 0x58441, 0x110) syz_mount_image$tmpfs(&(0x7f0000003680), &(0x7f00000036c0)='./file0\x00', 0x3, 0x3, &(0x7f0000003900)=[{&(0x7f0000003700)="af71c42ddb5486f20d53be8e014d9427d9c286c9ab3bcdaae836c42a56b40e0fe58eb2423b6328a1ed620eaef97bba09842adde343f3f2489ed51ceaebb9ce011eb4d300108c9e3c37c242617372960842650b2e0ccd9f50b8fba2ef004a7fa99bb9a59583700ea43cb957e112df90defd644a93aee17c2067f528bb8bacab037943466546426795ee6717a6497de28c0d82cde0f29c903e7a9971a04ea64ed1cb0e9a1891dce901c589a29fea4c0d1f8ab317b7a41489a4aa71bc5e4ba83304a94a9f0e9fa0c56579af0c1f777f68d9c4135ccba7fee2187bb44d5555888424ef22fc58fec427a1d7", 0xe9, 0x40}, {&(0x7f0000003800)="e4ad5861206c22", 0x7, 0xb1a1}, {&(0x7f0000003840)="02899fd09fa40eeca2174d9941b336be75e308f71ad56cd12449868d02fc72e92a035ba7e0358cc9c0e0eb7b96880340d9b925e56f360f30d610ff8be342f7a349e9dc032f6a111148b406326294be7b3cc1b6e012561ee6f0b656898c36b362c98e6c4648eaf5a90436235bc269e45a9c3216022e23df37c7e7ada639376f62e6af691be243a3840990e258884ed3ca983340391842b9d7770edc", 0x9b, 0x5}], 0x2803809, &(0x7f0000003980)={[{@huge_always}], [{@seclabel}, {@uid_lt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfsroot={'smackfsroot', 0x3d, 'uni_xlate=0'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) sendfile(r0, r1, 0x0, 0x20d315) getgroups(0x2, &(0x7f0000003a80)=[0x0, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000003ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r5}}, './file2\x00'}) lsetxattr$security_evm(&(0x7f0000003b40)='./file0\x00', &(0x7f0000003b80), &(0x7f0000003bc0)=@v1={0x2, "39547c0c144c5d13"}, 0x9, 0x2) openat2(r2, &(0x7f0000003a00)='./file2\x00', &(0x7f0000003a40)={0x80000, 0x139, 0xe}, 0x18) [ 1703.693639] kauditd_printk_skb: 91 callbacks suppressed [ 1703.693655] audit: type=1326 audit(1710339081.864:4418): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11777 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1703.709720] audit: type=1326 audit(1710339081.869:4419): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:11:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x2000000) 14:11:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x100000000000000) 14:11:21 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x40) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000180)) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0xa040) sendfile(r1, r3, 0x0, 0xffff) 14:11:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10200, 0x4c, 0xc}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x0) 14:11:21 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000140)='./mnt\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:11:21 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x3fe, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1703.720087] audit: type=1326 audit(1710339081.869:4420): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1703.722205] audit: type=1326 audit(1710339081.870:4421): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1703.731886] FAULT_INJECTION: forcing a failure. [ 1703.731886] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.732865] CPU: 0 PID: 11782 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1703.733436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.734104] Call Trace: [ 1703.734328] dump_stack+0x107/0x167 [ 1703.734642] should_fail.cold+0x5/0xa [ 1703.734951] ? create_object.isra.0+0x3a/0xa20 [ 1703.735328] should_failslab+0x5/0x20 [ 1703.735644] kmem_cache_alloc+0x5b/0x310 [ 1703.735968] ? mark_held_locks+0x9e/0xe0 [ 1703.736310] create_object.isra.0+0x3a/0xa20 [ 1703.736673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.737100] kmem_cache_alloc_trace+0x151/0x320 [ 1703.737495] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1703.737899] __list_lru_init+0x44d/0x890 [ 1703.738246] alloc_super+0x8b8/0xa90 [ 1703.738567] ? fput+0x20/0x20 [ 1703.738820] sget_fc+0x13e/0x750 [ 1703.739101] ? set_anon_super+0xc0/0xc0 [ 1703.739436] ? rpc_kill_sb+0x1b0/0x1b0 [ 1703.739759] get_tree_keyed+0x55/0x210 [ 1703.740083] vfs_get_tree+0x8e/0x300 [ 1703.740396] __do_sys_fsconfig+0x8da/0xc20 [ 1703.740748] ? fscontext_read+0x310/0x310 [ 1703.741076] ? fput_many+0x2f/0x1a0 [ 1703.741389] ? __secure_computing+0x199/0x2f0 [ 1703.741765] do_syscall_64+0x33/0x40 [ 1703.742073] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1703.742499] RIP: 0033:0x7fef23554b19 [ 1703.742804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.744298] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1703.744916] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1703.745498] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1703.746075] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.746666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.747237] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1703.751642] audit: type=1326 audit(1710339081.870:4422): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 [ 1703.756968] audit: type=1326 audit(1710339081.870:4423): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1703.764008] audit: type=1326 audit(1710339081.870:4424): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:11:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x3000000) [ 1703.770689] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1703.770721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1703.782583] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 [ 1703.784283] audit: type=1326 audit(1710339081.871:4425): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1703.786100] audit: type=1326 audit(1710339081.872:4426): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:11:21 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x200) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:11:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 32) [ 1703.820550] audit: type=1326 audit(1710339081.887:4427): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11789 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1703.865686] FAULT_INJECTION: forcing a failure. [ 1703.865686] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.866720] CPU: 1 PID: 11813 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1703.867275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.867944] Call Trace: [ 1703.868165] dump_stack+0x107/0x167 [ 1703.868447] should_fail.cold+0x5/0xa [ 1703.868768] ? create_object.isra.0+0x3a/0xa20 [ 1703.869147] should_failslab+0x5/0x20 [ 1703.869466] kmem_cache_alloc+0x5b/0x310 [ 1703.869805] create_object.isra.0+0x3a/0xa20 [ 1703.870159] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.870591] kmem_cache_alloc_trace+0x151/0x320 [ 1703.870968] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1703.871384] __list_lru_init+0x44d/0x890 [ 1703.871732] alloc_super+0x8b8/0xa90 [ 1703.872042] ? fput+0x20/0x20 [ 1703.872293] sget_fc+0x13e/0x750 [ 1703.872566] ? set_anon_super+0xc0/0xc0 [ 1703.872897] ? rpc_kill_sb+0x1b0/0x1b0 [ 1703.873210] get_tree_keyed+0x55/0x210 [ 1703.873525] vfs_get_tree+0x8e/0x300 [ 1703.873835] __do_sys_fsconfig+0x8da/0xc20 [ 1703.874179] ? fscontext_read+0x310/0x310 [ 1703.874527] ? fput_many+0x2f/0x1a0 [ 1703.874837] ? __secure_computing+0x199/0x2f0 [ 1703.875213] do_syscall_64+0x33/0x40 [ 1703.875526] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1703.875936] RIP: 0033:0x7fef23554b19 [ 1703.876242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.877724] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1703.878334] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1703.878917] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1703.879533] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.880102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.880690] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:11:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x200000000000000) 14:11:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x80004, &(0x7f0000000140)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) io_setup(0x5, &(0x7f0000000080)) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file1\x00', 0x5) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x804) 14:11:22 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:11:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10b003, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x2, 0x40, 0xbe, 0x0, 0x9, 0x88004, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xffff, 0x3}, 0x44109, 0x0, 0xffff, 0xf, 0xab4, 0x8e, 0x3f, 0x0, 0x7ff, 0x0, 0xfe6}, 0xffffffffffffffff, 0xd, r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffff) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) dup2(r2, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4ac9cd27c65dec1e, 0x80, 0x1, 0x3, 0x1d, 0x0, 0x0, 0x3, 0xc, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10000, 0x101, 0x8, 0xd, 0x9, 0x1b29, 0x1000, 0x0, 0x7ff}, 0x0, 0x9, r5, 0x0) 14:11:22 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000140)='./mnt\x00', r1, r2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:11:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4000000) 14:11:22 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000040}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14010000000000000007000007000000c4048f6b6bd29488c6d92666e201000000001c000000684d5584261fc3b408000002804ef3253d57174e7be59970d64ccbb6695f56f512084eb4f81e9f3ab0550ff94152aabd9b1e0a1aae3a24ef629def1c921c154c1ce8335a58fc946021ac9f934ac4e069dae5377dd8bace9aa0a20969b913e02bbffc2a62f93e198a09d6d42c498edb9132feffffffffffff756ca7e9b30dc8ba659dd88ca50d1683ce1a4294e7a097a3552cd2e9acd300080000000000000000000012000018e5c945ff33", @ANYRES32=r3], 0x38}}], 0x1, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r3, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 14:11:22 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = syz_open_dev$hiddev(&(0x7f0000000340), 0x4, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000004c0)=[r0, r0, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x6) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)) fchown(0xffffffffffffffff, 0x0, r2) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='deSallok,\x00']) [ 1703.993662] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1704.007027] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:11:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x5000000) 14:11:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6000000) 14:11:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x300000000000000) 14:11:34 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/93, 0x5d}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000000300)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x6, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) memfd_create(&(0x7f0000000100)='^@!#:-\x00', 0x7) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) fsync(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x416080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup3(0xffffffffffffffff, r2, 0x80000) dup2(r2, 0xffffffffffffffff) [ 1716.476062] kauditd_printk_skb: 74 callbacks suppressed [ 1716.476074] audit: type=1326 audit(1710339094.643:4502): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.482462] audit: type=1326 audit(1710339094.643:4503): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.484695] audit: type=1326 audit(1710339094.644:4504): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:11:34 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 33) 14:11:34 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0x5}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8400a0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x90c80, 0x4) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="410000000000000015fa0800418e00000000"]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x30) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x400000000000070, 0x0) dup2(r3, r2) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:11:34 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:11:34 executing program 7: r0 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) perf_event_open(0x0, r0, 0x4, r2, 0x3) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000080)={0x2, 0xf}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) 14:11:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r1, r0, 0x0, 0x81) listen(0xffffffffffffffff, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/4126, 0x101e, 0x0) r3 = accept$packet(r2, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001100)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000001140)={0x6, 'macvtap0\x00', {0x3}, 0xffff}) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000380)=0x4) fallocate(0xffffffffffffffff, 0x41, 0x80000001, 0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1716.501168] audit: type=1326 audit(1710339094.644:4505): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.508673] audit: type=1326 audit(1710339094.646:4506): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.511858] audit: type=1326 audit(1710339094.655:4507): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.513549] FAULT_INJECTION: forcing a failure. [ 1716.513549] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.513566] CPU: 1 PID: 11872 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1716.513578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1716.514917] audit: type=1326 audit(1710339094.655:4508): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.515179] Call Trace: [ 1716.516052] audit: type=1326 audit(1710339094.655:4509): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.517972] dump_stack+0x107/0x167 [ 1716.517988] should_fail.cold+0x5/0xa [ 1716.518320] audit: type=1326 audit(1710339094.658:4510): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.520340] ? create_object.isra.0+0x3a/0xa20 [ 1716.520359] should_failslab+0x5/0x20 [ 1716.520374] kmem_cache_alloc+0x5b/0x310 [ 1716.520389] ? mark_held_locks+0x9e/0xe0 [ 1716.520407] create_object.isra.0+0x3a/0xa20 [ 1716.520959] audit: type=1326 audit(1710339094.658:4511): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11857 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1716.521167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1716.528386] kmem_cache_alloc_trace+0x151/0x320 [ 1716.528937] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1716.529502] __list_lru_init+0x44d/0x890 [ 1716.529987] alloc_super+0x8b8/0xa90 [ 1716.530422] ? fput+0x20/0x20 [ 1716.530794] sget_fc+0x13e/0x750 [ 1716.531190] ? set_anon_super+0xc0/0xc0 [ 1716.531611] ? rpc_kill_sb+0x1b0/0x1b0 [ 1716.532065] get_tree_keyed+0x55/0x210 [ 1716.532496] vfs_get_tree+0x8e/0x300 [ 1716.532915] __do_sys_fsconfig+0x8da/0xc20 [ 1716.533388] ? fscontext_read+0x310/0x310 [ 1716.533805] ? fput_many+0x2f/0x1a0 [ 1716.534197] ? __secure_computing+0x199/0x2f0 [ 1716.534671] do_syscall_64+0x33/0x40 [ 1716.535115] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1716.535680] RIP: 0033:0x7fef23554b19 [ 1716.536061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.537880] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1716.538662] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1716.539370] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1716.540086] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.540811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.541521] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1716.571380] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1716.574282] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:11:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7000000) 14:11:34 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x400, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:11:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x400000000000000) [ 1716.748237] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1716.755582] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=1 14:11:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffff) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r1) fsmount(r3, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x49c0, 0x4) sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="3181", 0x1c}], 0x1}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000040)={0x1, 0x1}) 14:11:47 executing program 3: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000001b0000000002c77144c0f7acc3f6556a44dc4e992590a36353b66401ed1b9856937b84a3c47b8f641f3e693b047dc81fdb281f0a9b181be377805639c8ae649ddf60764138c136bcdf63047eec006ce5d5e9330238b47e00"/182, 0xb6, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x101342, 0x12) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) 14:11:47 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r2, 0x800) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x50, r4, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x53f0, 0xcff1, 0x0, &(0x7f0000000040)={[0x5]}, 0x8) 14:11:47 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:11:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 34) 14:11:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x8, 0x2, 0x80000000}) r2 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffff) perf_event_open(0x0, r2, 0x4, r4, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x15, 0x80, 0x3f, 0x8b, 0x0, 0x5, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x3f}, 0x0, 0x0, 0x1ff, 0x10, 0x7, 0x4, 0x3, 0x0, 0xffffffff, 0x0, 0x2}, r2, 0x9, r1, 0x6) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x70000, 0x1e2) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000081) 14:11:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xa000000) 14:11:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x500000000000000) [ 1729.252172] kauditd_printk_skb: 47 callbacks suppressed [ 1729.252186] audit: type=1326 audit(1710339107.422:4559): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11915 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1729.254579] audit: type=1326 audit(1710339107.422:4560): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11915 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1729.263761] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1729.267259] FAULT_INJECTION: forcing a failure. [ 1729.267259] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.268012] EXT4-fs error (device loop5): __ext4_new_inode:1068: comm syz-executor.5: reserved inode found cleared - inode=9 [ 1729.268824] CPU: 1 PID: 11920 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1729.269717] audit: type=1326 audit(1710339107.431:4561): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11915 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1729.270431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1729.270436] Call Trace: [ 1729.270457] dump_stack+0x107/0x167 [ 1729.270476] should_fail.cold+0x5/0xa [ 1729.274381] ? create_object.isra.0+0x3a/0xa20 [ 1729.274949] audit: type=1326 audit(1710339107.431:4562): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11915 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1729.275008] audit: type=1326 audit(1710339107.431:4563): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11915 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1729.277547] should_failslab+0x5/0x20 [ 1729.277563] kmem_cache_alloc+0x5b/0x310 [ 1729.277581] ? mark_held_locks+0x9e/0xe0 [ 1729.280740] create_object.isra.0+0x3a/0xa20 [ 1729.281290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1729.281925] kmem_cache_alloc_trace+0x151/0x320 [ 1729.282503] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1729.283124] __list_lru_init+0x44d/0x890 [ 1729.283642] alloc_super+0x8b8/0xa90 [ 1729.284107] ? fput+0x20/0x20 [ 1729.284497] sget_fc+0x13e/0x750 [ 1729.284930] ? set_anon_super+0xc0/0xc0 [ 1729.285430] ? rpc_kill_sb+0x1b0/0x1b0 [ 1729.285920] get_tree_keyed+0x55/0x210 [ 1729.286420] vfs_get_tree+0x8e/0x300 [ 1729.286894] __do_sys_fsconfig+0x8da/0xc20 [ 1729.287432] ? fscontext_read+0x310/0x310 [ 1729.287946] ? fput_many+0x2f/0x1a0 [ 1729.288084] audit: type=1326 audit(1710339107.432:4564): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11922 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1729.288408] ? __secure_computing+0x199/0x2f0 [ 1729.290679] do_syscall_64+0x33/0x40 [ 1729.291159] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1729.291794] RIP: 0033:0x7fef23554b19 [ 1729.292259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.293041] audit: type=1326 audit(1710339107.433:4565): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11915 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1729.294518] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1729.294536] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 14:11:47 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1729.294544] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1729.294553] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.294566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.300202] audit: type=1326 audit(1710339107.434:4566): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11921 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1729.300974] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1729.335007] audit: type=1326 audit(1710339107.434:4567): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11921 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:11:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120011cd00001b0000000000840000001400008008000000000000001093b866720000000bf9af9e974de95e37e10245431cb74fcb3eceeb500f9c242d7c7d31ea82f6a520faf05f359a4ba59908fd472b9b66c00ae007ece973f57bb4b68e8d7bf1133bf9af8910c552a088d76ab5328b370d41939f52535c1e6727890c6ff6fc1570d913d67666350c9f8c484e57501b21898e99165bf9ed70e2a85364bef4a607aaf31a4fa1a4eb057be16ab45b", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) [ 1729.340741] audit: type=1326 audit(1710339107.435:4568): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11921 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1729.364242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1729.389494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 14:11:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x21030000) 14:11:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x600000000000000) 14:11:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x6f, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x0, @perf_config_ext={0x7fffffff}, 0x8, 0x0, 0x335, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000001600)=0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:11:47 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000100)={0x2, 0x5622d47e}) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf256d00000008000300", @ANYRES32, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x0, 0x13b1}) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) mount$bind(&(0x7f0000000140)='./mnt/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 14:11:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x1fc, 0x8a, 0xfffffffffffffffd, 0xffffffff, 0x7ff, 0xfff}) socket$netlink(0x10, 0x3, 0x8) 14:11:47 executing program 4: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000001b0000000002c77144c0f7acc3f6556a44dc4e992590a36353b66401ed1b9856937b84a3c47b8f641f3e693b047dc81fdb281f0a9b181be377805639c8ae649ddf60764138c136bcdf63047eec006ce5d5e9330238b47e00"/182, 0xb6, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x101342, 0x12) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/95, 0x5f) 14:11:47 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x401, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:11:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 35) [ 1729.515645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11950 comm=syz-executor.3 [ 1729.524579] FAULT_INJECTION: forcing a failure. [ 1729.524579] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.525577] CPU: 0 PID: 11958 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1729.526121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1729.526814] Call Trace: [ 1729.527030] dump_stack+0x107/0x167 [ 1729.527321] should_fail.cold+0x5/0xa [ 1729.527631] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1729.528041] should_failslab+0x5/0x20 [ 1729.528347] kmem_cache_alloc_trace+0x55/0x320 [ 1729.528724] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1729.529131] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1729.529535] __list_lru_init+0x44d/0x890 [ 1729.529874] alloc_super+0x8b8/0xa90 [ 1729.530180] ? fput+0x20/0x20 [ 1729.530429] sget_fc+0x13e/0x750 [ 1729.530708] ? set_anon_super+0xc0/0xc0 [ 1729.531051] ? rpc_kill_sb+0x1b0/0x1b0 [ 1729.531369] get_tree_keyed+0x55/0x210 [ 1729.531678] vfs_get_tree+0x8e/0x300 [ 1729.531989] __do_sys_fsconfig+0x8da/0xc20 [ 1729.532343] ? fscontext_read+0x310/0x310 [ 1729.532692] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1729.533131] ? __secure_computing+0x199/0x2f0 [ 1729.533510] do_syscall_64+0x33/0x40 [ 1729.533808] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1729.534228] RIP: 0033:0x7fef23554b19 [ 1729.534531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.536032] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1729.536632] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1729.537208] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1729.537774] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.538339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.538917] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1729.578512] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1729.614109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11965 comm=syz-executor.3 14:12:01 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000014c0)) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000000000000d4000000f8f8ffff00000000000000000000000000200000655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000000000000000000000000000000000009e3a575dd15b0048c1a51a1eee055ed90f71ec35d54230ac069917f9d957c6c8b46830dc0c3a3588ed4ad131171e4186f962", 0x8c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="34100000110008002abd7000fbdbdf2501000000c8bdf90a58d058ed7f042e556963bbc4625aecd32c0a8b920b335e51c6915f2ed3b1ffb1cf60884be477aa1a4a34d239873be3fd6472a35f60d73b5dab5a829dffc788e47fd9098899de5442eb19dcff4acdafef44a0b3c2cb7d2fd32a2adf493a9cdda45fc8d186556e9826c1e7c68a1988b344fca57c4fde9899d51f160e0ed244d936ccbd19ca685213a9452027a624bbba4c8fc63caf0ff8fd6bb1bf93334d84723626819059ffc36043b85d84bfd3d65b53543e1d925d81424af70e5ad203b588187f3b30444766887088ba5f37ade3eb260aa4b4330d3ff612de6577ffe98ed1a3c94a4a5c47fcba6692d6eb6ea6184dbaee6b706f86eacef0c37fa1acb93e12757a102e960d56b67367460a966aab1f19da37be736746a261bc0eb9d07a5b2d5d8119c1e0ffb57cf9130e90705aa72e2c69654e92ed621ddd8d4d41b2baafc81c35dc82d9dc042e3b1a0fee3e3e191b89c4d2e57915a1a5c687ab1188c340221a340100a8545c219326e08fe13756353438db4c754bd0fefc460050028f9750d22024c486ebf7b37c4c931a750f4334bcd53e99444abe8bdc57a9be06069afdf20dc6821c121376ea6b1da4691d8086abeba5415ed96324459d37317c8fddbef62f7c3e9c3f4f826541365ac206a1596c6d6fd258c1636e242a77912792c5b6c51594fbc4b9d42dcc4254b70c1ae7b38b87ee97a44e90792ec6357777878f86e951c68e316205916eb82b782905fab5aa12757a39f75ad4ac13b91ccc3f96cd178075fdcc1dcfb6bc9222f23f105999285471f91253f30bca28ce70af55c41329c17aa55bbdb813478d2cd293471bf3deb251e05f5e8dc24d04d808f8960e710808c9013be2785d6928e198e4b5cdcbb425685f526ee6bb3ad9750e629236080495c02631edf5eb49311839d83d7394b544c383255e27545fd7cf301a3c9828b495dfc733229f0177f634a908d3b68a4293c0884e9942e7a0154b67df05fb25e574bd2c97cd728ae52c63c24b044222ba9cabcc1d35d924a27b50442c06e0d7252987393aaad50cb344521db5e34c12468c52430abdb73fdf8cd68804908d1eda0d18479667afd3318b4af54a4de3e3da276e58ecb2a44f897c12fd7bdf8e1234e543b9c29f80cb5d6673f1cab02abdd8bc35a90a0b13e194210a21dccee2fd63739fcd400e0d599da1143d16c8a37e019532e92c468ba9d6c62fd98bd259916deee0e8edb5140129940e6f72a4b6284c40c73d688185da1a77e1b21240e22b4dcde7485f07ebe0ce4869e5690ac0637169e35214930ad2799673cbf487058fca91c79d5f298c636f6ec50d6f335822ed877b58dcd4c866882307bc6c49f6d0be439368ddaabad50e81a52c9f353b2f5dc0c0327768cb6fd0e57c6551e2551542de6132b714e855703596c653703b9cad63c3cc84f936b2645d0258244fe03f1f0c0e6f561e33a1abfd303fa6851639097f4f7621fa8bf47168bdc685280bd91257660b983b350a91bfd6d5041d38fb80a4b89b7b250ea4f6d4f79b839066f0d26cb7fa62de39e023e9d9173cc4826e85510a431cd1883c1fd3188bc4a64e8dd0c724634c31d7f962023f59df858703a3e3691adf488ac114e3b1dbae0972cea9c13d935a3737416c3c6a21c36cda0b80bfc7f99c5212b6099db9193b2e1eea24ec0f3f10cca65260a66806130f7be3411b7226fbedecda674776bea47ea5612ab688b63b5432318e6abbec713915aaf626a2e5d6c465f5ae839008bfd63e3fc41de7f1206c5314a0e91f55a3c4770a5906628690de68482c4066b003ec98ef328c2af6ef24faada898070b2cdbd923d3e0955c099905d4b7f6650f45a1aafcadc6abe64393847021d42b08cac74ac575be248340715fd786e20303dbe4f45e2507def2455032c2e848f2ac7ed0a2ad7c25b0c2b7191e186cf971dea8c9e25c7c9d98a1aacca4b9c76ac863d9a78929b43f201016f18160757500ba386d98bce9e69c2bba5f14e72788d47b8bd9c64a8ade6a489f6d19cc63775e46f0a5693d7e1f8d0808aaabb0571ddad0e1dfad1f7f56d63b859b757d19907ff4d86da0e9d222035fd810ef156f75b7e8625ba7f1a1f2f3f038c02e4ca9701dce2d54646278dd6f01ecc2a4343d1869fa138039b0a9a870fb852b3fcdaa13b513dca854419b21a3c2b01d42d8b6f24ed6e45b0e8576ade507cbb78a83d0b054735422ac976666487306c36e13555c23044580d107bc6df9234e0f0254569d3a7deb1fdc8da4d7f0dc9829c6d00d1ca857741781a2c1e8d462eb7c029620eba117fc5f0fc2ba8b9407e0eabbc9159d391863bf03ecdbcb14b99b35c1162284304d8be4819c811b4ab84c4bfc13204c4a04d771691861a1821850c8030abc1f23580cf2c999b741d8cd26d94e3db53d8e9a0b7214ef8e8962aada90e6cb8370a99f76306c7de7a4ba226d5d94d78059e95f7a607144cc3b3ce2a867d103f9205065f2d42950b3de864e2870029b881492e03a075fe52240d70b53ff78aed1f732a428316a5e9cb9e780c82c7e9f73131ac823578b955c0e489fb09cf8a91f2cb0f35589bc393cff64205bfde819ee8c9cc6ad69cda3be094c1f376cb91d97e565e2da83bf9525a45f1990a223a33e75f3de42622a3693065d81bb0071f31174cdac440d06b32fecdec387e62aab2f27f7cdf2d582e3a24fe79da0e6be73c07aac7fb90ebbb0b387b1574d1fa6e2eb4d8dfb15d5aaf75aa59e8b29ac2382f5235026e9cccf8e203f94c868838aec52afcca228af9f46be680490e645f1bb36271b3764edce908c272a0d767e4aae354cd38247005a20bc07b4d114efbd0a4d801322cc121d5a2b6966f641bc4ef98bce9cdc3eb81fb32f1e2626bc413c6613e75b8386a445dd04af49dfb6ffafcfcbacc71483d651eab572f56d1c3daa9730f307f336c4415eb8606e24af9fb2671ed615134efc7b5e2b30f09de18a4a928a0b5aca1a12cc45802d0b39e1dba0f63600e078621333693e969fe545cf6fceb7f389cf8696a4c65736c90e9ffdd828e65f4ab10852937d6114f4aa7b126afa5b849a4bef9f6de949ebc2ee610ffa14d0e37ef2ff8a16781eacabff675074fc8025cb781bf2634fce4b8237b5f07d319e9e7bc53d6a6f9177f5a280446b19abd7f3c6c90138715ad1526fe57ba20f0758703f7ff668d9aa5ba1e0c54338956c3366995f67c89cdc3b07c0011c1002dd579785eb93362b7efcad81b7bf45c70b19af26a9ce0852d7f508eb4dff0a7ef1a3a18266f59a94d367675923709ccb3240754b3d45ef53388e6f9562cab0152af019538153a7080d99f442168c81a2ab886f3c07e8774c2e3db17e180de325d2a61deb95d279f7ee8658395f38598971ed69a409a9cd72d02226176711c36ee3e1d2bcac27122c01d49fd579aa97a6f85497529f3bc58cd07dc5354fa8632b5886f84a48b4bd422bf2960af95a1a2d92fa35c55975bf203b1c7ec63ba18af3b27273030ddb4529f6552ccc3d3727e48ea56c4ac0d2441e9e7e56b829666e1649d2cec1b89e841b14a9b9ef10cc3915cf8105eff98db1188c320df92ee5e91a80bac062af3512bff682da93e9ad4092f701a8bd6fb863c44cbd9076ea3a4a3119bae6514f586e4f103ff998d293f0c5b519bed8e753c42b21fb9174d0a2ba4b017e14f7923e9f100f404340aa5288bb62ab043c20947102347700eb84d3db7b2e79254b7bc0082b7b4d64d73a5a4a4938ba01a0723a1757fb9dcf37ef5ee729551eb57d28dffab72743179333a5bc5b9ed7e9c5f2716870e46142c485185cffc4cf6aaba19bb723b7006d6216d9f2f6b663e1c2645a8002c259fdcfecd5fb116492daad286da9285ed2bc630b0a1158aba5fb438aa37f0b802d1f3a6b3a104fcaedef1d521266c27fb37200333bd16972cd6d1ab1570c6e65ff6ca85020c64ee5b200f7ee83a3293639dd0d607e59e69ba685397da198618e41041148da2a7131957d6dfbd927f43b416011ba5554f5090d80af5388cac82063afdf1374a2f71e25583dce4f2c6f87c2dc57b70837277e6718735f5bda7b4c1700455dba546512fa30efcf56bfeffee1f8b7abc99ae694de9fce198412e0208338b1d645d93cecda3c67960cceebbe63f7f2a88b291a6aca69f3c31732334697d87a5de4bbe64bb82a6b19997a760ad9a4595007bb0888340c719319e8e660697e8670faffc49cd34e7694de516f891b925c08465f6dfecd37e357f5df7a4b85e92475cf79f43a7d62a86b9cd080e0200398e403e109a462408e59189e363f45e9c1a8976729f06a17b5cf6e9a3860fb0966026a4d58481a78596daea4df45b4ff18aeea720b580ea99314c3cb8eb7ba0e414970beb8169ee03d403ff8c67291fa8a77296c9dc8d8cf394ed8a4de72da52c0ab4d897179231551ca8067b9a194bb0a3ca123b7e13fc9c8a8721bd0fe26aaeaf29e4d4b67bab89fa8321b0cad8f58e2f2f5fbb4a07a2fef2687d3221f1a1c0a45c70b8f55abb323ba5b37efe650d7c79462d72b987ec2fc31632742748ad883cce59f1e9150f44aff8a9baeed0ac5282c2b83ea81ad7f87329c446333c441b9e1ba43377f9d73c1b1ac354d0c585281bbef70b58bb44b5fc252ad07bd62181dc9312a18cc24425419d40db5e122e589b04102a6d90e0de12a103b5636ada8009b9a8d1d8cd12d7b1050715d915ecbf63cfe7c482b93e7d68a9de1fdb1eb23c8a1c717d703b102180b23c0431db15352343793cf4bbbd6f4797c5abf89a606bc3350a601777ae5922ec54893de6a35f280915a4609dddf82a3e0719b6e24791a04d56ea99ef27fa11b889687be5d6779476a40d3a9120238f3c51c0f7fe1e527b379cf27564d0ea0133847eb04c2212a8277f150f486cff92f7ee7bf29b4aee88272e7cabfb1c2a78fcfcb8a5692b1f222570bdf735975cf363d204bb119c240c4a0bf7a9a90e6c270f2c71217c8217c990b447c65e76b7618febaf63012bb050acd7f97f3b0034bfb0de509da80f5a70e77f585f49e96dc7601851876d1f68f5cee944a178e857c35906c498bdae580a1fb12f79cc0b53318fa9a5f2af0db48c25961bffa7823bbd33c9c6b7a7f23071f96a69122889b268edb9cb57e9b14fcbdd10713af6cbf6fd97d5d6463ebe694154befdd41bd63a63bc62d72834981ebc2ee2b92a705e745850e2dcae4899dd387b27a4def53f2975006fba2e0cc07fb8e0a35cf8b632044826383d5261dc22268f2719599e84798183ca5e4b3dd915b785a1bcfc2ced88fa47d0859384ccaffb302daa16b536dcce430f3836c965c799a9472dcdd9a045fc2d48b6cb36cd162e8f6bccb2829e8c9b466ee7bb392f810a220df679c7f0476bcdf09494bdcc5debf65056e7d4488cbdf5ee410a25943f1d8719f37f97e7719a95ca1a4a9c6c5418ee78942382154aea8611356cb38596cb23d3f762a61016e15d33ed2dec8649cfa6e8fafcc53cba577c3ad51f62fca83ca7144ae4f85a0b8efbf05b581a2de681691debdf5d151481f1a80033d72889c6082874514ee656342d5544afe5577fdfb1260882405d1dd82838adfb608513e9b9f8a7dfef16bfebb11491954341f3b3221d9808b62579ac0dd220d7c2cd9f6730ff4e9107e7b765e61d0844fe9d011ecd2a125aca1517c6f1619777eb267ced521ac7893ebf588557ab8b1e0d40fa3e3db681ceedfd3f724dfe40a4e989484dcb81d131836c9fb01fb52f33dd5bd7b889371d3ed6b7933f4a39f33fef9c54851a72fc4203feb179aabe83ba3544b6549e45013916e4ead57c9a753bd6c078ae24d6123d21ee3c5a170804f6f9bcb8683468e511d987ee7cf9ead18abf47f0f23555aa8b40a2811bbfc764d4eb7fc60cfe138a7e005d0ce3035d6a46333a2c6fb1db1fdfcd780c8f9784a2b489b188d0cd0488d2e54d1ffcde6fabcc12ead95ce1081e2365bbf8eceef819e198a4dbbe7982b8feb27be16fd5713575e5623620c94f976"], 0x1034}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 14:12:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000100)={0x0, 0x1000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052900)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "d5e2b485aca084"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fac0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x8, "8b458d8b37b0ed"}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="2800000010000100000000000000000000000002050000ff7f00000000000080081a0d00ac341400"], 0x28}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r2, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$RTC_UIE_ON(r3, 0x7003) fsmount(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x2, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0c0583b, &(0x7f0000000080)) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000000)) 14:12:01 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000200)=0x800033e0, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x16}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x73c54e3e) 14:12:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:12:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x40000000) 14:12:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000040)=0x2, 0xe679b0b, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x410080, 0x1ec) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:12:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x700000000000000) 14:12:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 36) [ 1743.023237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1743.025861] kauditd_printk_skb: 59 callbacks suppressed [ 1743.025875] audit: type=1326 audit(1710339121.196:4628): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11967 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1743.028736] audit: type=1326 audit(1710339121.196:4629): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11967 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1743.035525] audit: type=1326 audit(1710339121.202:4630): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11967 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1743.039032] FAULT_INJECTION: forcing a failure. [ 1743.039032] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.040229] CPU: 1 PID: 11981 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1743.040947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.041782] Call Trace: [ 1743.042059] dump_stack+0x107/0x167 [ 1743.042436] should_fail.cold+0x5/0xa [ 1743.042825] ? create_object.isra.0+0x3a/0xa20 [ 1743.043309] should_failslab+0x5/0x20 [ 1743.043709] kmem_cache_alloc+0x5b/0x310 [ 1743.044125] ? mark_held_locks+0x9e/0xe0 [ 1743.044559] create_object.isra.0+0x3a/0xa20 [ 1743.045028] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1743.045562] kmem_cache_alloc_trace+0x151/0x320 [ 1743.046056] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1743.046567] __list_lru_init+0x44d/0x890 [ 1743.047002] alloc_super+0x8b8/0xa90 [ 1743.047394] ? fput+0x20/0x20 [ 1743.047716] sget_fc+0x13e/0x750 [ 1743.048070] ? set_anon_super+0xc0/0xc0 [ 1743.048478] ? rpc_kill_sb+0x1b0/0x1b0 [ 1743.048875] get_tree_keyed+0x55/0x210 [ 1743.049278] vfs_get_tree+0x8e/0x300 [ 1743.049668] __do_sys_fsconfig+0x8da/0xc20 [ 1743.050115] ? fscontext_read+0x310/0x310 [ 1743.050541] ? fput_many+0x2f/0x1a0 [ 1743.050939] ? __secure_computing+0x199/0x2f0 [ 1743.051420] do_syscall_64+0x33/0x40 [ 1743.051798] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1743.052326] RIP: 0033:0x7fef23554b19 [ 1743.052717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.054566] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1743.055357] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1743.056078] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1743.056802] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.057535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1743.058266] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1743.060737] audit: type=1326 audit(1710339121.202:4631): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11967 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1743.066382] audit: type=1326 audit(1710339121.202:4632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11967 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1743.066491] EXT4-fs (loop5): inodes count not valid: 65535 vs 32 [ 1743.072264] audit: type=1326 audit(1710339121.204:4633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11974 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1743.078089] audit: type=1326 audit(1710339121.204:4634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11974 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1743.082453] audit: type=1326 audit(1710339121.205:4635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11974 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1743.088422] audit: type=1326 audit(1710339121.205:4636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11974 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:12:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x48000000) [ 1743.095621] audit: type=1326 audit(1710339121.205:4637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11974 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:12:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa00000000000000) 14:12:01 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x101000, 0x46) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1743.128797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 14:12:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 37) 14:12:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1743.189571] FAULT_INJECTION: forcing a failure. [ 1743.189571] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.190578] CPU: 0 PID: 12003 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1743.191141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1743.191808] Call Trace: [ 1743.192030] dump_stack+0x107/0x167 [ 1743.192324] should_fail.cold+0x5/0xa [ 1743.192639] ? create_object.isra.0+0x3a/0xa20 [ 1743.193007] should_failslab+0x5/0x20 [ 1743.193313] kmem_cache_alloc+0x5b/0x310 [ 1743.193645] ? mark_held_locks+0x9e/0xe0 [ 1743.193984] create_object.isra.0+0x3a/0xa20 [ 1743.194341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1743.194753] kmem_cache_alloc_trace+0x151/0x320 [ 1743.195139] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1743.195534] __list_lru_init+0x44d/0x890 [ 1743.195867] alloc_super+0x8b8/0xa90 [ 1743.196171] ? fput+0x20/0x20 [ 1743.196425] sget_fc+0x13e/0x750 [ 1743.196698] ? set_anon_super+0xc0/0xc0 [ 1743.197021] ? rpc_kill_sb+0x1b0/0x1b0 [ 1743.197334] get_tree_keyed+0x55/0x210 [ 1743.197654] vfs_get_tree+0x8e/0x300 [ 1743.197958] __do_sys_fsconfig+0x8da/0xc20 [ 1743.198305] ? fscontext_read+0x310/0x310 [ 1743.198642] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1743.199092] ? __secure_computing+0x199/0x2f0 [ 1743.199468] do_syscall_64+0x33/0x40 [ 1743.199766] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1743.200184] RIP: 0033:0x7fef23554b19 [ 1743.200490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.201944] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1743.202553] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1743.203121] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1743.203677] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.204230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1743.204800] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:12:01 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) [ 1743.223092] EXT4-fs (loop5): inodes count not valid: 65535 vs 32 14:12:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4c000000) 14:12:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1000000000000000) 14:12:01 executing program 7: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012abd7000fbdbd7250f00000005030000000000000000000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8014) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffff) clock_gettime(0x0, &(0x7f0000002bc0)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f0000002a00)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/187, 0xbb}], 0x3, &(0x7f0000001440)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001580)=""/174, 0xae}, {&(0x7f0000001640)=""/23, 0x17}, {&(0x7f0000001680)=""/113, 0x71}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001740)=""/22, 0x16}, {&(0x7f0000001780)=""/105, 0x69}, {&(0x7f0000001800)=""/113, 0x71}, {&(0x7f0000001880)=""/4, 0x4}, {&(0x7f00000018c0)=""/123, 0x7b}, {&(0x7f0000001940)=""/98, 0x62}, {&(0x7f00000019c0)=""/189, 0xbd}, {&(0x7f0000001a80)=""/207, 0xcf}, {&(0x7f0000001b80)=""/160, 0xa0}], 0x9, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001e80)=""/84, 0x54}, {&(0x7f0000001f00)=""/198, 0xc6}, {&(0x7f0000002000)=""/116, 0x74}, {&(0x7f0000002080)=""/91, 0x5b}], 0x4, &(0x7f0000002140)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002240)=""/147, 0x93}], 0x1, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002400), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002480)=""/18, 0x12}], 0x1, &(0x7f0000002500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f00000025c0)=""/200, 0xc8}, {&(0x7f00000026c0)=""/164, 0xa4}, {&(0x7f0000002780)=""/57, 0x39}, {&(0x7f00000027c0)=""/130, 0x82}, {&(0x7f0000002880)=""/188, 0xbc}, {&(0x7f0000002940)=""/52, 0x34}], 0x6}}], 0x7, 0x100, &(0x7f0000002c00)={r4, r5+10000000}) perf_event_open(0x0, r6, 0x4, r3, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000002c40)=0x200) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x1e, 0x40, 0x5, 0x0, 0x7, 0x98, 0xf, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0xb}, 0x40505, 0xb5e, 0x2, 0x5, 0x0, 0x1, 0xfff, 0x0, 0x253, 0x0, 0x4}, r1, 0x8, 0xffffffffffffffff, 0xb) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r0, r8, 0x0, 0xffff) 14:12:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="000000000000000000000a0000007f0fbce1e788a6833f66dc4b71075fafa80935f2eab907bd92b135e66b62461c6cc3d4f516f5de107120d4e901d358060c47dc9c2e29c9fd9b2c9f23fe46b2e1cabdba1884e90d477246b61b91c93d38"], 0x14}}, 0x0) 14:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}, 0x10) socket$unix(0x1, 0x2, 0x0) 14:12:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x6, 0xff, 0x1, 0x5, 0x0, 0x5, 0x1, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x53e4, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0x1864, 0x3, 0x4, 0x5, 0x3, 0x8, 0xfff7, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x10, r0, 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x208101, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0xb3, 0xc0, 0x5, 0x0, 0x260b, 0x30000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_config_ext={0x6, 0x6}, 0x800, 0x5, 0x7fff, 0x0, 0x3, 0x0, 0x4, 0x0, 0x401, 0x0, 0x7ff}, 0xffffffffffffffff, 0xb, r2, 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0xffff) 14:12:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 38) 14:12:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:12:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x68000000) 14:12:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x2000000000000000) 14:12:16 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) syz_io_uring_setup(0x542f, &(0x7f0000000380)={0x0, 0x1228, 0x20, 0x3, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x542f, &(0x7f0000000240)={0x0, 0x1228, 0x10, 0x3, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_submit(r2, r4, &(0x7f0000000040), 0xfff) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r6 = syz_io_uring_complete(r2) io_uring_setup(0x67d5, &(0x7f0000000180)={0x0, 0x4d75, 0x4, 0x3, 0x315, 0x0, r6}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, r5}}, 0x1) [ 1757.942919] kauditd_printk_skb: 73 callbacks suppressed [ 1757.942930] audit: type=1326 audit(1710339136.113:4711): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12031 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1757.947419] audit: type=1326 audit(1710339136.116:4713): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12032 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1757.949361] audit: type=1326 audit(1710339136.117:4714): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12032 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1757.967209] FAULT_INJECTION: forcing a failure. [ 1757.967209] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.969299] CPU: 1 PID: 12038 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1757.970462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1757.971844] Call Trace: [ 1757.972331] dump_stack+0x107/0x167 [ 1757.972938] should_fail.cold+0x5/0xa [ 1757.973590] ? create_object.isra.0+0x3a/0xa20 [ 1757.974369] should_failslab+0x5/0x20 [ 1757.975012] kmem_cache_alloc+0x5b/0x310 [ 1757.975706] ? mark_held_locks+0x9e/0xe0 [ 1757.976415] create_object.isra.0+0x3a/0xa20 [ 1757.977152] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1757.978007] kmem_cache_alloc_trace+0x151/0x320 [ 1757.978795] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1757.979639] __list_lru_init+0x44d/0x890 [ 1757.980354] alloc_super+0x8b8/0xa90 [ 1757.980975] ? fput+0x20/0x20 [ 1757.981509] sget_fc+0x13e/0x750 [ 1757.982086] ? set_anon_super+0xc0/0xc0 [ 1757.982755] ? rpc_kill_sb+0x1b0/0x1b0 [ 1757.983428] get_tree_keyed+0x55/0x210 [ 1757.984109] vfs_get_tree+0x8e/0x300 [ 1757.984738] __do_sys_fsconfig+0x8da/0xc20 [ 1757.985464] ? fscontext_read+0x310/0x310 [ 1757.986171] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1757.987101] ? __secure_computing+0x199/0x2f0 [ 1757.987858] do_syscall_64+0x33/0x40 [ 1757.988508] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1757.989369] RIP: 0033:0x7fef23554b19 [ 1757.989987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1757.993061] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1757.994355] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1757.995565] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1757.996780] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1757.997987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1757.998494] audit: type=1326 audit(1710339136.118:4715): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12032 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1757.999205] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1758.008328] EXT4-fs (loop5): inodes count not valid: 65535 vs 32 14:12:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6c000000) [ 1758.020479] audit: type=1326 audit(1710339136.119:4716): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12032 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1758.036555] audit: type=1326 audit(1710339136.114:4712): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12031 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1758.048735] audit: type=1326 audit(1710339136.121:4717): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12031 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1758.058386] audit: type=1326 audit(1710339136.121:4718): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12031 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1758.081130] audit: type=1326 audit(1710339136.124:4719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12033 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1758.088497] audit: type=1326 audit(1710339136.125:4721): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12033 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:12:16 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000a99bd7f4655f000000000000000001000000bddb8e8f22054275", 0x5a, 0x4}, {&(0x7f0000010400)="030000000400000015000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xbfe}, {&(0x7f00000003c0)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x542f, &(0x7f0000000240)={0x0, 0x1228, 0x10, 0x3, 0x243}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {0x1}}, './mnt\x00'}) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r4, 0x80, &(0x7f0000000180)=@llc={0x1a, 0x308, 0x7, 0x81, 0x81, 0x9f, @remote}, 0x0, 0x0, 0x1}, 0x2) openat(r1, &(0x7f0000000140)='./mnt\x00', 0x268a81, 0x3) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:12:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 39) [ 1758.167512] FAULT_INJECTION: forcing a failure. [ 1758.167512] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.169379] CPU: 1 PID: 12057 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1758.170516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.171908] Call Trace: [ 1758.172352] dump_stack+0x107/0x167 [ 1758.172959] should_fail.cold+0x5/0xa [ 1758.173597] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1758.174435] should_failslab+0x5/0x20 [ 1758.175069] kmem_cache_alloc_trace+0x55/0x320 [ 1758.175837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1758.176679] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1758.177494] __list_lru_init+0x44d/0x890 [ 1758.178177] alloc_super+0x8b8/0xa90 [ 1758.178588] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1758.178795] ? fput+0x20/0x20 [ 1758.179631] EXT4-fs (loop5): group descriptors corrupted! [ 1758.180117] sget_fc+0x13e/0x750 [ 1758.181105] ? set_anon_super+0xc0/0xc0 [ 1758.181771] ? rpc_kill_sb+0x1b0/0x1b0 [ 1758.182412] get_tree_keyed+0x55/0x210 [ 1758.183054] vfs_get_tree+0x8e/0x300 [ 1758.183683] __do_sys_fsconfig+0x8da/0xc20 [ 1758.184389] ? fscontext_read+0x310/0x310 [ 1758.185073] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1758.185970] ? __secure_computing+0x199/0x2f0 [ 1758.186720] do_syscall_64+0x33/0x40 [ 1758.187345] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1758.188183] RIP: 0033:0x7fef23554b19 [ 1758.188799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.191786] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1758.193029] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1758.194190] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1758.195357] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.196517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.197681] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:12:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000014c0)="a05e2acb4e8242183af563f8f54c711b752ae644c28c026fd8bdd6097e8f2d92c46e50be7cfa4f42e718567a78c420aaccae5907f66d31a9089a3f429e9ed629a7b0b5216ff4e72c3e5de40c0d49778447be08968736640a0fd69e", 0x5b}, {&(0x7f0000001540)="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", 0xfb}, {&(0x7f0000001640)="6b8518cb6be16693c1abd536097bd44096ed9f0a140ece4541df719af47b", 0x1e}, {&(0x7f0000001680)="3d8fa438d0d2b8672d368e9d54c572f97c5a787093377c8b0032d5780381fdfc658c9c8b2e844047c62b8d6318b1bc0010fe888264f6af5de01c73a0388019bdbef5061055aaa9", 0x47}, {&(0x7f0000001700)="c0b60f9df0ba1883315aed118ecdebb5049467083b433017c93b0f3aa3be969cd49ba6d4a0806983e02a30d7ef6694caffd33c1060ffa4cb39b2c1c3e2df77675848dd7487b3343cf4d764a1fd0e8f9b766fbd5139f72328464f1b4221c92272d22e5ca054751826a3aaf5f6ce7d8dc01e036879fda07cdcfbb617e5841a1de08899aa5b8a7cf6fffde68dae539ed1192f073e9cd20de159e14c5c5a74e159", 0x9f}], 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x8000}, 0x51) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0xffff) 14:12:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4000000000000000) 14:12:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x74000000) 14:12:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:12:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'bridge_slave_1\x00', &(0x7f00000003c0)=@ethtool_cmd={0x3a, 0x9, 0x2, 0x34, 0x7, 0x4, 0x1, 0x0, 0x20, 0x2, 0x476a, 0x800, 0x40, 0x7f, 0x1, 0x4, [0x3ff, 0xabc]}}) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0x8, 0x1, 0x7d, 0x0, 0x7, 0x801, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc62, 0x0, @perf_bp={&(0x7f0000000300)}, 0x20, 0xe2, 0x7ff, 0x3, 0x3, 0xbbfa, 0xff, 0x0, 0x2, 0x0, 0x3f}, 0x0, 0x1, r1, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x210000, 0x84) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000180)) mq_timedsend(r3, &(0x7f0000000140), 0x0, 0x2, &(0x7f00000001c0)={0x0, 0x3938700}) r4 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) mq_open(0x0, 0x0, 0x0, 0x0) 14:12:16 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x108}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r3) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'rose0\x00', &(0x7f0000000380)=@ethtool_coalesce={0x0, 0x1, 0x6, 0x1, 0x0, 0xfffff7c5, 0x4, 0x9, 0x1, 0x0, 0x9, 0x7, 0x9, 0xffffff8a, 0x10001, 0x80000000, 0x3f, 0x1215, 0x1, 0x4, 0xad, 0xffffffff, 0x3}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) syz_io_uring_setup(0x205b, &(0x7f0000000100)={0x0, 0xd3f6, 0x20, 0xfffffffd, 0x2cd, 0x0, r5}, &(0x7f0000e8d000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000340)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wlan1\x00'}) [ 1758.254851] 9pnet: Insufficient options for proto=fd 14:12:16 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80400, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x10, 0x0, 0x40, 0x0, 0x5e, 0x4802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="04000078bb270e6664619f00f60c57d484f2da992cca843d49ef61e2929af0e250", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0xee00, @ANYBLOB="e9ff8d8efd8264de00b09ff2a40a79ac518a3398000000000000000000", @ANYRES32=0x0, @ANYBLOB="10000400000000002000000000000000"], 0x5c, 0x0) 14:12:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 40) [ 1758.328745] FAULT_INJECTION: forcing a failure. [ 1758.328745] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.329817] CPU: 0 PID: 12079 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1758.330423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.331147] Call Trace: [ 1758.331390] dump_stack+0x107/0x167 [ 1758.331706] should_fail.cold+0x5/0xa [ 1758.332034] ? create_object.isra.0+0x3a/0xa20 [ 1758.332435] should_failslab+0x5/0x20 [ 1758.332766] kmem_cache_alloc+0x5b/0x310 [ 1758.333132] ? mark_held_locks+0x9e/0xe0 [ 1758.333496] create_object.isra.0+0x3a/0xa20 [ 1758.333881] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1758.334323] kmem_cache_alloc_trace+0x151/0x320 [ 1758.334737] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1758.335168] __list_lru_init+0x44d/0x890 [ 1758.335523] alloc_super+0x8b8/0xa90 [ 1758.335852] ? fput+0x20/0x20 [ 1758.336121] sget_fc+0x13e/0x750 [ 1758.336411] ? set_anon_super+0xc0/0xc0 [ 1758.336754] ? rpc_kill_sb+0x1b0/0x1b0 [ 1758.337088] get_tree_keyed+0x55/0x210 [ 1758.337430] vfs_get_tree+0x8e/0x300 [ 1758.337756] __do_sys_fsconfig+0x8da/0xc20 [ 1758.338135] ? fscontext_read+0x310/0x310 [ 1758.338504] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1758.338984] ? __secure_computing+0x199/0x2f0 [ 1758.339401] do_syscall_64+0x33/0x40 [ 1758.339721] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1758.340173] RIP: 0033:0x7fef23554b19 [ 1758.340513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.342145] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1758.342800] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1758.343418] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1758.344036] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.344646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.345268] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:12:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4800000000000000) 14:12:30 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) fallocate(r1, 0x60, 0x8, 0x6) creat(0xfffffffffffffffc, 0x4b) lstat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x210200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 14:12:30 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 41) 14:12:30 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:12:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack\x00') inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x80000000) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r2, r0, 0x0) 14:12:30 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/131, 0x83}, {&(0x7f0000000140)=""/76, 0x4c}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xe0}}], 0x1, 0x20000000, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000340)={0x834, 0x2d, 0x100, 0x70bd2a, 0x25dfdbff, {0x9}, [@nested={0x204, 0x73, 0x0, 0x1, [@typed={0xcb, 0x3c, 0x0, 0x0, @binary="32a64dc7cadf7c24ee4468ff92b1fe8a83f100a354ad48ea2ad126bd769e6f296d225b9e039f57f7652470610fa6a7ac34806d533cb564a50d4f2cf51cc28f26707a0e300253c4ed0b4ec8bdea4ab607fbbbbe64fc64d7a0675844018b76bac42e0c3001fd3c48a363c82d1a6e8d18a82781cb7adf0c7ad99b302d4cbaeca7a9728716c65cb709890cd73a26a4266a0e279677cf1da34530902aa5afd90fa15bd7f44347b044469fe344245d14a1bd9bee12f2f472a4459c6da79b87bdb0cb12e9eea695aafa71"}, @generic="8d2595889fefaa4a12d873fe3a8f8745b4e2451df58a6092ba51cb72d38823e3b9f874a030aee5f536f879c6763292fa9eb3b45b55f3d746094cf3287e28472c951c0d10abc1f0ab0452c5a6ea8e185ae03e5c5a50bf2884eef2ef6790", @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast1}, @generic="f907cca9609fa9baba16b50a5fc3990b1931973e7b55f38d47fffd0bfb0da6ca1e6f7cbe1b6c5fc27c182f5210506dd237203353fa08b3b7e467ce34d07f9a2ccc6e67dac965eae4a6e98f5c3573f35850e44e054ef54d3ef42a614c7ea1c5c3bfa2d171b5c7e98f00888a333d1a6b268865801ae53a6122d1b5e05cff533a554dab7dbad0ae53d69e787f97a54ab6e02caf6eb0d6206a6d5ea53271cbec1b0a325577748df39af15907ace37b1258d45ee54135bd0442c861150b50935c5b22c934e12f6a5eb0b5ce1dc08849c1f4"]}, @typed={0xc, 0x67, 0x0, 0x0, @u64=0x7}, @typed={0xa, 0x60, 0x0, 0x0, @str='\\,^)&\x00'}, @nested={0xe2, 0x6d, 0x0, 0x1, [@typed={0xa3, 0x50, 0x0, 0x0, @binary="dec7ae1f8094e3a447a7dc108542879ada0ec9dd8720fbea321e022dbda5ef50c3206ddc9afa7a3ff8f497d1c32375d612826b6e8bc8e5bf9d2d7e0e8276996a52f92644c0db804384450011957465c74d242db5106bac138c7c8c1c28bcc2a44d6584ee0bdd82c36a8af1f6d5a9696e52d3b31ca4a3b6038368190ad378d6d4a219578c127fe5e70d796a5a587f93f2842402ea7b54f9f34558f99ddf9c1b"}, @typed={0x8, 0x3, 0x0, 0x0, @uid=r4}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@local}, @generic="2095608742a961bb4aaf44bd99e44502d8693d377f44c5622c4c0bbb92b6"]}, @generic="cc8fd4722d9252325ccbb9ce2f4cc7e6784a78e36c1aff4010eca45ccf8a620b7463edc258251554f13f2999aa9898dec66ad7dead2b315381070385085ae69a751c837b668801acc74a2f28c2b636cb83083aa888877f3fbd7db7943f78afb9e49d", @typed={0x43, 0x77, 0x0, 0x0, @binary="cf8272eb42e36fbd5d7cbe31758dff05d736cb5c7eb850a5be871ce670818b4018b89517c9ae65c82c1cb9f35c626a94d12be8fa28a38c383caceced05c6a2"}, @nested={0x277, 0x45, 0x0, 0x1, [@generic="35af84c65b4b4ad5099e291352994668d886caeafa03276d8f7a1b88537804329f415c4efb53e8a89e871a1f59b09ca9757b7cb82abb24d8cb1afa6512db596c8fc3cca9daad4b37576d32bb6c1d32f49f6b21bf8f05c5ead5e4fe", @generic="79f6bf6d6363b18147408abd", @generic="8f75bb6f4a8243e88876b52865e51014a5bd1f180f6ce54aa98ae36f8d13cb101a3027841aebfe2e42512d09bdee23dcba9128b748bea168e98636f84d77d7435f2a59518fb9b7a8ae7b6fa10f745e74d1408e924c81fe6db0f0f9c4590928af76e576366980485c7ccc6e132cb56c0bac499b81ed3854a4342233f16b276d7a813de26740ec583cb5daf0fd4df5a68e7f9f0aaa6959d50df665ceb49107147e0492b46db4956cd3d4b5a52d88311b97779b30e42d7fbd3053fdc54c2c954cf17c9d545b4be4dfc80912397fb863512c0277ec41a8bb1cff5104a7c5d066bc0ed66bbd3a75f26885ffe0c8f6fd6226cf632acba37f34d0", @generic="4c6b6cde6e5246", @generic="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", @typed={0x14, 0x7c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @nested={0x1fe, 0x12, 0x0, 0x1, [@generic="5d50fae60f58bdd5c6ab6ab44cfa", @generic="02657a83c32b2751b0c6c65a417705ed90bac853b5b8685390a8eca85896072df99d34cebb67c12662f4ec27b53344465dea73d1ab1fda4ca2c1c4a4add6386e0dd213e8a6112e0a4fbaf65dbabc9a77daddfe856a8e7e5d0fa50906c3bf0a1dc57e93ba1dd98cec5ee3671734502dc655508a61da979854b84a34d464e4", @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="8934bbe748049e659aaa4052658019680af379ea6c757b0f175282d23342c74040ab4759c5a2b42f02bb5e8390dd23b2a7e8e93f3fcc92e7aee01a2b568aeb9e54022b0f2168750272983aa72c5c47af2fd12c9a82d15d43c35cd3e7ae84abd41bce365010382b4bb9b5852d11d53d3b8fca74bd26ca523085b3b64c92e9c0a0ef752cb1263279bdc3bd684668175b5e47888628f05bdc135986c7e94d5da2976dd98d70e5882c0dcedc62e795b7f1c6", @generic="a66c36d5c19d4e507f3159cdca95364a76bd793bc9b2f6891a61a0c271f75db8593c74d400a516e440b19125d597cac2f33f4ec8877a64ec395ccbdc7965539fc3a4f0f712faf92d35d6109578455388ac7e130798ee2ca446547423a340da4f7960484c7302c80d74a841f378a02df75197dc3f388801b9adc96c15e820315284345868a4b5b1ffda321701ca9ce1c431377814d05a9d64eddbd0aa9f11dfce633f74d66ad6b9527225147903d475097fe19f7d8758"]}]}, 0x834}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000001780)={0x1f, 0x13, 0x2, 0xe5df}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup(r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r6, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x34}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4044800) 14:12:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7a000000) 14:12:30 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)=""/40, 0x28}], 0x4, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}], 0x1, 0x0, &(0x7f0000000600)={0x0, 0x989680}) openat(r1, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x10, &(0x7f0000000700)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x76}}], [{@euid_lt={'euid<', 0xee01}}]}}) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1772.609276] kauditd_printk_skb: 79 callbacks suppressed [ 1772.609297] audit: type=1326 audit(1710339150.779:4800): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12090 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1772.617524] audit: type=1326 audit(1710339150.786:4801): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12090 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1772.629669] audit: type=1326 audit(1710339150.787:4802): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12090 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1772.634197] FAULT_INJECTION: forcing a failure. [ 1772.634197] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.636512] CPU: 1 PID: 12092 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1772.637789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.639305] Call Trace: [ 1772.639795] dump_stack+0x107/0x167 [ 1772.640479] should_fail.cold+0x5/0xa [ 1772.641197] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1772.642132] should_failslab+0x5/0x20 [ 1772.642840] kmem_cache_alloc_trace+0x55/0x320 [ 1772.643713] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1772.644644] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1772.645556] __list_lru_init+0x44d/0x890 [ 1772.645724] audit: type=1326 audit(1710339150.787:4803): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12090 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1772.646301] alloc_super+0x8b8/0xa90 [ 1772.650254] ? fput+0x20/0x20 [ 1772.650765] sget_fc+0x13e/0x750 [ 1772.651332] ? set_anon_super+0xc0/0xc0 [ 1772.651987] ? rpc_kill_sb+0x1b0/0x1b0 [ 1772.652620] get_tree_keyed+0x55/0x210 [ 1772.653243] vfs_get_tree+0x8e/0x300 [ 1772.653855] __do_sys_fsconfig+0x8da/0xc20 [ 1772.654537] ? fscontext_read+0x310/0x310 [ 1772.655201] ? fput_many+0x2f/0x1a0 [ 1772.655811] ? __secure_computing+0x199/0x2f0 [ 1772.656583] do_syscall_64+0x33/0x40 [ 1772.657176] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1772.658002] RIP: 0033:0x7fef23554b19 [ 1772.658596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.658938] audit: type=1326 audit(1710339150.788:4804): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12090 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1772.661569] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1772.661592] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1772.661604] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1772.661616] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.661628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.661649] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1772.698587] audit: type=1326 audit(1710339150.804:4805): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12090 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1772.704819] audit: type=1326 audit(1710339150.848:4806): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12098 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1772.708705] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1772.710321] EXT4-fs (loop5): group descriptors corrupted! [ 1772.714532] audit: type=1326 audit(1710339150.849:4807): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12098 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1772.719715] audit: type=1326 audit(1710339150.851:4808): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12098 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1772.725011] audit: type=1326 audit(1710339150.855:4809): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12099 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:12:30 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x200002, &(0x7f0000000200)=ANY=[]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup2(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300), 0x40, &(0x7f0000000340)={[{@subsystem='cpuacct'}, {@subsystem='cpuacct'}, {}, {@memory_recursiveprot}, {}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000140)='./mnt\x00', 0x200000, 0x125) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x10000000}}, './file0\x00'}) 14:12:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4c00000000000000) 14:12:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x8cffffff) [ 1787.810441] kauditd_printk_skb: 21 callbacks suppressed [ 1787.810453] audit: type=1326 audit(1710339165.979:4831): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12130 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1787.812702] audit: type=1326 audit(1710339165.979:4832): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12130 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1787.819746] audit: type=1326 audit(1710339165.989:4833): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12130 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1787.828914] FAULT_INJECTION: forcing a failure. [ 1787.828914] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.829839] CPU: 0 PID: 12140 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1787.830378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1787.831019] Call Trace: [ 1787.831235] dump_stack+0x107/0x167 [ 1787.831553] should_fail.cold+0x5/0xa [ 1787.831864] ? create_object.isra.0+0x3a/0xa20 [ 1787.832238] should_failslab+0x5/0x20 [ 1787.832551] kmem_cache_alloc+0x5b/0x310 [ 1787.832877] ? mark_held_locks+0x9e/0xe0 [ 1787.833214] create_object.isra.0+0x3a/0xa20 [ 1787.833564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1787.833980] kmem_cache_alloc_trace+0x151/0x320 [ 1787.834362] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1787.834761] __list_lru_init+0x44d/0x890 [ 1787.835097] alloc_super+0x8b8/0xa90 [ 1787.835405] ? fput+0x20/0x20 [ 1787.835678] sget_fc+0x13e/0x750 [ 1787.835955] ? set_anon_super+0xc0/0xc0 [ 1787.836283] ? rpc_kill_sb+0x1b0/0x1b0 [ 1787.836605] get_tree_keyed+0x55/0x210 [ 1787.836924] vfs_get_tree+0x8e/0x300 [ 1787.837232] __do_sys_fsconfig+0x8da/0xc20 [ 1787.837593] ? fscontext_read+0x310/0x310 [ 1787.837931] ? fput_many+0x2f/0x1a0 [ 1787.838236] ? __secure_computing+0x199/0x2f0 [ 1787.838611] do_syscall_64+0x33/0x40 [ 1787.838914] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1787.839331] RIP: 0033:0x7fef23554b19 [ 1787.839652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1787.841127] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1787.841742] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1787.842310] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1787.842886] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1787.843470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1787.844045] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1787.846112] audit: type=1326 audit(1710339165.990:4834): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12130 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1787.848039] audit: type=1326 audit(1710339165.990:4835): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12130 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1787.855013] audit: type=1326 audit(1710339165.997:4836): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12139 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:12:45 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3, 0x3f, 0x1, 0x7f, 0x0, 0x5, 0x10480, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x1000, 0x800, 0x80000000, 0x5, 0x0, 0x3, 0x7, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x1, r0, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) 14:12:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$sock_netdev_private(r1, 0x89f7, &(0x7f0000000040)="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") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffff) 14:12:45 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x8000000000800}, {&(0x7f0000000480)="ff23ffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5dec7d608b05d56d4eee16ffffffffffffffffffffffffffffffffffebb568db2a4d0bf12f9f714557ce700cf41ca4b7454e2d70ef6436644f976a26f5767cba4a7b8a302d117ee034421ad8e8a6b7425715f4558642bebed01b95e23b07c42e23556ce79adf96c969382c37cc05725181bc0485812633dcdc16543932299f69509c70f4594116ca8944694ec287dd69ec8703faef1afcd9a0b30057fcc20a061ced17492c4982bcd212abb41cb7a015ee477291935404f7375b0321e0ce40f74f33836fcda8cd51b380cbe468c1c233cc323513b3373f2bbe208043", 0x4cd, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1604}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1787.860480] audit: type=1326 audit(1710339165.997:4837): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12139 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:12:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 42) 14:12:45 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x2, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)='+', 0x1}]) r2 = eventfd(0x2) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000000)="afb9aa06b248f2b9430e2a4932b44ff3d40d398a10c01baad6046ad49fe7444ba3c55e0db8476fd3ef", 0x29, 0x8, 0x0, 0x1}]) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x20000003) clock_gettime(0x6, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8000) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x6) unshare(0x48020200) syz_io_uring_setup(0x1659, &(0x7f0000003380)={0x0, 0x0, 0x2, 0x1, 0x174}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000), &(0x7f0000003400)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003600000008000300", @ANYRES32=r8, @ANYBLOB="4f8079fd97a7b6637c4b0abe71cbebf3817ccc57767642f7143705ac7afa"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x80) 14:12:45 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1787.866449] audit: type=1326 audit(1710339165.998:4838): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12139 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1787.869586] audit: type=1326 audit(1710339165.998:4839): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12139 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1787.880005] audit: type=1326 audit(1710339165.998:4840): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12139 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 14:12:46 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1787.905673] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1787.906536] EXT4-fs (loop5): group descriptors corrupted! 14:12:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xa1ffffff) 14:12:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 43) 14:12:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1787.976940] FAULT_INJECTION: forcing a failure. [ 1787.976940] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.977997] CPU: 1 PID: 12161 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1787.978581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1787.979253] Call Trace: [ 1787.979491] dump_stack+0x107/0x167 [ 1787.979796] should_fail.cold+0x5/0xa [ 1787.980133] ? create_object.isra.0+0x3a/0xa20 [ 1787.980506] should_failslab+0x5/0x20 [ 1787.980826] kmem_cache_alloc+0x5b/0x310 [ 1787.981169] ? mark_held_locks+0x9e/0xe0 [ 1787.981506] create_object.isra.0+0x3a/0xa20 [ 1787.982034] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1787.982570] kmem_cache_alloc_trace+0x151/0x320 14:12:46 executing program 4: r0 = clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x14, 0x14, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x3b, &(0x7f00000018c0)={0xc, 0x35, 0x6}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/nfsfs\x00') getpriority(0x1, r0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000100000101000001000808001800000000000018", 0x82, 0x8000}, {&(0x7f0000000040)="ff4344303031", 0x6, 0x6}], 0x0, &(0x7f0000001580)=ANY=[]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f00000017c0)=0xe8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3f, 0xa, &(0x7f00000015c0)=[{&(0x7f0000000240)="beff801084c120b286dc1c2fb040392f7a47ff7e11b62453a30e9797a4012b3130b4148575914d5e1db62db1df66ca5968b87a488ba78b70d95c0a8e71d504a2658301e911ed55f754253ba9b1f15c164488c0d139d3be46e339654774027b580d8705bda30d3ddb4058c9b46c59104a8d5531a9fc5180d99a81cf28c5358e97073ed675d106b657fafed24677deb89fad22a483386f9b2ace5a2fe52192a64dc31f603718b230739ee27e48588e5635eccb6d1a1b21e280aef601c7b616673225bf", 0xc2, 0x10000}, {&(0x7f0000000140)="5415a314a95958462adffa503e23978c85b1ef850e1014a9285563b701180438fac02f0bbdf998264aa0ef28276d479249a9d98d98dc00f8933abb121114d9a9a13ecc6e36b1baade82939e5ae582a085a516f1e775ff2e585a5e56bfa487a47", 0x60, 0x8}, {&(0x7f0000000340)="f7b960828d70629f04d47731bbd44a68d8f91e557a08a7e7015f76ed592792eefd519eec0689d4f613b26ac7f759e07fa8cc8f169b55655b64eca9c1b82596ce2950014c508bbec111383dfd95f20fb4b1360abacefcf067d07279168d4eced9132fcc2374f6c7e5e063d1da308777f166b2b3e025408970521aac6a9cbee9f02e3c6bad0245d29073e6e15b435c78427ce088c11f0d1917493ebfaa1c660c4b72152840ea9f9908997b04", 0xab, 0x100}, {&(0x7f0000000400)="9caf33936693173d3b97270cc799a9594d6d852ab3fe565eff89a21adbf98cd2a51860d626d5748fa268e4a08eb18aeecf1eb6dec999f8685ccfdcbbf63b9e78536bfbd2673329ae58c230869f58044a06c7407195a0ec3a72f70f41ffd9ff98afb5f375ee2e1110c6e775460ef160beb43e46a6158f160eb0182612fe8212bf9f8d66f126c3f3a3f672a1e0feba83b3693f64fcf309eed4f2e9d9aa539fe24faa6e41eb73f19e0757fdab8afc3dde952ba758faf641477db8f3d2d0c2241c211bc91b028e92552df1750f37c39f867127097aefb8c61c28c3aa46efaed249a989439e9b44e03ff1a5d1b2aaec7832099bba8ee83f0f734e4223a5e3c0431cdf98e49e6c4f1159bc6ea73efb378a6a19a86b0963788826bd8afeb68744e04cd9cceb4f03730b8cac94ec540f34f61b6e53540e619eddebdcc1c827b6e6c30238ddd5ea1633df3c0c12b52722e5d535eeb6760287571822aebc69d6d9aef4bbbb4b1ecb786b55cff7f76b8f368b9fc827c01cfd85bf98079fa9a3e76dda49ad73d0c917f047535b854561d2d4fb27bcf86df7b86e4c7732121b56658665a39feeaeb2baab17dc61ae377195d064b3226fc00d0e46bfea235adca16683831b92589ed38f5a596c2ea0a54be2d022611123abf0bf2eb5f85a4c87d1f4b80452b622c78c64dfdc6187d54d5979703fb01e9a344704b0d481ddd4e4b58564e0f63300058b215e5bb925019d11fcb8128d6791d55fc97ed020ec8944e598a5aeea6a8f5a31db5b7d25f2c27c74efe5c4b08d4e1f9f7bc3ea5566d0090c2ed1f0bcb73a7b6d6c58a05e870843cd139acc0f04edd777dd849138ae37296a69791d6353d29eea0a691b6f565e46e4759d73574e0829d1487f77c2b4cf809a856a2f18726e4020f3235a3327a9088d44761f64387c9187a8e08940bcb854211cc80f9a9f0f6368c91fa175258bd44cdc04de69eea5b6ee234f4b0417d3a546b394a9634cd225b383fc74d1fbe94251e87475e4da4797e579a4e9707bdfb9cb5ee0523520b0b011e1e6f2a89c50be29b1f272870620612b8957e9ca367abe2703cc1022ffc908753277a1738934d28f3f81a2be8c5ea85e8517a0a337def56fe1bfdd2eaf835af1615811254eddfe531d5b45345c9198d42193229a4db56dc3639eb70d591791bd3bc0a329470ca1bcb71b4922c552f50a55ac6714acc92be8b0d4dee8ef9cd176e42d96ebf51cde6766a103877cfb3da74d82f1412de05dfd6cba7dc0311af478d4bc8a046e48bbd5a9b9604b86c5c34f8291014610e97130432a39229c15517c9edbc0c64dcf6d7c44029e4589568665f02138c424e2f4aa258bf89a253ac381678fa41bfb0f3e347c3f34728b0def223842957b70a48c2abfc3be2257aa11aed5c1f845f5c0408ba05a070f2d8ea768802d5d24bab7a723af17961176b4d21bd6a0344a786dec53f767803391bfd716bcf262c4cd65d63813c29d35172a3237b9df84cf44dc2ad7400420ee515b731a1f16516b72d6aff20b21aefb57231efdb4fdf5aa6f9b0fe634a34fd6a78d5e966d0f4281fe2cc1262097117c23cbdd1769b1668d164ada28a1c362457ac4fb9bf5b44d83743902770d148b6e17d62d1903caa7e404a9544de2306a0b0f50ba703cbe11f1d47855eaa69a75188602322fa723f0884e53b785ca0f3a3d10748d2f0130146efd7639d7f56266f117274090cf0b908e236ac66a4899e347a34e0b0c01de5259eb7ca9c39fac57a6e1cb2ee2469276bd247931d1a0df27f69fe931ba8f5f01b4fd4ae25d53b0f4a71e90f6718722a383b08e0384288e8184b62ca2f66b22a54c1d1db49fe8a1cbcd05b6735b1330c35dae10b7bfad88a7777cae0fabdba34fffaefda888b79239419e026c550012bfedbc31ff61e57da8b41bb84fa7559dc72b242ec213b345c54e9fb003910d0f83cbb6d1bb00a8c2569ddbcc29632f09559d6c0bb9bce77ef211c9d4b65df406da9c60738c1fd35249e8ffb0ab4ead2565f59a716db8eb9a3dc422a00df530dfe859fd75340c05f0bd3b6a7b0c88dc0f379c527a3c6859a8f829dae2ea715c971b098bdcde9f78f9eae3ed54ce8e12c04cbd6e80673224c559146197c7e0c98be2c0a1a751537d00f7de6ca41ab07447d987a696a975fcda02c30cf066cf964f254f836bc62760f2f57dfda4f6e692c0e7c765a43929102128a7be7aae0a86103ea05b5c5231df1c1456daf4d9ab9ea9ac34023a3a77826caaff218e5de56dd3e845c0ef8848e2bfa266cf466bed835d3679a56455af787b8f1f68eed4264889e740991182ba7b3378570e77c7bf8370d351318d0acfc346f76ec80d03e342b3d9997996e3fac1086c446c3cefd57445724c730f669840814da00b1ead604ca2d0d490a958a25b3a70e55180377b057261e685be9c54a4176ce0064892763a429c4de62da2dd2bbbee72eed57ddf25aa1a8f428d53ebb3046702ba1b6ed259baa45167c3cd4a628fd168641c08049fda7db639f791f8edf3187ee09fd4c1d464d028da5d1b738436171238992067ffaabe23c5bd42bc89c6e40ca43e35c5f2234e0a312c0f81c3f368cbf5c986afe8d869291d0420f1de36c3f52108d71f3e1566d1ad330cdb57aa6349e95348ec446f88e68fa24ddcf9d666c0f7c6b7f30f26e1e708a9e87d3dfa00454b0be54048edd5055d4db06a5c46007e0e81d2dbf046cd8161e94cb8576abd741dd7b9df8691b28897211e9b8cfa490a46d992efe733332e7d72704b15e93569585bc502fd13cef40253bc0be8208910955511458a883e17b740be4516fbb548ac30abc17f8fdf0959a0ea8a5b1dcdb747a43271e600477b03cfad263dfdec67b2656a1bf7beaf3ec3d57bb9e4a053f309721238e387337a2c6d0497e8aa2e83f9ed28b1d10b0123a216c5751c7d5ff1f5230a7dff1bb349ffa35dbab574a9d16173cc48863fe0bd8a995f33471d08ca63bda94f3bca990bd06f589df1d614309a3cb94c67179c0d6756a808b55a6e703a4f23de3c6abe0c5156c9adceef546465eead4ab3f6ed468c42d3f99f65a1bec0fa156c50878e3161b07f8f87709cdb73e72d70849c7ad0bc9c60cf24026adf027abc26b26ed67277206a015a2e601950b1c6154d1eadd892d321e9c6a5089e582d810d8ce5536705840d373f607798875c1595b55ed970a4c110828b0e6a7d56b013ed75592959a03c9aab92c76139f4377aa7b7584cba8b6967eda88b9df8855fc6b6bdc7933fe81b78d6f35585a57441ee18ab456eb938c9c1a9af558b35cb8c6362f36e59e85145f3f1300af04ec7720330281aaaf5d7528e11be1c7663edcf4526022b90488058e3c2c319866de66bc1492ab881d203626745900a54f5cf6efd8db03740776b83ca2d3ecd6da6095bb72389fb8e83c993135373b2fcf9a29bb49f6d01001f739bc396ec0731968846a9fe45b9b1ab3681a15dc64b65bee44a076b85eb6d2803c877b879884c53324b6701963b556615c4fc63d8c1ef58e008a4d53b2e06b5827b505fe3c6ea54aa3d6dc9fb62ebb1b5b6ef697e40df861a5a3806db83df3b59f17967ed498287540f8f9a7f27e1c07abfd727a6dcd2a813862662daea86ca2dfcb47dd7def4f6534a62c4ca8cbc9693a42760f77d651bfa868679a1e95c25faf70fd8a5649d3865764de3f2d377b2893bcf4f0ffdc238f2fae4e9306f95aec48579cc0eaa8328c958eb3de5b16a531dfb11c862160c90e0f9a3a5d05e32ae3f07fa4ff0bf8d4de2f81fcf99b25ae28d31f8e7aa9ebe62c914d9b73e3c458d27274ec8c81d845d6d6fe33adf4ebe8bb8d3cf0bb4f4d195543296e4c8dec5811a8e1f9333da7b00fa9e966e8322f9d57facd02c12e7f887a3552aa36c5447a6bcdf72cb532c2555468d5258cc287592f85575efc58485aa4ec0aabe5189944d61344676d91b1c526d47cabca256539cd7bac09e6a5728850111364209569a59e0e5c0325606f6235ada9b738188c2199d4fe57a22df7d4c23d458efaa1ef3c21ba0dc67c16f15ed78101b3cd77b5900e70a799ae70fe1f4e97964c23c1c2c17ee23e762167137b66f6da19b417d2a21172c722257aba30988900ea90578f1526f95d2051de8bb81d1ce114fea3e176b7701b1a9a57bf458da465b133df29aab28812328f19bec86d4cc4501d1e9321ce0b6380ce53e81722db295e5656f963fe49c9592243a62b800157bc19d4ab1c8e481d3b09e87d04b6ef82b47a5c399645849da0ef97f8e01e25b79b39ffad8113acf32e57e4f26c7f0fa2dc05acd48e82dbbec61f7f71b0df1f7beef780234cace03910dc13fd9009c74b250a8107f57644e723a26b6ab5ad06813cc7e5ebdb01edd4898f4465fd62bffafd7a2873e4495eeaec9410d33278a919e535195cfa8790a0a5aa8a0f52f47b016f7bfb7b6b3f1617266e3699736047813e4ea1edca7d6c64b8d3fe9194b3d95cf7c85c848571dcba94a004ca1f653eb54d935c20e84f797f6ca828303b6085848b2384664116386da560e43b35acf27294ee6b4a423e7f7d03226b3d3df80b9b676706697f7a15a8246b769674aca18f07a96d0c3b33bf665f8a931ca42b2a4bb4b1fcff8f1d0dfd1c36f2bd5b2438ec7c5f900a52796513185adb8e25816bc12b7f0e487ff388898fa0303ad9337d3350c0e195800bcfdc7a056c98c6f4088dc87cd3d844e58ee97c5e73d3fd49e33e23572a1e6fe04357a85221e3e4eb0fb0c7f21c6047a8f90a99bc5199ba5647e577cff1719369a0ade734dc6b881e8344fefdce5e231dcc081e476c4f26376126db94e13538d6db200dcbe0cee98473abb1c3b8577bd8c96f9a294350d7425d909510448e1e5a60346cb2a7e99c5caacdafef728852924d3feb73a98707bc623941f2d92474b1bdc21c166ef379cd334ea666a13cc9347ce5ae7a35e6a424d2254f7f49b87ae23147cdaf15a72efdad9c1f5f3872233490dfb83e164b39c10c3f3a58a373b6ff28189763f6484aff89fa204b894accda8b9792220993eb7255cbde3a1220168b570957d398476da45ccb89b7ca4583d9d518fecdbb8828c85bc4979d17f0568d02c9e354cb788aecdca7a88f80b063f48de447405b02021a929aeac79f9d83f4ac17627ebebe18ba0923eb149470047f2866cd56a69d4a979a623c7f111b0b1356dcd432350c48ed7296215cacd6ab8dce0ec26936966bf015b073a7af835959ad52fede8f30c3974d5b0abd8428d77d454cc87d85da6235669ff2c93c7d0fe342e2ea7572fc7b82cdc1b54d7e44539ad8d43052bfd253b15e719d58446baa259935c99d1bda9a7d81c9fdabf3cf2a57acc5f7d269251c6db2eb2f6b8010b1acb3fd87e06e51abbf458762cecee489ef6cdd897b9f3be54d721ed88b95cb893c579eba0d6f379bf70dbd22e4a3819a3c238b74de7a0cf40f336474e6b40589333034a381ea6fa343041086949c970d648a1f00d61226acc3d959074889e329c907964f12ce70937ddbce19f9001f811c7e2bc792b987e185ed69f4dcba248bc44b927c39ff6d91432562df1057560089fcc32b580632463c1ba5fd5b6b0cc6fed57650f45d1b817bb0eda29007f72c5264371f407839970b7cb51b0c2f2792782b2c81a4d90df8e58a658dc1175f8adbfb513a46b49933eca999569672b71b3ebad6a02111a966d76d104545bfb0446395335f0cfde31ce80e16ea322a12198a8c09889fcbf581b72b52daa1f3d2b30edcaf612167760e1df8978a4bf343a647b188f3f87f0909289c2", 0x1000, 0xfffffffffffffff7}, {&(0x7f00000001c0)="618efe4035c6e2c5d3c6c9d2e73db83f13a8a85990a91ab52c3ad68e74a2a1", 0x1f, 0x5}, {&(0x7f0000001400)="f824e792a085396358d118", 0xb, 0xffffffffffffffe5}, {&(0x7f0000001440)="346cdb550a9c848b", 0x8, 0xbc02}, {&(0x7f0000001480)="815c60f6fda173c3e517711bf223dfe60ed4a6027b21835ed07bd0ff700bde30343d027f6d0912f12d3c4258e0bcef144d32cb6ac065f262406aba5422d8bebc879c6b5cdfe80e3a03f67d9af8c33a6baeee883383213a59347c6e4aedc2272d1b8df837f42fd76b682cae5f37d2e34e93d8d4fd6b78da97c97d0b7f4c91919e1b69401de4db17a5a3308d46e6af19f6ed744771e7a2e3af8572e1c071f03c5f5f1c714d42de2f8cbefadd4f8804", 0xae, 0x3ff}, {&(0x7f0000001540)="a679a2980c9e55284a92beb8334ca8e80ee3819f9203bb77610a17bd393bf91f6bd8cdace43ce1a83fe17a", 0x2b, 0x7f}, {&(0x7f0000001580), 0x0, 0xfffffffffffffffe}], 0x8004, &(0x7f0000002240)=ANY=[@ANYBLOB='nnonumtail=1,utf8=0,uni_xlate=1,shortname=win95,shortname=win95,fsmagic=0xfffffffffffffffd,euid<', @ANYRESDEC=r2, @ANYBLOB="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"]) utimes(&(0x7f0000001580)='./file0\x00', &(0x7f0000001800)={{0x0, 0xea60}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001940)={0x0, @l2={0x1f, 0x300, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x1}, @sco, @can={0x1d, 0x0}, 0x3, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000001840)='netdevsim0\x00', 0xfffffffffffffbff, 0x0, 0x445}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001880)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1c, r3}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x24}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001e00)={0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff7}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000019c0), &(0x7f0000001a00)='./file0/file0\x00', 0xfffffffffffffff7, 0x5, &(0x7f0000001c40)=[{&(0x7f0000001a40)="d6c210afb69ed0562015b855f36c99f2f2ce3f7f6d3fc2df2f344a1938f7ed37b6c432ab8dbec474a3", 0x29, 0x4000000000000000}, {&(0x7f0000001a80)="9181563ac9e1047509e407f93d42443aeaa7456158c63ed69a", 0x19, 0x3}, {&(0x7f0000001ac0)="e9e3df505e3655d7c8679eb6b0c487301e3445", 0x13, 0x7fffffff}, {&(0x7f0000001b00)="284c01a357eaf7dea4b1750137f21856da6290d361e173181ef19696a077d5734a0d7ae78b01d01df4854aa24c615cb01137384ab1d9", 0x36, 0x17}, {&(0x7f0000001b40)="f5fff0e0b0e449d454b6855cbbb69301e24ad8b4b7f6359252f2a32b7173249721dca2c287baec1f9e972c7e30cfab12a07854de7bb7c4f3ea4a72200f344e5bd8dc28a7130e2dfb2145dacc6386803c3e63aa39df65ca2392b0ce7395ae6dfb7d49e397d3bddc8927d110018720909db042ab9115b530049e51548a7fd468e35cb2421ee63ff29d008dd65d71648fb6dd698aea42a365dc0fbea407e4b3b93b810f88232ef0296f226349a1337b5f664d95f86c035d95a1f8ee28d1ab3b342eaf76d5ffe843f4092481d5a5de45a8d201691371a553b71b405947af19508a5a7fdf0929b1bcdebebe48b78e6cd210c0057ae67d", 0xf4, 0x100000000}], 0x800, &(0x7f0000001e40)={[{@utf8no}, {@nonumtail}], [{@seclabel}, {@audit}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.+.-*'}}, {@smackfsroot={'smackfsroot', 0x3d, 'syz]tu\x00\x00'}}, {@uid_lt={'uid<', r2}}]}) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x4000009}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) [ 1787.983142] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1787.983586] __list_lru_init+0x44d/0x890 [ 1787.983929] alloc_super+0x8b8/0xa90 [ 1787.984250] ? fput+0x20/0x20 [ 1787.984512] sget_fc+0x13e/0x750 [ 1787.984790] ? set_anon_super+0xc0/0xc0 [ 1787.985123] ? rpc_kill_sb+0x1b0/0x1b0 [ 1787.985443] get_tree_keyed+0x55/0x210 [ 1787.985765] vfs_get_tree+0x8e/0x300 [ 1787.986081] __do_sys_fsconfig+0x8da/0xc20 [ 1787.986434] ? fscontext_read+0x310/0x310 [ 1787.986767] ? fput_many+0x2f/0x1a0 [ 1787.987083] ? __secure_computing+0x199/0x2f0 [ 1787.987479] do_syscall_64+0x33/0x40 [ 1787.987787] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1787.988217] RIP: 0033:0x7fef23554b19 [ 1787.988530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1787.990019] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1787.990635] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1787.991215] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1787.991798] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1787.992380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1787.992948] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1788.034509] isofs_fill_super: bread failed, dev=loop4, iso_blknum=32, block=64 14:12:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:12:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6403000000000000) 14:12:46 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x4000010, 0xffffffffffffffff, 0x66f11000) 14:12:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xf6ffffff) [ 1788.084229] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 14:12:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a9b3803a", @ANYRES16=r3, @ANYBLOB="000326bd7000ffdbdf2501000000000000000941000000140018000008007564703a73797a3000000000f645105c6ba9e37ed745c4f6e68723ff75a700dcbd0fdbe6246845eadd6e47389032fa97e4eae99efe5ef9f396a23e814b4c591bf5c076138a6ea1a5863c859bbd89f3d6e939ad97bffc9aedd14ab11c11ac9013ff260de7d352d1ef9e865710d1d52f31829a61e471f8b4b7050000566c9ee1989c85655953e83f17cee26c0511551d407accedc2c96d2f0fca7bf779bdfc8132fc08390d6261e3630cb29def"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8880) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x200, 0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="04000000332306ae0b8cb28dd64c51ae2cef020000002e2f66014c653000c8dea97fecfa552de49275f3c0e07b046213b299e0f38bc5de017459d71a649fdeb9f10db169e7c828ab188cc38097c28755776f32f31da58279dafd1d6fc65a7cd268de2ab757b95d3db762b88d7a73c9bb2a4cd88b4746bf2a61a4c7d698c57fa76c58025ab0537294dc7decf74ffb5534410722944227ee0cd91e13533065f3be7e3241b56c3c6cbcfc732055d2fca71708000cf1a00927e6646825b2dac3beb336140ade870cb0bc0ebee7503ca956c81d89ed9063eb3ec0abc6f94f870319cb78bb76ff14241dd52696be9e4b63719cf52395c8d9361340562430b61b705ba0cd742a7205418b3942bd844f229a43ab1d945324b72ca2adf01e8a24df277f91f2d218cf4953b2663e9fcba657aa909065032fce0e30f67231adbee88c23a9752e0a8fa50b37cb41cca4471614fc"]) r5 = open(&(0x7f0000000380)='./file0\x00', 0x70200, 0x42) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x48800) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x4) r7 = dup2(0xffffffffffffffff, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) 14:12:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xfbffffff) 14:12:46 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) r1 = syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x6, 0x2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="b8e95c5efb4cecebef391c86dcb9bfca8c141bb832514e5dd4f650415a5e72360dfb1b9bc919b17316de2796161425e70b14c3dc6dc4327d48a39d3b7422e88e1dc406aa88bf74b20749600548e62e387b8aff7222d7245ce122cf3cd0a5cf00479fec4a863f9b30a3d9f7393e09a2fe6b4e5d81ba0bea81ea4531cdc4f7af5a9ee3aa2d936af15e8e8356cc85ba0398ce1ba3f452e114dc0ec29a646786e68581a57bea080992e15029157f97fb4caa29d77b53fb7ca1818b085e200a362e18ccbcf4638a97f3e752b93e4ac42f0914ec99b4f077a643b86ea2cf726446499acc01af", 0xe3, 0x3f}, {&(0x7f00000003c0)="e3f161418e9407a8a1973f14f97008d6e6e37669149951ecea33c61ecd23676025cb51cc54c5dd7902b2913b185f2880bc40085734b2099134ec9bc9e7052462c03a93b451e6e4c2530c71c7676b646a55d5e5417dee50cba09ce788ea303e7cd13e8b20bb55910b1dda4031b78dca873824c2458db4bc28", 0x78, 0x6}], 0x42, &(0x7f0000000480)={[{@huge_advise}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x69]}}, {@huge_always}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, '}}-'}}, {@fowner_gt={'fowner>', 0xee00}}, {@appraise}]}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x410b40, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) openat(r1, &(0x7f0000000540)='./file0\x00', 0x200, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) openat(r2, &(0x7f00000005c0)='./file0\x00', 0x80100, 0x4) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) [ 1788.202023] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 14:13:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0x1a}, {0x0}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4f05, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x542f, &(0x7f0000000240)={0x0, 0x1228, 0x10, 0x3, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0xfff) syz_io_uring_submit(r6, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x2080}, 0x1}, 0xf05) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:13:01 executing program 3: creat(&(0x7f0000000140)='./mnt\x00', 0xe0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./mnt\x00', 0x5, 0x3, &(0x7f0000000340)=[{&(0x7f00000002c0)="a866715d19c0abe4c477cf22440a18b38c570ac52f6ad313a740f7ef4f59a96def7a60e9fcb71d17d66fc5d13d0f84322b8dd96342015c34df265cffb56ac19fb8e4bf3e6f7b366fe69d3810e7870bfd8820415b608131255f92ffb66ce99b621f4a5aa6126b2fbb5fe901b881063db1", 0x70, 0x9}, {&(0x7f0000000480)="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", 0x1000, 0xd23}, {&(0x7f0000001480)="1a95dc6151683b867c5145b7cc8767ae39b94cdda920a71750acc622436c1f5a3d4ae9a14245f694900413c3e3434ebd9945ffe92bec1c485c9f74a0419496bb426d07ba16bcafaaeb728f7bb856b311338e5135779d8bb45732a1c6337ab1936819070522aac5894f36e54962346b62eead17da63f5084e9a3ebdaaa2febbe5722811daf324e47b6b510ec967ca3b55a6063133be1db9102fd25b5c70af7847d28010405933cae4601d53185d943f178a8fd6ab0c9d6d9bbdce332519847d5f97500e54f3ac302b9c4c0f017359981fbae4679e5d5ba387cdba680aaad028cec4231ed98e6bded9d4918bb785458294bc939b91abd18fa8acc77861ced3ee5c7e9969dd5a028cba2806019a1e306e7a40da3699ea7c0f18f8676154545f45640b3d9966fbf8c12507a053d844da40db4e2f46b13392edeb8267e60ae11b4e7aca7336c492b2b67a3de0971d77dddbfd3c089720ed89a0f25765a0fbee6784c3ff823adc219abfe19db16c1fb32c210c12390f255eb255f88bf8467d0c7db4360c585b7ebf950dbd725f69891db1d26e88f4e6a56de70ae1f768173e5937fa80d97b369da259ed8f806f4bd9fd1b2b5c82d61bb3da899bae98373bc63605460079da6d55fe5847508c33bdb617ad6b20f5fa9564b67e175e25df28cdd0c59041b566205d948853556c7f57406b5973581b652506808c5668afd33d00c68f7e7c9aa619b132d01184aef75283f920e5601e13ceeb325e4f19619f74f67d432eba8d88cfa25c95044370be802b57fdfa7d77f04b7947e5fa623c93e71d091edd954fad1a16f9579ebd8627fc581244df1824a5d09e016255ed1e5067a6467721f592186ae889280f1d449c1d6c825516bd7c4b5fe3fdc9b1108e63d3b08bd2865e57fbda526b5446e6fc9ebc2ac05b3a4d7c0c41876bdcde695ce700aa1db46c14dc8faefd621c91f65486e3cf940d492d0f2bb1ad3a2d0e44c222367f54aeae937589db3e5e9f12ebe47d819efba26735ae91b5d14a06a7e28e49de60b4d393de4807d488899bfa82b033a890970c1b3748e799de7a4d998328c7dbc8efe4a046d82ca67e3a4b70b78502eb9b9405a7090b7051254fa06cce52e21d6c0777807cb12d67c1976389ec6670a0e7501662e99ef4262cfdff1cd2fdd8c82bfc7fcbbfa095cadae426becff4c74a6d638cb29928ea3fc5e888ff4a84fe88cb2b00a15db18e832aa18e1c7ef31feb86d6b5f262d0c8b2546598400784a5f171ccc8b921fb16b15bdcbeeeb9b0e13b188bccaed58d9dac0de45840c84de3a89d450fd505c1b3d0d43a21571c49f4047888f9b1a91d73b09b86030fe85bf482d13718d049af4a07d248fa0fabf62f41e9ab75bac0cc84af39f0b3979ee32bfb8d1bafd9748d0a0f756758c41a41f8d2fc1187421bd22eac426f937cf2eac77102c8918df4b37e843b3867dd19f374a0d9e31b40221cf4df8007d6fa08efc1c922a0db0621e379c6507e96f1f8021098341a7397757646921e3fafc2aecb8f3d71ade058184fbf51bab551558951541833846fd8e725c69c4b663b8e6ea231c711fde1084d40419b7296f90dad42d78282ec1061c0717f7ab588f1a77d1d671668ca056f7fea9f6a0eea69dbb1c505d1486ec74530124690f941d6202a4c98ff45366861fd83a8b4a5648215c7f04a3bbbe22427f9aa9152d136900e756db19b4befaaee44c1875c39c495205385796105274ed64d940f2d059bfa0a9e0ecae0cdbc32d311bca7d61b8e3699943c9f55bbe956fc5580ce917a5146c2210142a3f0b07e9b1eab812c0f5e008ad178ce97050f11be9c1f642bbe6946ac9f3c29f3f58792afb5acf8323d1f1ac2de86705fc5c40810b5b2994b115725788042e0704d07ad51e07d4bce1bb93a3172e1741fd57dc818a0ffe89dcc084fd47d502d1c081824b5b013cb44d797d6f214708ecd5c17a4ea14be9266ea1302c75f8f5f448af96c8d12edd940111812dd0eeebe4f667e2dee0d7311cc670e073cd88a8e30cdc83a86e6c6dc21741f00a615f2970562d2e90289e7c36e9c2e64cd9ac6781567bc8482d9882dbbf35f530f019458387100e10dbf0c74dcc1d2059da5f976ea2dcde06fd164466b0ac38ab3ba804ae26b996a0861af68b5bb73cfffe678e53d9bcbbe5bbe0851a2cc9ca8620c1505ba2be96227b8925c1db2126ee9e5c5fba0cf1edf5a6ee6273673b978f1a2cf7e139f6a42527c3a5c3122f0b7b8a60a81fd7b759d7c9dbfc20eb3691b40ba7815dc82d44ac9230e2a8e3eaf362c1c3a5376e7660abdcb1e8324d634e569c7f1f106ff235847d2a5f34c4bae91dfe1d53ab06d371ec6ce8e84e2e48104fbca7028935efd91e2045980f780c1dbc0a89e2c2ffc47d6453dccc5cc82b863908d2da2c1b43ca021abac632887b0ad6e4947baa90244da3642cb833504953b120f7148fa01781d44f45802e243e407d12d69abc002776f61f85f7782c62baeb662aacabf59f512118218f43face1e4b500527f9019d4fa678b09630d1a3e8896ef30b4a120c0f3b8064f5a22d95caa1ecfbeb050aad5d8a6e940ee96e14733c16f5f2701c71df42def7e142dd26dc317006caf4bd0d23e540f231177c0598a4cf5465f3ce6d272f3fd6c513c60f92c3c41fc1b058d006f6975a43a39ec3f3907a5ead15985f925a7dd2f49428d1de085a5f1e5e68e91d20ef4cad7316c667070655135ff757647d47868d996390af9853eaae0759b0c4e715f4f279bb0baf24da21dbd01adc55f7644266a92d5d18de1e0bb49abdad9f2503577f03abf5ea2c1dfd71416c1a72eeff4d4326e49075d9ba16eb6d2f46e052f32cd9914fb56c116bfebb8113f2f657cd50a2bdf91cd678740f0da9887937bf8d85f39695eac87faa89758e16202d6844f4f78003b7e0c235c67461b5da443cc40330a4d822c6bacb328f622508be397b35d1cb068e6e4d8bbe64955cea88dc69135e91ef05d217d974b4f1be53bda9f0377d8ccea8f5870c4da83fa08a52e30fb4e0f1ed9095b385247b647efef2828fbd1c1ed4b5b281fcda08aa1776554948e0566bdfb060f835423048451d0e44e4850fcfa21231e167ae64fb17412f2e5943a768c00544ab3fd53876349e5d5728089de654ae7e70f87f694a568b7822b94c84b41c6ba3a54d2d2c249ce3320c5f528c33ce9503e84971988824de06dfd7d78b717ef4d03270bca0214cf85500988b3c419d5d6176ab4ec1ab5591575a3499bd6ae98f45ef5b4e3b28fd527b427a43b87c1190c1ad04162415b253d38194fd2857c9577901b95a46247937ae9372443164e328afe99165ee8f999c0eddbf72ae0e3dc179d478385a5a34ae1b90fde867595ffd51321d016dc69efe0a266a96785f20a732547a0787ba3bafb5d347f5670e87b84272bf60397601dc7961168ea67a3347f1c987ef4a152be6c934413a332392bbe1d10f0036fd5578f24f37259c8bd53ac6f135cd9233684e606ef52e577d7852c918cb019581464b94f4b17bbc2cba483ee8cf9594f199f8e5f5f5ade0bd95ea63fe046b8b950dba1411590cd592fa259c0a3d5cd19fdf895b4e665570ff021e9d341d2ec3f9e201ef6af59b04e75d4c724b98772edc77ab98cbacab42dac8025d53fb1fe8e8c68c778ea9f95764620bccefaa855780302542c2dee8140ce84f312328a4b7756b699a91c04be5712a4f3a0be84cf702729ff3dc2e5220971b1439ede375e1d2c36c6d9916e18efd44287cfbbb928f83e6cc664f2b52167c170169681afe694d848fec79e6889a4f315e731da53ed25e8ec005f496e859bd08a1957d77ec84970fa4c332479fcc223974c3cb55b3f1e5410312f286b4a26b24cab1c34eee0d42cdcb217013e610451e0e165e3d3666048048ce14a1dd9a80e26cda2bc2d84fac77ff423ee64c19b06df6e2a94034b3d0a21bff08a658dc77b53c0703a8a257e8d10eb7b4820dce40f456c9dd09459508984f69176393716995cbbd7acaf1b18567ffde4208215f5f366bb7aa81173475dc0898d6e1262d25f975e40651330d8c6e36f52aaa6a599301b871b1efc8d5f46dc06a232cfc9d82ce9bb5e55aa9f84c93d9ea3865dbcd1a2660f3953c1eaedf254ebed7ecdf6d909e05d58101dfb831e7ca4dfb4c43a9efd3801322c26122e28533135ece17ed8d67d138047383ce7bfa9d9db56734e6877e72760da5d236b9451b45c11abee92c2f8aa6e0dcb37a90e34b398d890f03c302672f3bdad6a838f273ae79658ae4a7fd5070d5be66bc67d0f9a9d4a35857cdd8d426521b0cfd7b9331238369197fac7c5fd7e1a987320949946b362e32e4a1b27c3d4cd14ad5c027416dacd2e98b36a3bd7f94deaed6eb442d342a831fb02ba1c4b48d106ff35b7e4df5d3fff8dee549aa69bc061cbc422fe019f1d3b6c9274b9570116322c2ed05b9755b801b596ba19eec8ed0b3b2b8065d2b6fbe31e3eacf40d75e5c79867ff83c9586e3b8b6851c83c4eea514f7756baccd58d14443cf9c5ae57006695fe8673a9d2cd36050822f04b33bd779d68e4c1fd4d39ab39907cca1ed20416a96410bfe69cc1797dbf19ba860598387b50a15a2b46cb299bc2d549c8662735c47615d499a54dfaf7b1ad47bdf4a2a44143cb8defd84f20fca2606606e260490c54b37e6fe40ccfd05506f6e51ae3e9fa40d1066637b23254ba911302b3d95ab7c730c5c96f1fac0ae197c744f7c2ade8d938b58c18182f32e9934ba0baccb34a357340241e5f81d90a2888bf07755501c6b5ac08cdc2009a94cec2c43a9f0b9ed5e5e2ef8b04ab03e8e6352a918b3bb1ba3ebbd7e07694e6c4db27b7bf5d475bc4b076f649ef32f9b79b68cbba2501dfeee6fd67e9db83307ecf0c42e4605e98ad37e0483ae8efe6a3d35706146b313e5ce1f5c6547873cf3524a90c6a2f4bd6e445eb632f1d038365793828737ca39b73a1ae636cfa7e4a202628f4d9c783266ea48d47aa13c103a4a332a1d88322b9e3f3bab44d698898f4eaae7ae91ab4d36a96fdc2dcbacdf8d31f74e64d1b9d30ccfd8c5ac6585b37473d2e57bf7807548e91866278e3a1c516b23c810f7f1103c5fce35ea1ff0fe93b0709ba01a42d317701729c2270c77ab2bf9b58fca1377ac8450ede6e53e4feb6986beee1b8452dbbfac8e43e5f59fa615acc40ded3122c326f2c96516f33f51e0fa90af7a63997b32f5596a50e0f485000b32004a94bb60f0783b89e7aea35b4d4e6b19cc0243697d3c65aa6e86872851975a803462b22bbac397f657654825b5d2b591c47975f0fb8794b7e562d098a4f1372fa756b77564918a15f133b41305a87ad0e3b140a9af66a07d1a785e69ce86277df2a17fa7c287163d4bf58fefd6a5289a23f19203f569c8c81836f91bbe535e23860b81db72b934bfc87f35e749d3e46eb64c401408be3281b3fd61b5102c434eff8f357f6e8bdcc2da27e639a607aa2a9444388189a9688ab9cf6c19782c5fd5da5e670fd04f04aec426d6ada18c57db945ae8c2d47b4f2eb3e243a05ad7d86d1cab285ffc161ff9771b4138c755c7f1a398ada5cf8389bb5fe79148de654a1cda58e13d069bb6dafd441f9db9ca06eedb8f4802a502ba1172054f55d3c94ee26f2c2eaeb44db941ca683fd4147ddb0470fe401089e9bc48411793d699087bde558f8529eca8f5ac2133cf1e5b106d3cf42d03027cd406190920cf2dd982642d20f1b03f1975e54e254d804b5a92a47d83dc3c4325d70ab4bc4a5fbd2547067f4d47e7502351cf104f453", 0x1000, 0x8}], 0x499a, &(0x7f0000002540)={[{'ext4\x00'}, {'-'}, {}, {'ext4\x00'}, {'ext4\x00'}, {}], [{@permit_directio}, {@audit}, {@appraise_type}, {@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./mnt\x00', &(0x7f0000002480)='dax\x00', 0x21004, &(0x7f00000024c0)='fsmagic') getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:13:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:13:01 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) flock(r1, 0x6) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x916f0e0b00d1ab96) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) 14:13:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 44) 14:13:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xfeffffff) 14:13:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6800000000000000) 14:13:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) [ 1803.413016] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1803.414008] EXT4-fs (loop5): group descriptors corrupted! [ 1803.427144] kauditd_printk_skb: 69 callbacks suppressed [ 1803.427158] audit: type=1326 audit(1710339181.596:4910): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12225 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1803.431551] audit: type=1326 audit(1710339181.597:4911): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12225 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1803.435130] audit: type=1326 audit(1710339181.601:4912): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12225 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1803.445077] audit: type=1326 audit(1710339181.602:4913): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12225 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:13:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1803.466710] FAULT_INJECTION: forcing a failure. [ 1803.466710] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.468749] CPU: 1 PID: 12226 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1803.469914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.471428] Call Trace: [ 1803.471868] dump_stack+0x107/0x167 [ 1803.472453] should_fail.cold+0x5/0xa [ 1803.473063] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1803.473868] should_failslab+0x5/0x20 [ 1803.474464] kmem_cache_alloc_trace+0x55/0x320 [ 1803.475192] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1803.475995] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1803.476779] __list_lru_init+0x44d/0x890 [ 1803.477428] alloc_super+0x8b8/0xa90 [ 1803.478019] ? fput+0x20/0x20 [ 1803.478508] sget_fc+0x13e/0x750 [ 1803.479048] ? set_anon_super+0xc0/0xc0 [ 1803.479681] ? rpc_kill_sb+0x1b0/0x1b0 [ 1803.480300] get_tree_keyed+0x55/0x210 [ 1803.480908] vfs_get_tree+0x8e/0x300 [ 1803.481501] __do_sys_fsconfig+0x8da/0xc20 [ 1803.482167] ? fscontext_read+0x310/0x310 [ 1803.482819] ? fput_many+0x2f/0x1a0 [ 1803.483438] ? __secure_computing+0x199/0x2f0 [ 1803.484306] do_syscall_64+0x33/0x40 [ 1803.484906] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1803.485713] RIP: 0033:0x7fef23554b19 [ 1803.486294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.489172] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1803.490347] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1803.491465] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1803.492676] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.493815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.494969] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1803.500564] audit: type=1326 audit(1710339181.602:4914): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12225 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1803.502977] audit: type=1326 audit(1710339181.608:4915): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12224 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1803.507100] audit: type=1326 audit(1710339181.609:4916): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12224 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1803.522246] audit: type=1326 audit(1710339181.612:4917): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12222 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1803.530670] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1803.531739] EXT4-fs (loop5): group descriptors corrupted! [ 1803.533043] audit: type=1326 audit(1710339181.612:4918): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12222 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1803.538662] audit: type=1326 audit(1710339181.613:4919): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12225 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 14:13:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xffffff8c) 14:13:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) r3 = inotify_init() sendfile(r0, r3, &(0x7f0000000040)=0x1000, 0x5) 14:13:01 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:13:01 executing program 3: r0 = fsopen(&(0x7f00000000c0)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2422], 0x976) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000140)) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/95, 0x5f) 14:13:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6c00000000000000) 14:13:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 45) [ 1803.693888] FAULT_INJECTION: forcing a failure. [ 1803.693888] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.694866] CPU: 0 PID: 12250 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1803.695415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.696107] Call Trace: [ 1803.696328] dump_stack+0x107/0x167 [ 1803.696634] should_fail.cold+0x5/0xa [ 1803.696954] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1803.697374] should_failslab+0x5/0x20 [ 1803.697690] kmem_cache_alloc_trace+0x55/0x320 [ 1803.698068] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1803.698493] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1803.698892] __list_lru_init+0x44d/0x890 [ 1803.699236] alloc_super+0x8b8/0xa90 [ 1803.699542] ? fput+0x20/0x20 [ 1803.699814] sget_fc+0x13e/0x750 [ 1803.700090] ? set_anon_super+0xc0/0xc0 [ 1803.700430] ? rpc_kill_sb+0x1b0/0x1b0 [ 1803.700744] get_tree_keyed+0x55/0x210 [ 1803.701065] vfs_get_tree+0x8e/0x300 [ 1803.701372] __do_sys_fsconfig+0x8da/0xc20 [ 1803.701726] ? fscontext_read+0x310/0x310 [ 1803.702061] ? fput_many+0x2f/0x1a0 [ 1803.702376] ? __secure_computing+0x199/0x2f0 [ 1803.702749] do_syscall_64+0x33/0x40 [ 1803.703059] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1803.703469] RIP: 0033:0x7fef23554b19 [ 1803.703795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.705285] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1803.705904] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1803.706491] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1803.707067] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.707661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.708238] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:13:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 46) [ 1803.825629] FAULT_INJECTION: forcing a failure. [ 1803.825629] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.826611] CPU: 0 PID: 12257 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1803.827189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1803.827904] Call Trace: [ 1803.828132] dump_stack+0x107/0x167 [ 1803.828445] should_fail.cold+0x5/0xa [ 1803.828763] ? create_object.isra.0+0x3a/0xa20 [ 1803.829145] should_failslab+0x5/0x20 [ 1803.829470] kmem_cache_alloc+0x5b/0x310 [ 1803.829803] ? mark_held_locks+0x9e/0xe0 [ 1803.830138] create_object.isra.0+0x3a/0xa20 [ 1803.830503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1803.830922] kmem_cache_alloc_trace+0x151/0x320 [ 1803.831313] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1803.831734] __list_lru_init+0x44d/0x890 [ 1803.832080] alloc_super+0x8b8/0xa90 [ 1803.832395] ? fput+0x20/0x20 [ 1803.832664] sget_fc+0x13e/0x750 [ 1803.832944] ? set_anon_super+0xc0/0xc0 [ 1803.833273] ? rpc_kill_sb+0x1b0/0x1b0 [ 1803.833599] get_tree_keyed+0x55/0x210 [ 1803.833925] vfs_get_tree+0x8e/0x300 [ 1803.834236] __do_sys_fsconfig+0x8da/0xc20 [ 1803.834591] ? fscontext_read+0x310/0x310 [ 1803.834937] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1803.835391] ? __secure_computing+0x199/0x2f0 [ 1803.835789] do_syscall_64+0x33/0x40 [ 1803.836096] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1803.836522] RIP: 0033:0x7fef23554b19 [ 1803.836835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1803.838398] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1803.839021] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1803.839614] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1803.840202] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.840822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.841413] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:13:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 47) 14:13:16 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000580)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x50b00, 0x0) copy_file_range(r1, &(0x7f0000000040)=0x40, r2, &(0x7f0000000240)=0xfffffffffffffff7, 0xfff, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x40000080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3f, 0x80, 0x5, 0x81, 0x0, 0xe9, 0x80000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xdf1, 0x2, @perf_config_ext={0x3, 0x1}, 0x1a0, 0x8000, 0x7fff, 0x6, 0x19f, 0xe7, 0x2, 0x0, 0x0, 0x0, 0x1}, r3, 0x1, 0xffffffffffffffff, 0xc) [ 1817.915639] kauditd_printk_skb: 78 callbacks suppressed [ 1817.915651] audit: type=1326 audit(1710339196.086:4998): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1817.917855] audit: type=1326 audit(1710339196.086:4999): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1817.920205] audit: type=1326 audit(1710339196.090:5000): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1817.922035] audit: type=1326 audit(1710339196.091:5001): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1817.923908] audit: type=1326 audit(1710339196.091:5002): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:13:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1817.934878] FAULT_INJECTION: forcing a failure. [ 1817.934878] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.936158] CPU: 1 PID: 12266 Comm: syz-executor.6 Not tainted 5.10.212 #1 14:13:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7400000000000000) 14:13:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) [ 1817.936901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1817.937877] Call Trace: [ 1817.938172] dump_stack+0x107/0x167 [ 1817.938570] should_fail.cold+0x5/0xa [ 1817.938976] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1817.939514] should_failslab+0x5/0x20 [ 1817.939935] kmem_cache_alloc_trace+0x55/0x320 [ 1817.940419] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1817.940965] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1817.941502] __list_lru_init+0x44d/0x890 [ 1817.941945] alloc_super+0x8b8/0xa90 [ 1817.942356] ? fput+0x20/0x20 [ 1817.942497] audit: type=1326 audit(1710339196.097:5003): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1817.942694] sget_fc+0x13e/0x750 [ 1817.944800] ? set_anon_super+0xc0/0xc0 [ 1817.945391] ? rpc_kill_sb+0x1b0/0x1b0 [ 1817.945837] get_tree_keyed+0x55/0x210 [ 1817.946263] vfs_get_tree+0x8e/0x300 [ 1817.946677] __do_sys_fsconfig+0x8da/0xc20 [ 1817.947146] ? fscontext_read+0x310/0x310 [ 1817.947590] ? fput_many+0x2f/0x1a0 [ 1817.948019] ? __secure_computing+0x199/0x2f0 [ 1817.948526] do_syscall_64+0x33/0x40 [ 1817.948558] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1817.948928] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1817.949695] EXT4-fs (loop5): group descriptors corrupted! [ 1817.950211] RIP: 0033:0x7fef23554b19 [ 1817.951063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1817.953042] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1817.953863] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1817.954626] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1817.955378] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1817.956143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.956904] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1817.984666] audit: type=1326 audit(1710339196.101:5004): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1817.987113] audit: type=1326 audit(1710339196.101:5005): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12265 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:13:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383839333038373500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001d72581da2224158b58973c82eb77a3b010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd7f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d7f4655fd7f4655fd7f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d7f4655fd7f4655fd7f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="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"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x100) readahead(0xffffffffffffffff, 0x5, 0x4) r1 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x9, 0x7, &(0x7f0000000980)=[{&(0x7f0000000180)="31d8725180dd70be31552ab6932f230c4f73f4cee1334749a9022425d111e02c5e7dcbb3618e84401ced875deb704f3911b670ab45709ee6f3b9cae5e77830f7297e126e675cd0dc795966a81bc25d8959d51a0ce0024436d10e2127aa15516611fddf4a84", 0x65, 0x8}, {&(0x7f0000000600)="06399a46a5215d3e5fc61b04d42b4d3fb366b9d9de5c5faa141a4192cb5b133aaf6477a2", 0x24}, {&(0x7f0000000640)="48ac457e435af298f97d423951bcb7acaf06e0ab359226d28ba7319a765e6b79d06c06cef3bb42732149f92cc789308327086bd96a12b8275af15655cd530a649be508491561f75922773363d0a296b2e8d35fa97819c0e78c0bcfc436a233be43bef16986798a1006ee0ea6a9ce2387325ed8ba2eb1851799833032579be0c538930058", 0x84, 0x2}, {&(0x7f0000000700)="6cb03506bde8e35812e0078174f103fa36244059a0e6f59fa4508c6e8a7951d4d382d99b31d89884599211520b71a592e17abbe13fb7b739dfc61620c2ee324a5469bfeb87b1cdd6483e765b152ce055f39448978adfcabf111055c29b04f482f2ac5a4cb73d3ea20c0c40463aaf14f4242793ef4294e4d5c0bbaa2e5b2e2b9f68a7dce8a4be57c0f63a41d6adb6734a722eede0783ec3e8c3bb3a9c796b20aa5f810ee16fa5ed6ea3e14ca43864acfdc3cdd48f6013cc6ab051e427826f35348facbfc3b454bfe0641bea92b17f1241e6e92f1b9d5f19f563083811ff7015be2187bef6c3387fb295f3fa7a60381446a5e46c49", 0xf4, 0x4f5}, {&(0x7f0000000800)="3144b14debd0862ef2d36c63ef59a9902a90282cc4bfceb6cc350402769c30ae88aa29bdca4d55994e22226ac36581d93da9296f72621fec418a021cbc67b83d4917e462582ba0710de2ef72f5392d12622718359c063431b4f2fb1a50568774a9ac095523cdd7a6cc511cfd80a4fbacbb652e371df832aaf70988f385703d632d26628b8464cbbcee4b7edc7d08b7b40345ac49aa211e75cc79e8a14f933dbeb45394f60074b9fa0dd00dcaf5d5e21e8d7ee8bf472ae543d13bad5647057e16c00ba7d8e815212c6fe0a55fb55cca2917224b42f4430c609a3e23be0d838c2ec14b92a2a0dccba33fc52af62f0b9ca6a1b0357ff238c630", 0xf8, 0x2c86}, {&(0x7f0000000900)="2e15f07151df772ac6d0e49244", 0xd, 0x100}, {&(0x7f0000000940)="3ce8cd5b497b20c48e60cac276a7a11575ae1ec25e283b7e4de0cbf08991138ab7a99cf4d46c6fe7e453f893f9957ec5fbb9b3a1d3003c", 0x37, 0x3}], 0x4, &(0x7f0000000a40)={[{@fat=@dos1xfloppy}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs}], [{@dont_measure}, {@uid_gt={'uid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, ','}}, {@smackfsfloor}, {@uid_lt={'uid<', 0xee01}}, {@subj_role={'subj_role', 0x3d, '\'-#^-'}}, {@obj_type={'obj_type', 0x3d, '('}}, {@smackfsdef={'smackfsdef', 0x3d, '\xa7${$%-'}}, {@obj_user={'obj_user', 0x3d, '^:}&'}}]}) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000b40)='./file0\x00', 0xc00) 14:13:16 executing program 3: [ 1818.003728] audit: type=1326 audit(1710339196.157:5006): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12278 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x9, &(0x7f0000000580)=[{&(0x7f0000010000)="20000000000100000c0000004c3b00000f000000010000000000000000000000002000000020000620000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4bff6000004000000000101000000000000000b0000000002", 0x5a, 0x101}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000680)="ffffffffff070000000000000000000000000000000000000000000000000080fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffdfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff9183741aa6dad088fc992cf12ac7ade1bef08b58a7aa445e6d54e375d3df7bd1a55c7a085fab26650e0a85fd8081ddf86bb69acf32df06210d127c4140197c3d2cb03419d19572a4dd6f9fbb79fea37865c2708bb8d12a0628c50d1eefe44eb", 0x462, 0xfffffffffffffffc}, {&(0x7f0000000200)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x15fe}, {&(0x7f0000000140)="b417890e2e012c5d8d31e9375854da9f4c9985b18a55790327fc6c234cbacdf1a7f2fb00e8de06b4f1ab94f703ded029c8e9c62d8d353401f765a8e782747a66200ce0de9e536a58eeff2e491dc11fe22ef79dd6fbb791e9c8c57c7609323ab7f130855f05cc", 0x66, 0x8}, {&(0x7f00000002c0)="d17b896b4e2c743ad9f1df41bd73384611acba7f0a5b0962556359e394a5bfe536390b380131535544f347b39ed01a561b77fb615a993c539c4b11b0c2682a02ca343268de127c632e6bc5575a4cb7ca2bcb1a60be29c1f961f09f495698bc78b3c842b3a085d30a80154d26a1722751bb12702ec2c6b9f96bf8ce797cf1df83a4155fe37ae53c00e44af7cf86798c6b0cc91ab3dbf570192939c8bc303a0e3175f65a676c270e54680ee84bc6428e", 0xaf, 0x8}, {&(0x7f0000000380)="2044c3341ac8853b0c88f95f074abac617679d36c88824214eee6427371b00bed254a86ad3cbe74f494ee6f22d4434c2d77c4fa921295fb074ae9f7df9f5e70fe2012c1a61b7873cf33b11e303786954ccb7f752acfe88b4a54f0d7cfad6397fcc0b", 0x62, 0x9}, {&(0x7f0000000480)="2ef4f5b98e727f690e870b3d056b9746c79f408c8a3f91c04a47a7574dba175347d2a8403c0dfcd0aa90d8d3d6044946bcb73f1f819355f0a1efd1ef07497530237e506e6c43b581f8f26af6441e4a3b70840dfe500cb6a354c28df76d1c1e9167e1befa8784fe55c495a93c406985133815d1fef66c2414009ac600a1e0ed9faf55f24b5fffdcb94650d9b11d49a217d56de32d33aa46db3fdb19dd4002187c86bd3f037668380755328b5e2cc4998dd8980e100efbe929c010c8389a0b2cbc1b087c3a7a1403aaa3a083a7d90207459a9d4da745ce43f0d9a8ad3753129608c8893ec9927b9999387a30425e24", 0xee, 0xffffffffffffff56}, {&(0x7f00000001c0)="aabdab43589280b883203744e49c670c023f4eeffc56b11763a85a16c66e511ebd78e0fa3d33b5b508e7826e8428158d78dc306f1dc930208682899a", 0x3c, 0x3}], 0x40, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:13:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xffffffa1) [ 1818.013695] audit: type=1326 audit(1710339196.160:5007): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12278 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:13:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000000c0)="ed412ef91e629ee03ea4bb40ce1403000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x2a, 0x6}], 0x0, &(0x7f0000012900)=ANY=[]) 14:13:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:13:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xfffffff6) 14:13:16 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) fchmodat(r0, &(0x7f0000000140)='./file0\x00', 0x142) chdir(&(0x7f0000000040)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xfffffffd}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000f00), 0x6, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000f40)='nl80211\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./mnt\x00', 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) 14:13:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 48) 14:13:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10202, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3f, 0x4, 0x6, 0x6, 0x0, 0x5, 0x2400, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0x3}, 0x8001, 0x8, 0x81, 0x7, 0x1, 0x7ff, 0xfffb, 0x0, 0xffffffff, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r0, 0xa) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0xffff) [ 1818.092371] FAULT_INJECTION: forcing a failure. [ 1818.092371] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.093367] CPU: 0 PID: 12291 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1818.093936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.094637] Call Trace: [ 1818.094865] dump_stack+0x107/0x167 [ 1818.095182] should_fail.cold+0x5/0xa [ 1818.095502] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.095937] should_failslab+0x5/0x20 [ 1818.096259] kmem_cache_alloc_trace+0x55/0x320 [ 1818.096646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1818.097077] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.097492] __list_lru_init+0x44d/0x890 [ 1818.097850] alloc_super+0x8b8/0xa90 [ 1818.098168] ? fput+0x20/0x20 [ 1818.098435] sget_fc+0x13e/0x750 [ 1818.098721] ? set_anon_super+0xc0/0xc0 [ 1818.099059] ? rpc_kill_sb+0x1b0/0x1b0 [ 1818.099395] get_tree_keyed+0x55/0x210 [ 1818.099727] vfs_get_tree+0x8e/0x300 [ 1818.100054] __do_sys_fsconfig+0x8da/0xc20 [ 1818.100417] ? fscontext_read+0x310/0x310 [ 1818.100773] ? fput_many+0x2f/0x1a0 [ 1818.101088] ? __secure_computing+0x199/0x2f0 [ 1818.101473] do_syscall_64+0x33/0x40 [ 1818.101790] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1818.102229] RIP: 0033:0x7fef23554b19 [ 1818.102546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1818.104098] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1818.104734] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1818.105321] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1818.105907] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.106501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.107095] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:13:16 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@OVL_FILEID_V0={0x114, 0xfb, {0x0, 0xfb, 0x114, 0x1, 0x8, "0eece45bf6aafe5a6af23b1156316d57", "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"}}, 0x40) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x4000, 0x0) 14:13:16 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x7a00000000000000) [ 1818.156580] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1818.157830] EXT4-fs (loop5): group descriptors corrupted! 14:13:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 49) [ 1818.232118] FAULT_INJECTION: forcing a failure. [ 1818.232118] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.233117] CPU: 0 PID: 12313 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1818.233694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1818.234384] Call Trace: [ 1818.234613] dump_stack+0x107/0x167 [ 1818.234921] should_fail.cold+0x5/0xa [ 1818.235246] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.235676] should_failslab+0x5/0x20 [ 1818.236004] kmem_cache_alloc_trace+0x55/0x320 [ 1818.236385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1818.236816] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1818.237220] __list_lru_init+0x44d/0x890 [ 1818.237569] alloc_super+0x8b8/0xa90 [ 1818.237885] ? fput+0x20/0x20 [ 1818.238149] sget_fc+0x13e/0x750 [ 1818.238434] ? set_anon_super+0xc0/0xc0 [ 1818.238778] ? rpc_kill_sb+0x1b0/0x1b0 [ 1818.239105] get_tree_keyed+0x55/0x210 [ 1818.239428] vfs_get_tree+0x8e/0x300 [ 1818.239751] __do_sys_fsconfig+0x8da/0xc20 [ 1818.240126] ? fscontext_read+0x310/0x310 [ 1818.240473] ? fput_many+0x2f/0x1a0 [ 1818.240787] ? __secure_computing+0x199/0x2f0 [ 1818.241179] do_syscall_64+0x33/0x40 [ 1818.241495] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1818.241928] RIP: 0033:0x7fef23554b19 [ 1818.242245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1818.243773] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1818.244414] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1818.245006] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1818.245598] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1818.246189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.246788] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1833.697406] kauditd_printk_skb: 75 callbacks suppressed [ 1833.697417] audit: type=1326 audit(1710339211.867:5083): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:13:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'veth0_to_team\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x204080, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) 14:13:31 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:13:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 50) 14:13:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x3, 0x80000) read(r3, &(0x7f0000000180)=""/22, 0x16) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x9, 0x7, 0x4c65, 0x36, 0x1c}) 14:13:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xfffffffb) 14:13:31 executing program 1: rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0xef20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) pselect6(0x40, &(0x7f00000013c0)={0xc1b2, 0xfffffffffffffefe, 0xffffffffffffff38, 0x9, 0x2, 0x8, 0x8, 0x1}, &(0x7f0000001400)={0xfffffffffffffffe, 0x9, 0x4ffb, 0x7, 0x0, 0x3f, 0x6}, &(0x7f0000001440)={0xe5, 0x38c00000, 0x0, 0x4, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x8000, 0x4}, {0x9, 0x2447}]}, 0x14, 0x2) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001380)) fchmod(0xffffffffffffffff, 0x30) close_range(r2, r0, 0x0) mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f00000002c0), 0x8) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x24, 0x1, 0x3, 0x0, 0xfe2d, 0x0, 0x1d}}) unshare(0x48020200) 14:13:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00403c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00"/112], 0xb8}}, 0x0) stat(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) syz_io_uring_setup(0x66c1, &(0x7f0000000100)={0x0, 0x2baf, 0x4, 0x2, 0x120}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x4, 0x1, 0x2, 0x3, 0x2, [{0x210, 0x9, 0x8, '\x00', 0x8}, {0x4, 0xa7, 0x6}]}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0) 14:13:31 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa1ffffff00000000) [ 1833.700597] audit: type=1326 audit(1710339211.871:5084): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1833.702992] audit: type=1326 audit(1710339211.873:5085): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1833.705397] audit: type=1326 audit(1710339211.875:5086): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 [ 1833.709967] audit: type=1326 audit(1710339211.875:5087): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1833.732513] audit: type=1326 audit(1710339211.879:5088): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1833.736302] FAULT_INJECTION: forcing a failure. [ 1833.736302] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.737353] CPU: 1 PID: 12336 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1833.737919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1833.738602] Call Trace: [ 1833.738831] dump_stack+0x107/0x167 [ 1833.739132] should_fail.cold+0x5/0xa [ 1833.739458] ? create_object.isra.0+0x3a/0xa20 [ 1833.739841] should_failslab+0x5/0x20 [ 1833.740173] kmem_cache_alloc+0x5b/0x310 [ 1833.740519] ? mark_held_locks+0x9e/0xe0 [ 1833.740868] create_object.isra.0+0x3a/0xa20 [ 1833.741206] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1833.741246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1833.741265] kmem_cache_alloc_trace+0x151/0x320 [ 1833.742438] EXT4-fs (loop5): group descriptors corrupted! [ 1833.742827] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1833.744202] __list_lru_init+0x44d/0x890 [ 1833.744541] alloc_super+0x8b8/0xa90 [ 1833.744853] ? fput+0x20/0x20 [ 1833.745122] sget_fc+0x13e/0x750 [ 1833.745408] ? set_anon_super+0xc0/0xc0 [ 1833.745745] ? rpc_kill_sb+0x1b0/0x1b0 [ 1833.746063] get_tree_keyed+0x55/0x210 [ 1833.746391] vfs_get_tree+0x8e/0x300 [ 1833.746715] __do_sys_fsconfig+0x8da/0xc20 [ 1833.747073] ? fscontext_read+0x310/0x310 [ 1833.747416] ? fput_many+0x2f/0x1a0 [ 1833.747725] ? __secure_computing+0x199/0x2f0 [ 1833.748119] do_syscall_64+0x33/0x40 [ 1833.748437] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1833.748861] RIP: 0033:0x7fef23554b19 [ 1833.749167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1833.750687] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1833.751313] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1833.751910] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1833.752509] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.753103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.753695] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1833.770816] audit: type=1326 audit(1710339211.879:5089): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1833.772782] audit: type=1326 audit(1710339211.879:5090): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12327 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1833.797890] audit: type=1326 audit(1710339211.880:5091): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12323 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:13:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xfffffffe) 14:13:31 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="0300000004000000", 0x8, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1833.820665] audit: type=1326 audit(1710339211.880:5092): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12323 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:13:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc4282, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000100)=0x3, 0xc9eb) sendfile(r1, r0, 0x0, 0x8000) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/253, 0x200000fd}], 0x1, 0x10000, 0x0) 14:13:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xbc03000000000000) [ 1833.888580] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1833.889434] EXT4-fs (loop5): group descriptors corrupted! 14:13:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/220, 0xdc}, {&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f0000000280)=""/132, 0x84}], 0x3, 0x9, 0x5) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000980)='./file1\x00') readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/15, 0xf) 14:13:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 51) [ 1834.003163] FAULT_INJECTION: forcing a failure. [ 1834.003163] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.004393] CPU: 1 PID: 12366 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1834.004978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1834.005663] Call Trace: [ 1834.005891] dump_stack+0x107/0x167 [ 1834.006199] should_fail.cold+0x5/0xa [ 1834.006523] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1834.006939] should_failslab+0x5/0x20 [ 1834.007259] kmem_cache_alloc_trace+0x55/0x320 [ 1834.007634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1834.008076] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1834.008529] __list_lru_init+0x44d/0x890 [ 1834.008878] alloc_super+0x8b8/0xa90 [ 1834.009190] ? fput+0x20/0x20 [ 1834.009452] sget_fc+0x13e/0x750 [ 1834.009731] ? set_anon_super+0xc0/0xc0 [ 1834.010071] ? rpc_kill_sb+0x1b0/0x1b0 [ 1834.010452] get_tree_keyed+0x55/0x210 [ 1834.010783] vfs_get_tree+0x8e/0x300 [ 1834.011099] __do_sys_fsconfig+0x8da/0xc20 [ 1834.011462] ? fscontext_read+0x310/0x310 [ 1834.011803] ? fput_many+0x2f/0x1a0 [ 1834.012130] ? __secure_computing+0x199/0x2f0 [ 1834.012540] do_syscall_64+0x33/0x40 [ 1834.012856] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1834.013293] RIP: 0033:0x7fef23554b19 [ 1834.013609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1834.015121] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1834.015764] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1834.016392] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1834.016986] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.017573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1834.018154] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:13:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 52) 14:13:47 executing program 1: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x400081) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = syz_io_uring_setup(0x74d, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r7, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(r7, r0) ioctl$LOOP_SET_STATUS(r6, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fba0da3344bc9163688567feda8dba320d292f4ebefe64e99", "220c0000002d52004bde09505bf1c35930ac1d9268624c1420b156a2ac400377"}) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0xa4, 0x8, 0x1, 0x0, 0x0, 0x18308, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x9, 0x0, 0x2, 0x5, 0x5, 0x9dfc, 0x0, 0x6, 0x0, 0x2}, r5, 0x3, r6, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0x5, 0x4, 0x1, 0x0, 0x7f, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb9fb, 0x4, @perf_config_ext={0x3, 0x9}, 0x40010, 0x33d, 0x9, 0x9, 0x8, 0x4, 0x8, 0x0, 0xca35, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r4, 0x0) [ 1848.943436] kauditd_printk_skb: 63 callbacks suppressed [ 1848.943451] audit: type=1326 audit(1710339227.112:5156): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1848.951737] audit: type=1326 audit(1710339227.112:5157): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1848.959504] audit: type=1326 audit(1710339227.129:5158): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12377 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1848.962904] FAULT_INJECTION: forcing a failure. [ 1848.962904] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.963884] CPU: 1 PID: 12376 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1848.964489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1848.965176] Call Trace: [ 1848.965403] dump_stack+0x107/0x167 [ 1848.965735] should_fail.cold+0x5/0xa [ 1848.966045] ? create_object.isra.0+0x3a/0xa20 [ 1848.966586] should_failslab+0x5/0x20 [ 1848.966939] kmem_cache_alloc+0x5b/0x310 [ 1848.967366] ? mark_held_locks+0x9e/0xe0 [ 1848.967720] create_object.isra.0+0x3a/0xa20 [ 1848.968126] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1848.968569] kmem_cache_alloc_trace+0x151/0x320 [ 1848.968968] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1848.969365] __list_lru_init+0x44d/0x890 [ 1848.969485] audit: type=1326 audit(1710339227.129:5159): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12377 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1848.969712] alloc_super+0x8b8/0xa90 [ 1848.971840] audit: type=1326 audit(1710339227.130:5160): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1848.972041] ? fput+0x20/0x20 [ 1848.974333] sget_fc+0x13e/0x750 [ 1848.974634] ? set_anon_super+0xc0/0xc0 [ 1848.974963] ? rpc_kill_sb+0x1b0/0x1b0 [ 1848.975399] get_tree_keyed+0x55/0x210 14:13:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000040), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0xd1, 0xff, 0x8, 0x0, 0x45eb, 0x14005, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x7, 0x2}, 0x1100, 0x4, 0x3, 0x6, 0x9, 0x0, 0x2, 0x0, 0x3, 0x0, 0x537}, 0x0, 0xd, 0xffffffffffffffff, 0x1) clone3(&(0x7f00000007c0)={0x2208000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x2f}, &(0x7f00000005c0)=""/245, 0xf5, &(0x7f00000006c0)=""/189, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r6, 0x0, r5) r7 = syz_open_dev$usbmon(&(0x7f0000000840), 0x2, 0x200) r8 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) r9 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)="434651ee578365ad97dccbc4df22e9245f203050e7dd8923f6f98cf6a6a85e601b1be2dc63900666371766ee1b978faee3cac52e95de74c41bf2c4469f0c45665a0c337add07b12ba738d457b0436c796f117459cb29faa0d94cfeac9c3e1683ae5a55e3b3f7f8d579361c2d59839e545e25e6a914cb8ed9e1f49b5586ba8976aca8345380803fbc1a51949ea0e4d81300d6067f262407e3957076c34a80", 0x9e}, {&(0x7f0000000240)="b3a11be2d2b7dc60431d71a27f5c622f7c64be72034cb39793c7dc85bac4dd2dc32c0c7d16afbb59e420d802a580e020f71630d43ca6f94b393e7a0c1bbc17d81144b043eb376d85306d33c1c303c1b492c6cdbf1767cf8c101af3d8b9f6fa0897b8d8ba6a22eeaff38d513dfc9287997c9fed7617573b9d5e88a31c34840670a9a5", 0x82}, {&(0x7f0000000300)="cae3507dcf07bf6a840ca69f6644b26fb4765d4232d1b3de0c9d93fe52968bda5b2e44b482c16762ae871f6ac7a75680f85f935e8fd27f7c06b10531", 0x3c}, {&(0x7f0000000340)="d2fe78fdc6da4e54cf4eded2fd3f953331b57ba3cc981d8099cb1e7a5abbce543d", 0x21}, {&(0x7f0000000380)="c13d1691a082d7c8761691c52fc3d8064629be347f6dee13826e9b769f87220bd34c9d8d26458ddf7a43ad31496b8345d8199485a836d62155df29d36fcd5b150fcb088f669c35f7306a3645ca40e9498711a596d339637d6b50cd722faa3906800259bafb1dec8f6b703e89f5d77e10294e4ec04f76b69e87fa1886712d27c91acba735877e06191ef79c330e4452619eea26f9f75513db234199018cbbb74165070ff43315daec2e7ff1a34d369965688d4135fe90c56cf28df6eed56bf9fb9ab8", 0xc2}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r7, r0, r2, r3, r3]}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}], 0x68, 0x41}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r10, 0x9, 0x4) sendfile(r1, r10, 0x0, 0xffff) 14:13:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x8000000000000) 14:13:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x4fffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000002ec0), 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x2, 0x0) io_setup(0x7f, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='+', 0x1}]) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) r4 = accept4$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000300)=0x1c, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) io_submit(r2, 0x5, &(0x7f0000001580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000000040)="3c6eb1eb22c1629ebc52cc37e2f09a1c4c18daca66ded036900ca1dbe414c5a23d4aec8c73f3e5e1abfa1281d89b960e8b14a9b88511cc7354279064962dea973f95afc51714714b05e3e1a626e33251db8eeabb0af6a8ab0a70e45293bd767737679f6e8f14c04877d40983172b8c5c5ccf6a006647d6ea6c9aad9494177de1012fd1afda7db23377f290342337e05fd251aa2ec0382ed1e1fb1888d7311b55eee5", 0xa2, 0x3, 0x0, 0x0, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x200, r0, &(0x7f0000001780)="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", 0x141, 0x1ff, 0x0, 0x2}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x8, 0x7ff, r4, &(0x7f0000000340)="6ac8c442eb8fe44acc33a5eca6909cb9ed0ebfb87375902f850496f0451b047e0115d7878fb6b62ed0678e03575948e3c9a2024fa69e68e1ac15441fea55f801560208c9866be69fd39d322a262435ef1e6eb01741919c6b15c244fe1552ae7836e17f040af33bc9db75d8bb804e79932fa15f2f9e5fbc2734cb7dbdb5622a520872acec6e71277cb9803c6d1fdffa87cbee8465884b6afb35b5bdcf7c0e0aa6efe56311659e7cb4b5fd8e4b60e36432af68c9c7dc5a167bf8409ea582002bc35cfdcd4349b6a852349cf17d561b8d1881815c06aba8d6f80404b3db8088c700745c4c3c3977c16d6a77e68379c9ae60ba20e85c2853f3a9442bca87f3df094460d685c14fbb487ae6f9d398524f28854c444677756382747fef6a864c79e246e7ae47ed895571a8b85d36b24633019d5386d5264d7cc86d17400a291dff5b19d76c50bbf30975461dc8f2e340830cd8d43ba1168dd96e66787641261b9482b493c4466a155404fba7261bfee3eea11cb206893fdb8b7d9cd97ad2334a6f5a2044b73d05ff3029fc61bb9af7cd53f4f0527ff9e51636b48177a83666bfc061b8f9bf1b27d41c375b86f9db38cf15281ba5da20dfe30b76d578cb3d17f87640b001b4b6d6f6d566e1e8717d65af9c6e1bc04752eeb7389239c8901994092bfb5adc846beb1edaa6a9c5396374cd4cad4784b58a5aac4b51dae7f0348b9dbfeca2369c1c977890ca5bad52a03f9d0d848101d6ace842118b4f3e79b8af90ba0b93cde0a4e86a8cc16044281f17bf6132339d7b3cb33e126d55d1c45fc8f8077f9271ef66b146ee3ddd0c12d68c63f75fcb57c2d1a069bf5bda0338393fdcf32076a1997d8da572243a991e63e7b7b74e6fc3527cbae0a5838a003d17601ae86ca2328a8d19f592b94e03687e298d925323c24606e4a46812d512a6db844dc6544af25a498050fdd5871fa9d25c8af4af8027aad65db971874c1dcaf7f18b7e8e5efc25df2ad31fd4514b5186bd65710a6f5260e35535b3fd9bac652f32c8daef778d6d34c15fdeb44bba05fd397304b2c64860e9f33689d6db5e8208df82d7f29c2de7c7f0f929ff07d8753c946f01f29c0bff63f8f18e0cc29c4bf8233fc9d1e17ecf19f59eeb63bfeb2ff70ecb1ed38c1429e750904085c564f7049f9f8761a68fe9b7762a007fd7cdb848d991a76839b35a4b8e043a988108d699c96c6c3bbfa2dd83205bb23942d3d7d08c8e05796cbae711f3f028e6a32a04a4af6199fe361d0a400610514e3ce736ef5d931b85c02907b0db96beffd08f0d919b29e8ac2a901302faed19ae2f9e04891b07599e29869470d659be634efe60cfedf10da943446e14ebb1bd6c2e7238c9dbe02d9b40658664bab551bbaecc1d84d02dbf914e279065e3865fb05f57465dfc86bcca41f687534af713602bf3f06cbdf9d4bdac856488be106de45cd43abbd8f5abf398774dc7aafb6fff78d3158d350bafb2f350c2d55ace5770f4341ab1a7c0ade49228d1bdd12d31252c5005c4013ac678af118015052a36e94afec86cd1eb4ccee65c1a4464c27cdb66c80244e5987d4a9ed5cff1c41fcf9645d4a81637d7f0ed3d954ec5c631e70177bc8c8661469a98464d5ed07b80b2882bcc491b641193cd9bb15abe7e187da71f0147ffe86512aef7af90b8f7cad39b0ce3659af49288b404ed61b36bba49f3b267d844660f27cf40c3042116487ef9fd6d614886a53f7c6d96c128f49135486d6c8a98e3c34cd0cdcbf3a0594d6fa0be164a46126380e354952e75094b9834c30532cbaac2db07bc9c3f07a447cd9b80d4c64df7b2a854e5565cc1413097ba0127cc2c4657840af0bd56789bc9d0c14ac959d3f2a6161f055334170b0dccf31d5a634c7982af2471005d921cafe27ddf324e3e3706ed8dc010fb744c8f001248cc07a8eea9dde9fcce230a3d8dc284b3dc0597b3e78b19559e39c8e2532b923391cccc5500a9d16c0caf4464b295a6eda7b39a527f1a26ad7034ae60bb0577ec22d1e8bbeb72395d8569d0e97e985474d749209090ce4b6152fb1ebd316355a3e37c2f0660ce4757e171820f1df38bc7893864d36b89948a27d4f7123e2f2123021111a920a4759a77d6c73846df712fa35ce82bff490df9d57ccf36184d402fcba8e570fb0fab736897286223fac7d3c88f4ed30461048d510c166163ab1b99e0a4b43e045bec99536a4773ff9cc62d39f0a80c74f2c5707621112dec847e8e674e2900b238644795b9179d6abe2c4a63b85fd3364cf01bf853a78930100d70d09e0b370cc399122598b984ba735de78388e09d9a9c76614996ce06ad8c3a57c9693aa362997e6a177493973ac320c64d43748c03e53bfa3dc9807295d8c2f6f26bb5d518f7ca382d853ad997a45076b58ea2d307ba599677cace936659fe1d761c2fb90eda6d213143bf3e8cc7a9294cf9b407f74e0bdda5a738b3f61e6b48530f99ab6d04cfe2e8f74f78c4c75aee6c1d75223ded4027f53655e0b6edff7277a2454d3ead41bc898d739a0ab3592395669c78f8b01498d51c02e2ac16ac2fab0cf65efbd3a1c79272235fdf5ca888fb282b5a7d81c8825a7b5fd8a8470a33b7d2d46b5844c09064177b5e9d8d4395d8ae608c80958df9750ac263359f81327d2f6222ae3d098d5b00f7ef56cb90e2371d95bde060a8f06ee6dae91c747584b4afcf3722a48c33b8c13298d66ed704b19c5ce0b9829fd29f2f80a1632ee07b299abdf63b27563b57cfe6305413b7f44431a3bbc2a6b8da33a2d2c9daaaec1c7e5d7d4cb1f1b628b982075c55eb0ddb220dcf164428300b5afa26126a1efa3af6194fb5b0c9ba188dea0bea499d0b13fbee6219c594b13f1697580b7e3cb47dbf55d96095774bc591c620d3780b62d7bc9833d51c8a0f93b8a84ba4fd60573ca0c46dfd473f07f60a572c1fd638dd356810e062e78f5dc99c8a84628e017fab9a0cd24bfef31c405921b4a5b71a77ae8fa0fed3b4663d960c334e94abddbc0f3dbe1e5c9c2b08f5909d6de55dfd7349c2cb026684b3cb5a9971615a9b72657187eb5c9918cdfafc5ab65ada86e3a2ae745cbb432ae7150355caef1f1c55fd3f52db9c0f191dc9348bb7ccea5f90784433896df3422c434f8fff591741628388924f69af7f5cb9dd73ed268c3d379270a55efa18e8275200be8888b4e98f43d6455cb032b0c392477fee9161d68ae4477e6aa5529aebc4f7e10d5ca1c20b93fe7fb1c37b1090ccdfc55171f0b0ceb2690c6229e11bef0dc28f5f59862d7728d8f3eb5241af89ab41d677e6d76ca78aa43555cb654b531dad9d420b223e4280304501bb4d66b77246c1ec024929e9efecc9102e0f393e1a1177ae026a93b78cee51d4ee3c81f522c7247fce594705015175d937170cb1c4dd1293801afc092d1f56b82afd3a267b5dcdbdd041b744fb609ab246da1be14f5477ba8f02219016598149c81487eb77791bd1298dac60ead5edb3671da4a6173e3f4e1a028ae0c2f57395ab1b314bb99e5086efb0e2d244bba6280d4a10274c28c44ed64301b2bb461f74961dbd755b0ac2f0205f23c093f473a13d69b44f953276008ff58fb7050ee13b61e17af1271cc7c83eb1b47a00d830226c8621c96a0081971a4c9b9deb31c68aaedad2d117c64597bbae713a534ae6c2029769df94063bfd8a51f667e280bd850a7c2e056baa97a92d54c04a567c1fa71b81e217f689de1af78085dd67af41a271c4868404acd797817b75f58e498784a90ac69089db6f6f24ccb99f41a116e2d77f5713a7cf353eb25752da3e952f361a128d98ef17e7521f5f4237ef966c6dfe44cd3722a8762c60471c993ea6fa7f1c7d7ac58184ac6965d56a686f27940c0f0449ad9ba7dcad347700fe2a84c176fc30cefda6530fb1e18a224743cca602c225170a23a7de1e285d26a46130a3dab7c104d278b0d5b10f3db420ffe6cf10b056877e8420e943eaef8508fb38974f2fa30ebd40b61b20df80133803932899d1ebe3daa6ddeda82457832d0d9090c1a2960225d1d64fcd4ca53eb41198a797f4b25afc2714f4cc5f61dbdbaf60eb63d7a467f3fd4db8f44af0605349d52de2222c11aff6bbda500aa74f384674116a838cb39347940b311daff39ece8134d9c5599372d1605356479173444377f6e14723d274c044114061f19ad20a8397eb8480c900deb103ea9b49493223b8a69b7c3883e84899577897f3fea9888f7ae8bb9e739d8ca5047bc3acda6bb9e401cc241cb50e8bae3a5dc730802d1d803cec7336564a5b7311e0f399ce1ea8de7eecdcdd07675e9b626d214aee3dfee27a6bee3fac7c4b9481fe3ebc9d9ef6ed99372d55fc9ebdc46f034575d047fd6fce436a60efc85b903d0ad0c15258f3a9bb35e4e21330026b2cc4eb26093f742c0426de5f0c5e3093c76f2c6f65d2a8843ae500a901f02e9e1484c2ee18e1e9919b4c4451958e0fc415f6a5ff6b602b79f7996943f57caf7853f59ca6453a690dfebf45565dca5a8d2cc7df8fea46e9b44336702f3927790c5ddda73df955c401fc005d76283d1e58ed3f94213cf04e292ab26c6798bf89bdcbfb6b2026b1e1655a176003bd88942030d9f40de98cf20f1424f2822efc78fc1529477c4c1c0dd0c7d94b7b2f5dddc0ededb5190abec24db757fe01ce456143c5304035d0bdb4154b7d31aa142910d4c8c2b43ee32ce3f86197e868042e00f8fde7d3a9240cc68bfaa93b770398469a71a37a4574faccbfe5cb73395e961c6b421e95f30996249aac7e5afbec37d7e18a542112ca6b701806bce8e232840f0545d7ace19065b87895ea3c8827861118e2ff7348f7141a81e0caf0530fd6452be4f476b9386ef35313c9854c1e9c5a9d20774c1fd352caf9cea156487b2fa1aa5a786c1e43fbde904b38e9cb2c603c6ed9bd3f8319a8b6b064d4a5c56a268bd64c382ff57585c57c0c4dde7e168f7b630dd6a3ba586d25f3d0dea31397051da0514e88e7abb80d27e8d97d85f5005ccb525cbabac18f9303b20ffc1deff0a1ef014edf4fec15425a383bd7c701adf6652d60798968f4755ab1c8b5b5935dc2674d5fb6b2e76bbc5ee01d355b0591d40573c093ad14def1c8571ec5f1858e4781f739d3fa73927b08ab5901c983b9092d4c35b76311b174a387895c62634bd33a4eab9e0f4fc84dea83f4fc955f7d19900384934a80875352afc2403927e54a801b28754390f483e9c44b2bdf1b6a678236b5b6c9122b18af89f7ac997c200786610b9e565f487ecf20ac0062a7acc3681987e8d2f0ec8018764ce1ebbb5aff51f29cac5864023a51fca9253a5479eaa0cdf2389b55a1ffbd167691d3fac607ce58a97ce8f4c17a23b2163400def292496831dd722d946d505e5909b7ad6e0dbaa9f99ab410859090040f86255b0e488f2e96701b3f3b3f6d0ca5a26f878a6ac2619881a03b4959cf7111cb733d287df340416ca03eda7bd082d29f63587d8de92eba3ddfc921aeb9a2a399f44f634f346fac53ddb936df325fa95ad00fe5fcce5d8c6b8720c6c7bf21b933718b73209bfc03ea813c33c0ae816c5d01c360751677d62db85747134efbeb3a43d26d7fbc23966de93e5cb368b43785897537d6a9a0cba8c05f37c6c42de3f399d0540292da831d68c1cf60858c088f32e7b6b1083fc6697938a9641503b3d50971cc73e15066e4a36c7f831a1cecfd341199a5cf9544ac700a48f512879bc2af7054632746a5c9503abfbb49c4095fb0307f9cedc1d54f206e0c25b98847243517e9dce7", 0x1000, 0x9, 0x0, 0x0, r5}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000001380)="57bbe382db5bd5b714ec55f07f6c5ba3547df0251bdfd33f26887e6403d461a05d0f8a4f75ab8c28a120243ef39ec6aa13a7b4240927cf565c3daef07db71c4f812a9b76caa40e55693457523999d3b20a3b1198dafc504ae99893f2dcadbc6f5fd8f1fa817b71d0c8fc7977545749c1dd53628cc4e2e98ef873cc8d18d38122d508dd7ea12b239ba6326845ff20a0", 0x8f, 0x0, 0x0, 0x2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, &(0x7f0000001480)="d6e0efd1bd767869bbf2e71613ec2ed38e813c9cc9e0dc373f5741803cfb3769b06484c8b7a4a35c64f0a0f7ed5b6cc6aa30a66c95d615d5759b93932a439f856582f90c45aff3320f71d246ea1351ce121a9523b84137127782157acc9fc8dcb0c1215b2d1f6c80505e32f9859dad68ecea1960c52049445aadbd9ecac61b9cde9d268f64a22316bfec68a5bb73de6b3bdd1e2aea9845479cc9cd8fcd257444b49d0938f3a2689c350dca4d38a822b719b197ffb2", 0xb5, 0x5, 0x0, 0x3, r6}]) 14:13:47 executing program 5: [ 1848.975751] vfs_get_tree+0x8e/0x300 [ 1848.976176] __do_sys_fsconfig+0x8da/0xc20 [ 1848.976535] ? fscontext_read+0x310/0x310 [ 1848.976862] ? fput_many+0x2f/0x1a0 [ 1848.977169] ? __secure_computing+0x199/0x2f0 [ 1848.977536] do_syscall_64+0x33/0x40 [ 1848.977847] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1848.978248] RIP: 0033:0x7fef23554b19 [ 1848.978559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1848.980011] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1848.980642] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1848.981231] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1848.981814] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1848.982401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1848.982988] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1848.989090] audit: type=1326 audit(1710339227.130:5161): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1848.995423] audit: type=1326 audit(1710339227.130:5162): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:13:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf503000000000000) 14:13:47 executing program 4: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x1f, 0x6e, 0x35, 0x0, 0x6, 0xd040, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x0, 0x0, 0x6499704d, 0x1, 0xfffffffffffffbff, 0x9, 0x3f, 0x0, 0x28a5, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000100)=0x4, 0x2, 0x4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="980000002000210c0010000000000000020000006c009680080022000a010101acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a461095362e1a7f5dcd1783eb255cc953405e0ba35a380c00ff00c8990000000000001800ff800a0015002c5c282d9700000008002d00e1659ceba236894990f8001699c3", @ANYRES32=0x0, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x5, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x6, @mcast2, 0xc7}}, 0x0, 0x0, 0x16, 0x0, "4e9b7df2de6d399cca9bb72a6453d68651ad0fde9780843a40f75e7846e8c9564a06f161703016167d0ae171ed83dcc674cb2e03b30023552d433ae366d6d751e85565dcc76d01d96a7a2cee49cc8917"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x9bbb) [ 1849.005991] audit: type=1326 audit(1710339227.132:5163): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1849.012136] audit: type=1326 audit(1710339227.133:5164): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1849.019460] audit: type=1326 audit(1710339227.133:5165): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12374 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1849.038477] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:13:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x100000000000000) 14:13:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xfeffffff00000000) 14:13:47 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x0, 0x0, 0xffffffff}}) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000140)="109200818d8b502a9c413bd86ef408cfd17531d055446bc6660cd6a4cc27549953af752f1cb0a92d5c46f2cee6d880255f9122ea71f4c7fb636b1f712b74243c55aba2e48c5f4d8d6cd39add4964d059b30d6750d7b079db5266e0589e5b6216e7cf024980637ca6f9387c75b1f1fd5f2d5d6456a1c8cf98acc5ba1818f02fc7319cad", 0x83) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='/proc/self/exe\x00', 0x129101, 0xab) r3 = fsmount(r1, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x27, &(0x7f0000000300)=""/42, &(0x7f00000003c0)=0x2a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x5, 0x80000}) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x31d, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r4, 0x0, 0x20d315) syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x800) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x48040, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c673100"]) 14:13:47 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:13:47 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') 14:13:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2020, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) [ 1849.177854] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:13:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x200000000000000) 14:14:02 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xfffffffffffffffd}) openat(r0, &(0x7f0000000000)='./file0\x00', 0x4800, 0xa6) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x20000, 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000040)={{0x1}, 0x100, './file0\x00'}) 14:14:02 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xb33400, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100800, &(0x7f0000001c00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="1bfdfbc8a3d0e6aed8cfb9f3a19ad296c8f30ad61980e2de2cff10fc43f274fe5fe7fb541dfa4268cb97b5d9e4e4429744fbeb0b027c648cefb35b8bb28c25c4318334a46becddb40b3370deb34c1db41a9536f9bf5e32d73177283c0f790b7f0c8e9c53b45ac0e3eea1d3d48c83fda3c3f505d5d7fd3f9c2f2172538c2d972cc633a7ffbef6af4920d8d2d919210c65ad95077ac8f67ad74503efcd1d93a8970a30cf22a772a817a317f7fc4e47dc9c98f9e138c242ff071f0907f6d2b2b8490ad915c21b5cb6e19ed3caf14a53eada7e", @ANYRESDEC]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x2013c1a, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x4) unshare(0x48020200) [ 1864.689458] kauditd_printk_skb: 52 callbacks suppressed [ 1864.689479] audit: type=1326 audit(1710339242.856:5218): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12437 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1864.697010] audit: type=1326 audit(1710339242.857:5219): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12437 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1864.702940] FAULT_INJECTION: forcing a failure. [ 1864.702940] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.703991] CPU: 1 PID: 12438 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1864.704574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.705215] Call Trace: [ 1864.705495] dump_stack+0x107/0x167 [ 1864.705814] should_fail.cold+0x5/0xa [ 1864.706198] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1864.706638] should_failslab+0x5/0x20 [ 1864.707034] kmem_cache_alloc_trace+0x55/0x320 [ 1864.707427] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.707956] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1864.708398] __list_lru_init+0x44d/0x890 [ 1864.708826] alloc_super+0x8b8/0xa90 [ 1864.709151] ? fput+0x20/0x20 [ 1864.709480] sget_fc+0x13e/0x750 [ 1864.709754] ? set_anon_super+0xc0/0xc0 [ 1864.710167] ? rpc_kill_sb+0x1b0/0x1b0 [ 1864.710510] get_tree_keyed+0x55/0x210 [ 1864.710910] vfs_get_tree+0x8e/0x300 [ 1864.711232] __do_sys_fsconfig+0x8da/0xc20 [ 1864.711667] ? fscontext_read+0x310/0x310 [ 1864.712024] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1864.712601] ? __secure_computing+0x199/0x2f0 [ 1864.712997] do_syscall_64+0x33/0x40 [ 1864.713379] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1864.713788] RIP: 0033:0x7fef23554b19 [ 1864.714165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.715712] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1864.716002] audit: type=1326 audit(1710339242.857:5220): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12437 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1864.716498] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1864.716508] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1864.716523] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.721007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.721917] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1864.725904] audit: type=1326 audit(1710339242.857:5221): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12437 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 14:14:02 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000", 0xc, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x300000000000000) 14:14:02 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 53) 14:14:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xffff1f0000000000) 14:14:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:14:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x200, 0xa, 0x4}, 0x18) symlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000680)='./file1\x00') openat(r2, &(0x7f00000001c0)='./file1\x00', 0x4001, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005, 0x5}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x5, 0xfffffff7, 0x0, 0x8, 0xff, 0x100000000}, {0xfff, 0x2, 0x37, 0x8001, 0x9, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x2800, 0x80) sendmmsg$unix(r5, &(0x7f0000005000)=[{{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000740)="c0dd81cd863f22da3d274f130d25a000e8f8ebdf8a4ae9d2f2eafe101731e2d47b8dc05c971e5e6013a106a8e03455323bf89afa4757f2bc998392275cad296c8232222bafe3c9f3f1f497d2501ad5dd794089b1b40d84dd9c568db78227eed03c02e592b6b1ae9027cb9c8f2a69dedf5db7fb197f54fed327c17a61c346f48d679b30a1351bf800f1a201150b196917bd3bb08a0b0c01e0ab20a381f48ba6", 0x9f}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000980)=[{&(0x7f00000008c0)="8eeb449f6f8755fec6c95e132e978181a4c4fd83747f122ff2bda7316d5d2bf51bf2f636b8777ed29e9ecda27a1e938e42dc0097788993d52c9ee1ad37a022fc7403737e1e5097c10a8ebb91bfeeeef6eeaa02a321cc3e07b0375b2326caa665c07cd5b29a864a50ee10700fa37efc6b6ac635d438b397dc5db2cf099ea533a84f8ecf", 0x83}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0001000000120600000000000000edff", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x4}}], 0x2, 0x815) write(r4, &(0x7f0000000240)="01", 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) syz_io_uring_complete(0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x650483, 0x120) sendfile(r0, r3, 0x0, 0x20d315) [ 1864.732462] audit: type=1326 audit(1710339242.865:5222): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12439 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1864.738632] audit: type=1326 audit(1710339242.865:5223): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12439 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1864.752123] audit: type=1326 audit(1710339242.865:5224): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12439 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1864.758662] audit: type=1326 audit(1710339242.865:5225): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12439 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1864.763549] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1864.772141] audit: type=1326 audit(1710339242.873:5226): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12437 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1864.782390] audit: type=1326 audit(1710339242.873:5227): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12437 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:14:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x400000000000000) 14:14:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xffffff7f00000000) 14:14:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000240008000f801", 0x17}, {0x0, 0x0, 0x5fe}], 0x0, &(0x7f0000000040)={[{@fat=@check_strict}]}) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4004, &(0x7f0000000140)={[{@subsystem='rdma'}, {@subsystem='freezer'}, {@subsystem='freezer'}, {@subsystem='devices'}, {@memory_localevents}, {}, {@memory_localevents}, {}, {@memory_localevents}], [{@smackfsdef}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 14:14:03 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:03 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 54) 14:14:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000}, 0x0, 0x0, 0xd7b8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = dup2(r0, r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x62, 0xce, 0x8, 0x6, 0xfffffff9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00007c19080066696c65300000000000"]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) dup(r5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendfile(r2, r3, 0x0, 0xffff) 14:14:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xffffffff00000000) 14:14:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x101880) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000300)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x3) ftruncate(0xffffffffffffffff, 0x8) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000640)='asymmetric\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)='{{@\x04\\+\x00', 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000000)="016e932c120574c81633caf9416ab99da5", 0x11, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r2}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r3) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x544d0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x8, 0x0, 0x5, 0xfffffffffffffffe}, r4, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1864.911862] cgroup2: Unknown parameter 'rdma' [ 1864.929921] FAULT_INJECTION: forcing a failure. [ 1864.929921] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.930930] CPU: 0 PID: 12473 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1864.931530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1864.932246] Call Trace: [ 1864.932499] dump_stack+0x107/0x167 [ 1864.932816] should_fail.cold+0x5/0xa [ 1864.933145] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1864.933589] should_failslab+0x5/0x20 [ 1864.933922] kmem_cache_alloc_trace+0x55/0x320 [ 1864.934333] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1864.934773] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1864.935188] __list_lru_init+0x44d/0x890 [ 1864.935552] alloc_super+0x8b8/0xa90 [ 1864.935880] ? fput+0x20/0x20 [ 1864.936158] sget_fc+0x13e/0x750 [ 1864.936468] ? set_anon_super+0xc0/0xc0 [ 1864.936814] ? rpc_kill_sb+0x1b0/0x1b0 [ 1864.937149] get_tree_keyed+0x55/0x210 [ 1864.937495] vfs_get_tree+0x8e/0x300 [ 1864.937824] __do_sys_fsconfig+0x8da/0xc20 [ 1864.938191] ? fscontext_read+0x310/0x310 [ 1864.938565] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1864.939047] ? __secure_computing+0x199/0x2f0 [ 1864.939453] do_syscall_64+0x33/0x40 [ 1864.939791] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1864.940219] RIP: 0033:0x7fef23554b19 14:14:03 executing program 4: ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000240)=""/213) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x71, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r2 = eventfd2(0x6, 0x1) kcmp(0x0, r1, 0x7, r0, r2) request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f00000000c0)='keyring\x00', 0xfffffffffffffffd) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) [ 1864.940716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1864.942388] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1864.943079] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1864.943714] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1864.944350] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1864.945002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1864.945670] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1865.004478] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1878.379466] kauditd_printk_skb: 66 callbacks suppressed [ 1878.379482] audit: type=1326 audit(1710339256.549:5294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12508 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1878.389662] audit: type=1326 audit(1710339256.560:5295): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12508 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1878.392585] audit: type=1326 audit(1710339256.560:5296): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12508 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1878.397976] audit: type=1326 audit(1710339256.560:5297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12508 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 14:14:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf8, 0x84, 0xff, 0x1f, 0x0, 0x200, 0x1010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x50, 0x3}, 0x40, 0x80000001, 0xc94, 0x6, 0x2, 0x50, 0x7, 0x0, 0x4, 0x0, 0x6}, r1, 0x10, r0, 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000100)) 14:14:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:16 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) 14:14:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x500000000000000) 14:14:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 55) 14:14:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e53a9222cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r4, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r8, 0x0, r7) accept(r2, &(0x7f0000001800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000001880)=0x80) [ 1878.406010] FAULT_INJECTION: forcing a failure. [ 1878.406010] name failslab, interval 1, probability 0, space 0, times 0 sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000000c0)="eb73845e9b9a0ccf3259f64f9761920e021f34f4decdc2d8f1641a974fd3d1d351645da7f579103ef5116b431c8938c01878bcf53346122f58bb301cfcf56e6ff84e87945f9075e30a772a4a7c12e86dbeda183dd6bb15b25a5adb", 0x5b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="82c4a7ccd04edc5c391159b398f18d6372b9b7fd30d2d7cf29deb3f99f912cf832568fa2169cf6c2a9c65f5c03caf1a2767935e78afef4952d1a8d737df0bd518be0a952305acd5df5779152de776f961119c6786349757167d86c76db39bbcec6af9f909fefe661b5a1a2b9499100f194a1711a", 0x74}, {&(0x7f00000011c0)="74df7b65768af252da4c06fb829a10d84f9bae6d71a98576911c97507969e8518b8109c968e4d6aa41cf9f53a6b71465957554cb3e8b2c5446e5fcd31ee4f2f6844658585ec15c3727c76142bcfdcabad1abd7314fc95deebf3050ce2db8bc6ddb27a4ba54c70bbb1ef86d330068cd4c4d20fe610d82290bbd47047074f96715b99a5276cbc7b0c77db9e51b17389444a5d7209baf74fb7dacf417f42062055a6a9b", 0xa2}, {&(0x7f0000001280)="55375517a19a37a65c11942fcc8fbeb453f7c8e797f97012f54e603e7759b5c233e3b246b853aea8623571a44cf8d1276330d1140ccdce314a1021812867f3f9a5688c53a8d7a5f21d0f3198b921bee5f3e538b3ad610f8511257862d85effad7d8bcaca39fba63c2de8b8e6aa7dc536a728c5ac26f94fff9241eb201f3c17afbf3b26d8b02217029bd0956a0b81ecfb0a695524d7160056c3bb4105c207c25e04c998664a77abf73bb52dbd1bf32910d29103bf136507e3694bdf4c346ce059ff4f90ba0527bb89c0744b2bdfcc51b539", 0xd1}, {&(0x7f0000001380)="c4728899a958200885399ce8699ef1943eec70532fe0d1bc2d65a13d793a57a2c37e9a2f6ea2dea26f03e6e19b3cf5a5142dae0085ca2b66d7c8768975c4e8e8704f0d5b7f48622b54d79128afbacc3db3294773b3352dc14251946c055caf214859dc29b2d82ba6e234d6e250e5a454d8b3999f", 0x74}, {&(0x7f0000001400)="5a93821a8bea32ccfe0d60d4d6c4f4de5b766d1a5e7620dd6b0a3d03262107e7212937bb03776e2e41446ee3313b217de60038f042266579518dd04c7f5a609fe098b18ef5272ed138f1779a7b4b1042fd4277f8c735c5381cd476a79f45aa1cf6a765c00cef04bb2d08bc91ec", 0x6d}, {&(0x7f0000001480)="0c388069b402246b50c60ee7a2f3419a7afba1dd89df75e1ac5156a125711100cc35a934368be4494e", 0x29}], 0x8, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x98, 0x4}}, {{&(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)="3fae88d35523b0fa2a30652d08627c6a56b19df9dca917d9c957061649855d9f107bae36412c0c2397a6703e6a75e8de9d3c21e53f61a2fdb7149ca22a882cffaff61637fcd830153a", 0x49}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="000000001c0000000000a0440baeb4576a530000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20000840}}], 0x2, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0xffff) 14:14:16 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100800, &(0x7f0000001c00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="1bfdfbc8a3d0e6aed8cfb9f3a19ad296c8f30ad61980e2de2cff10fc43f274fe5fe7fb541dfa4268cb97b5d9e4e4429744fbeb0b027c648cefb35b8bb28c25c4318334a46becddb40b3370deb34c1db41a9536f9bf5e32d73177283c0f790b7f0c8e9c53b45ac0e3eea1d3d48c83fda3c3f505d5d7fd3f9c2f2172538c2d972cc633a7ffbef6af4920d8d2d919210c65ad95077ac8f67ad74503efcd1d93a8970a30cf22a772a817a317f7fc4e47dc9c98f9e138c242ff071f0907f6d2b2b8490ad915c21b5cb6e19ed3caf14a53eada7e", @ANYRESDEC]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x2013c1a, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 14:14:16 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) r3 = dup2(r1, r0) fsmount(r3, 0x1, 0xf) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast1, 0x4}, 0x1c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) [ 1878.408115] CPU: 1 PID: 12509 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1878.409650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.411145] Call Trace: [ 1878.411671] dump_stack+0x107/0x167 [ 1878.412065] audit: type=1326 audit(1710339256.571:5299): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12504 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1878.412327] should_fail.cold+0x5/0xa [ 1878.412363] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1878.416535] should_failslab+0x5/0x20 [ 1878.417229] kmem_cache_alloc_trace+0x55/0x320 [ 1878.417987] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.418838] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1878.419624] __list_lru_init+0x44d/0x890 [ 1878.420303] alloc_super+0x8b8/0xa90 [ 1878.420935] ? fput+0x20/0x20 [ 1878.421456] sget_fc+0x13e/0x750 [ 1878.422018] ? set_anon_super+0xc0/0xc0 [ 1878.422680] ? rpc_kill_sb+0x1b0/0x1b0 [ 1878.423021] audit: type=1326 audit(1710339256.574:5300): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12505 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1878.423319] get_tree_keyed+0x55/0x210 [ 1878.423343] vfs_get_tree+0x8e/0x300 [ 1878.427139] __do_sys_fsconfig+0x8da/0xc20 [ 1878.427844] ? fscontext_read+0x310/0x310 [ 1878.428547] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1878.429449] ? __secure_computing+0x199/0x2f0 [ 1878.430201] do_syscall_64+0x33/0x40 [ 1878.430819] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1878.431661] RIP: 0033:0x7fef23554b19 [ 1878.432274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.435301] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1878.436561] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1878.437733] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1878.437993] audit: type=1326 audit(1710339256.560:5298): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12508 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef235075ff code=0x7ffc0000 [ 1878.438899] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.438913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1878.438926] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1878.467945] audit: type=1326 audit(1710339256.575:5301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12508 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1878.476451] audit: type=1326 audit(1710339256.615:5302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12504 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1878.483864] audit: type=1326 audit(1710339256.615:5303): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12504 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1878.536209] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 14:14:16 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:14:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x600000000000000) 14:14:16 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 56) 14:14:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d400", 0xe, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e53a9222cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r4, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r8, 0x0, r7) accept(r2, &(0x7f0000001800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000001880)=0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000000c0)="eb73845e9b9a0ccf3259f64f9761920e021f34f4decdc2d8f1641a974fd3d1d351645da7f579103ef5116b431c8938c01878bcf53346122f58bb301cfcf56e6ff84e87945f9075e30a772a4a7c12e86dbeda183dd6bb15b25a5adb", 0x5b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="82c4a7ccd04edc5c391159b398f18d6372b9b7fd30d2d7cf29deb3f99f912cf832568fa2169cf6c2a9c65f5c03caf1a2767935e78afef4952d1a8d737df0bd518be0a952305acd5df5779152de776f961119c6786349757167d86c76db39bbcec6af9f909fefe661b5a1a2b9499100f194a1711a", 0x74}, {&(0x7f00000011c0)="74df7b65768af252da4c06fb829a10d84f9bae6d71a98576911c97507969e8518b8109c968e4d6aa41cf9f53a6b71465957554cb3e8b2c5446e5fcd31ee4f2f6844658585ec15c3727c76142bcfdcabad1abd7314fc95deebf3050ce2db8bc6ddb27a4ba54c70bbb1ef86d330068cd4c4d20fe610d82290bbd47047074f96715b99a5276cbc7b0c77db9e51b17389444a5d7209baf74fb7dacf417f42062055a6a9b", 0xa2}, {&(0x7f0000001280)="55375517a19a37a65c11942fcc8fbeb453f7c8e797f97012f54e603e7759b5c233e3b246b853aea8623571a44cf8d1276330d1140ccdce314a1021812867f3f9a5688c53a8d7a5f21d0f3198b921bee5f3e538b3ad610f8511257862d85effad7d8bcaca39fba63c2de8b8e6aa7dc536a728c5ac26f94fff9241eb201f3c17afbf3b26d8b02217029bd0956a0b81ecfb0a695524d7160056c3bb4105c207c25e04c998664a77abf73bb52dbd1bf32910d29103bf136507e3694bdf4c346ce059ff4f90ba0527bb89c0744b2bdfcc51b539", 0xd1}, {&(0x7f0000001380)="c4728899a958200885399ce8699ef1943eec70532fe0d1bc2d65a13d793a57a2c37e9a2f6ea2dea26f03e6e19b3cf5a5142dae0085ca2b66d7c8768975c4e8e8704f0d5b7f48622b54d79128afbacc3db3294773b3352dc14251946c055caf214859dc29b2d82ba6e234d6e250e5a454d8b3999f", 0x74}, {&(0x7f0000001400)="5a93821a8bea32ccfe0d60d4d6c4f4de5b766d1a5e7620dd6b0a3d03262107e7212937bb03776e2e41446ee3313b217de60038f042266579518dd04c7f5a609fe098b18ef5272ed138f1779a7b4b1042fd4277f8c735c5381cd476a79f45aa1cf6a765c00cef04bb2d08bc91ec", 0x6d}, {&(0x7f0000001480)="0c388069b402246b50c60ee7a2f3419a7afba1dd89df75e1ac5156a125711100cc35a934368be4494e", 0x29}], 0x8, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x98, 0x4}}, {{&(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)="3fae88d35523b0fa2a30652d08627c6a56b19df9dca917d9c957061649855d9f107bae36412c0c2397a6703e6a75e8de9d3c21e53f61a2fdb7149ca22a882cffaff61637fcd830153a", 0x49}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="000000001c0000000000a0440baeb4576a530000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20000840}}], 0x2, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0xffff) [ 1878.682210] FAULT_INJECTION: forcing a failure. [ 1878.682210] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.684099] CPU: 1 PID: 12536 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1878.685273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1878.686667] Call Trace: [ 1878.687117] dump_stack+0x107/0x167 [ 1878.687750] should_fail.cold+0x5/0xa [ 1878.688406] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1878.689272] should_failslab+0x5/0x20 [ 1878.690036] kmem_cache_alloc_trace+0x55/0x320 [ 1878.691005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1878.692078] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1878.693079] __list_lru_init+0x44d/0x890 [ 1878.693764] alloc_super+0x8b8/0xa90 [ 1878.694402] ? fput+0x20/0x20 [ 1878.694908] sget_fc+0x13e/0x750 [ 1878.695484] ? set_anon_super+0xc0/0xc0 [ 1878.696131] ? rpc_kill_sb+0x1b0/0x1b0 [ 1878.696829] get_tree_keyed+0x55/0x210 [ 1878.697481] vfs_get_tree+0x8e/0x300 [ 1878.698110] __do_sys_fsconfig+0x8da/0xc20 [ 1878.698817] ? fscontext_read+0x310/0x310 [ 1878.699512] ? fput_many+0x2f/0x1a0 14:14:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x700000000000000) [ 1878.700118] ? __secure_computing+0x199/0x2f0 [ 1878.701092] do_syscall_64+0x33/0x40 [ 1878.701744] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1878.702600] RIP: 0033:0x7fef23554b19 [ 1878.703219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1878.706306] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1878.707610] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1878.708811] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1878.709998] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1878.711194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:14:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0x7}, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xc00}}, './file0\x00'}) dup2(r2, r4) fsmount(0xffffffffffffffff, 0x0, 0x1) [ 1878.712424] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:14:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x5cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x3, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) fcntl$dupfd(r4, 0x0, r2) sendfile(r1, r3, 0x0, 0xffff) [ 1878.811579] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1893.893784] kauditd_printk_skb: 126 callbacks suppressed [ 1893.893804] audit: type=1326 audit(1710339272.064:5430): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12563 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1893.923537] audit: type=1326 audit(1710339272.093:5431): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1893.940511] audit: type=1326 audit(1710339272.104:5432): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12563 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:14:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 57) 14:14:32 executing program 4: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000001780)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0]) chdir(&(0x7f0000000040)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="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", 0xfa}, {&(0x7f0000000500)="197cdca6400f1d566d9cd0294fad4c6af456582ddec9d5121044782af2164ca49f12184e3f0c8a4c9e4d7faa7d2782a4f3c62b59141b96ff795166492edb1db30bdaea7f6687e6baabaa74f8bab7e11c117924344eac168626603832669ad0730ad822ff31e6fc8f499c62974101f71422ac99b0a8ca2663c529e67dd3aa6614a7c21b28da38459f03558f6be45685587a33b9785ef98e3b57a7495c9fe87d2d4afa3fe8d60ad1243dd1", 0xaa}, {&(0x7f00000005c0)="f9897455f11c60dd077e4514f9b0b48e873033e052c36e62f45680a270518ec39315e2c87f965fcf9564411a138e0ecb7cc7b4864d304158a1ee128cd3d74822fac38bdaa012caced8efe0473156ff7baf8cdc02981c4b7fbf4eaae4eddce2ac3cb64c2cb73a64165bb4849a60cb1340d484ebaefe1513c7fe3e2fbd5a222d322e8e7ac8d15c133037a3caae6129d446502f0ad8f01b63ba4ba0bf313193a2ae1f2d421813c12b90806970f564827b5dae93d4bf675e972a811fc1f07c46f449de7c5f2cda69", 0xc6}, {&(0x7f0000000280)="e067988772726e1deeb04702d54362f61d4cd6b7c9d9bfd03509d8ce22419de3deb96f36a10c45ee60ab40cdfdac52c31f5eaaa36ebdb58a0000665f586ef0b0277abc0f2e", 0x45}], 0x4, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1e}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffff9}}], 0xf0}, 0x20000000) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000440)={0x100, 0x4}) pwrite64(r2, &(0x7f0000000180)="990845932412c40ba9a2a889ab73898e3466e8ac998a2b8e35455f37f459d0a89ddf8393fec303da4179ed21e3be48408b1491cf07ce675a50c961e52901c1515d4f22a82fa3f099a27b3f5e190c9b201173f932e8a48945237d1c94c39164f9dfd0bdcfd8f17738db4ca55b669f4c6d92fe1890b9864d", 0x77, 0x5) r3 = getpgid(0xffffffffffffffff) perf_event_open(0x0, r3, 0x1, 0xffffffffffffffff, 0x0) prlimit64(r3, 0x0, &(0x7f0000000300)={0x7, 0x2}, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 14:14:32 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000800) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0xfffc}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) 14:14:32 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x621}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 14:14:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xa00000000000000) 14:14:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e53a9222cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r4, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r8, 0x0, r7) accept(r2, &(0x7f0000001800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000001880)=0x80) [ 1893.954738] FAULT_INJECTION: forcing a failure. [ 1893.954738] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.956599] CPU: 0 PID: 12564 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1893.957690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1893.958997] Call Trace: [ 1893.959428] dump_stack+0x107/0x167 [ 1893.959997] should_fail.cold+0x5/0xa [ 1893.960629] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1893.961431] should_failslab+0x5/0x20 [ 1893.962016] kmem_cache_alloc_trace+0x55/0x320 [ 1893.962733] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1893.963534] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1893.964301] __list_lru_init+0x44d/0x890 [ 1893.964970] alloc_super+0x8b8/0xa90 [ 1893.965564] ? fput+0x20/0x20 [ 1893.966045] sget_fc+0x13e/0x750 [ 1893.966583] ? set_anon_super+0xc0/0xc0 [ 1893.967194] ? rpc_kill_sb+0x1b0/0x1b0 [ 1893.967805] get_tree_keyed+0x55/0x210 [ 1893.968429] vfs_get_tree+0x8e/0x300 [ 1893.969067] __do_sys_fsconfig+0x8da/0xc20 [ 1893.969753] ? fscontext_read+0x310/0x310 [ 1893.970451] ? fput_many+0x2f/0x1a0 [ 1893.971023] ? __secure_computing+0x199/0x2f0 [ 1893.971794] do_syscall_64+0x33/0x40 [ 1893.972395] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1893.973258] RIP: 0033:0x7fef23554b19 [ 1893.973893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1893.976954] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1893.978227] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1893.979430] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1893.980638] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1893.981827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.983015] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000000c0)="eb73845e9b9a0ccf3259f64f9761920e021f34f4decdc2d8f1641a974fd3d1d351645da7f579103ef5116b431c8938c01878bcf53346122f58bb301cfcf56e6ff84e87945f9075e30a772a4a7c12e86dbeda183dd6bb15b25a5adb", 0x5b}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="82c4a7ccd04edc5c391159b398f18d6372b9b7fd30d2d7cf29deb3f99f912cf832568fa2169cf6c2a9c65f5c03caf1a2767935e78afef4952d1a8d737df0bd518be0a952305acd5df5779152de776f961119c6786349757167d86c76db39bbcec6af9f909fefe661b5a1a2b9499100f194a1711a", 0x74}, {&(0x7f00000011c0)="74df7b65768af252da4c06fb829a10d84f9bae6d71a98576911c97507969e8518b8109c968e4d6aa41cf9f53a6b71465957554cb3e8b2c5446e5fcd31ee4f2f6844658585ec15c3727c76142bcfdcabad1abd7314fc95deebf3050ce2db8bc6ddb27a4ba54c70bbb1ef86d330068cd4c4d20fe610d82290bbd47047074f96715b99a5276cbc7b0c77db9e51b17389444a5d7209baf74fb7dacf417f42062055a6a9b", 0xa2}, {&(0x7f0000001280)="55375517a19a37a65c11942fcc8fbeb453f7c8e797f97012f54e603e7759b5c233e3b246b853aea8623571a44cf8d1276330d1140ccdce314a1021812867f3f9a5688c53a8d7a5f21d0f3198b921bee5f3e538b3ad610f8511257862d85effad7d8bcaca39fba63c2de8b8e6aa7dc536a728c5ac26f94fff9241eb201f3c17afbf3b26d8b02217029bd0956a0b81ecfb0a695524d7160056c3bb4105c207c25e04c998664a77abf73bb52dbd1bf32910d29103bf136507e3694bdf4c346ce059ff4f90ba0527bb89c0744b2bdfcc51b539", 0xd1}, {&(0x7f0000001380)="c4728899a958200885399ce8699ef1943eec70532fe0d1bc2d65a13d793a57a2c37e9a2f6ea2dea26f03e6e19b3cf5a5142dae0085ca2b66d7c8768975c4e8e8704f0d5b7f48622b54d79128afbacc3db3294773b3352dc14251946c055caf214859dc29b2d82ba6e234d6e250e5a454d8b3999f", 0x74}, {&(0x7f0000001400)="5a93821a8bea32ccfe0d60d4d6c4f4de5b766d1a5e7620dd6b0a3d03262107e7212937bb03776e2e41446ee3313b217de60038f042266579518dd04c7f5a609fe098b18ef5272ed138f1779a7b4b1042fd4277f8c735c5381cd476a79f45aa1cf6a765c00cef04bb2d08bc91ec", 0x6d}, {&(0x7f0000001480)="0c388069b402246b50c60ee7a2f3419a7afba1dd89df75e1ac5156a125711100cc35a934368be4494e", 0x29}], 0x8, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x98, 0x4}}, {{&(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001740)="3fae88d35523b0fa2a30652d08627c6a56b19df9dca917d9c957061649855d9f107bae36412c0c2397a6703e6a75e8de9d3c21e53f61a2fdb7149ca22a882cffaff61637fcd830153a", 0x49}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r7, @ANYBLOB="000000001c0000000000a0440baeb4576a530000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x20000840}}], 0x2, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r10, 0x0, 0xffff) 14:14:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x84, 0x5}, 0x18) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) [ 1893.985721] audit: type=1326 audit(1710339272.107:5434): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1894.005420] audit: type=1326 audit(1710339272.107:5435): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1894.031044] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1894.034179] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1894.035878] EXT4-fs (loop5): group descriptors corrupted! [ 1894.041517] audit: type=1326 audit(1710339272.104:5433): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12563 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1894.052080] audit: type=1326 audit(1710339272.110:5436): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12563 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1894.061993] audit: type=1326 audit(1710339272.111:5437): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 14:14:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x2103000000000000) [ 1894.072445] audit: type=1326 audit(1710339272.111:5438): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1894.083451] audit: type=1326 audit(1710339272.111:5439): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 14:14:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) r2 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2]) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000140)=0x1e) fallocate(0xffffffffffffffff, 0x10, 0x3, 0xc448) 14:14:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 58) 14:14:32 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:32 executing program 1: pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getpeername(r2, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80) write(r1, &(0x7f0000000000)="e7", 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) splice(r0, 0x0, r3, 0x0, 0x400000000003, 0x0) write(r1, &(0x7f00000000c0)="e7", 0x1) [ 1894.175341] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 1894.215493] FAULT_INJECTION: forcing a failure. [ 1894.215493] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.216964] CPU: 1 PID: 12600 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1894.217806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1894.218799] Call Trace: [ 1894.219142] dump_stack+0x107/0x167 [ 1894.219604] should_fail.cold+0x5/0xa [ 1894.220076] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1894.220825] should_failslab+0x5/0x20 [ 1894.221294] kmem_cache_alloc_trace+0x55/0x320 [ 1894.221850] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1894.222468] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1894.223067] __list_lru_init+0x44d/0x890 [ 1894.223591] alloc_super+0x8b8/0xa90 [ 1894.224029] ? fput+0x20/0x20 [ 1894.224437] sget_fc+0x13e/0x750 [ 1894.224857] ? set_anon_super+0xc0/0xc0 [ 1894.225351] ? rpc_kill_sb+0x1b0/0x1b0 [ 1894.225818] get_tree_keyed+0x55/0x210 [ 1894.226293] vfs_get_tree+0x8e/0x300 [ 1894.226782] __do_sys_fsconfig+0x8da/0xc20 [ 1894.227341] ? fscontext_read+0x310/0x310 [ 1894.227868] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1894.228540] ? __secure_computing+0x199/0x2f0 [ 1894.229080] do_syscall_64+0x33/0x40 [ 1894.229521] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1894.230132] RIP: 0033:0x7fef23554b19 [ 1894.230611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1894.232795] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1894.233705] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1894.234594] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1894.235437] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1894.236316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1894.237177] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1894.239216] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1894.240911] EXT4-fs (loop5): group descriptors corrupted! 14:14:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 59) 14:14:46 executing program 3: r0 = syz_io_uring_setup(0x4d7f, &(0x7f00000002c0), &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x80010, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xf8b) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@dontfrag={{0x14, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f00000000c0)={'macvlan1\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:14:46 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x285a, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0x0, r1) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000740)=0x40) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000040)="de8a640644309ecfba7be4a2a00d133c208b8a573064432448d1cfb3cc0fbc119a76fdf584776cd7d32d1ee7f8fdf1d9", 0x30}, {&(0x7f0000000140)="c3783e9f807bf7b054cb6d20f38496276aea9f4b1beff8ad2038a22ab2a1ed568e9866978d60bf8651dbcad9e8e5ce217af369c9a4fe342374ed3b154f2c934d4a53f468e4f47058affdcad79b09717984085f5bf465fe70d4290be9b15476684a417ab83881e044cd117b8a9416877923b934b2c967fda48f4b0e40f66a18001324368f0d441c7acb883fa38054da7e1f652429b36acdd379194ed2dbecf3b621f28cf37c655756509923fa473e5dea7d0c290b79caa7e14dcd3e11a6fdcc8747cf6c772ac700", 0xc7}, {&(0x7f0000000240)="fd96e52bd0cc4ceb335f21f033074a78c50af08c4d288a21d6a6b6b101184374a16352373f50837e711b0aab0b3bb25cf448e9e9c4f0b3c47e530e8420e7c451a055ce3efc5a3a40f5ae0106c89a6106711c87fe2ab85b33cf85da9bb1fe7cf9f87260bb7abc023df36f9c62d243948820df4850fdd60b99e2db67d8dc5b092fd6d605fc5396f073b080af479513b562e9dc5312f70247e0c90cadd7ee37ed11a2c4a4358846b73cb6c17e95d1356681abbe01e605749253b80c05ff6756b5fffbb9d97b2a18dc897798486d1f4346156f96bc8361de633fb99b9e91cfc5a3a209", 0xe1}, {&(0x7f0000000340)="8942ac5707eca625a2a1b3276e39b9956fbce40c4881b3c32747cacafa880ce6d897721c0c08bf85", 0x28}, {&(0x7f00000008c0)="b51542bfda5133111937990daaafbcac3df82afe47f79f7e8a17de40af397a5a1e84d038b4beed04aba000e866f4c171bf9098c691ffeb129db8c8e370e6630637b57b7cc0edf3a1152ac618291c936e444ea2fb116231fc8cd29e40557f549f890d3493eb45d1ed678118b86e32860fa345317abe4ef25b8305b9af94f7c3530720b04426c4160f2f1231fca6f7e9de2283dd61ea3962ede72be4fba5840e708f3c5566928b17de1ed443223d1c2211315a94a3d0087f68fb1d5d0a3a23dc43f1144ae66cc9746cd0f15b8db9c5cf4110ed0ba02dfde6e6c29aad019d02a3eeae8cbb2cca90d4832710406d876a70b32eb20350410f9375", 0xf8}, {&(0x7f0000000380)="e8b068b692d80af1f325e6ecbca9ab1a4c", 0x11}, {&(0x7f0000000500)="0838599696995971983543eb03db7d28d6fb0fd417f1fd18920a7d9343980589137e19cb0f969e3cfa2eb71acb8f48418eafd13796931847bb7f15e38fe3a9c84503cd9ba64c8c39ded5754bb64b31670c334f3f2f483aec53d2338850416dc3c840ec606cd33cc94f5e828bc4c3aae5e204ec2e1a3faf01b7d9d6143ecf7cbb15f35deeee4180fe5704dd1437c54159ef503f0bdc8ca295", 0x98}, {&(0x7f00000005c0)="057fada4000868029c10e04e8e55d28e70a6f481b0ab3111a2e5a1a613194ad78436e7952d0b1ac819473903b9e81c51a1a222cd7a312aed401d982f44c7b0cf4885efd5efb5917330f0b51148103ae98ed53ebcd1f15eedb4ea56b6a1e72e25c41150061db58e92e46c1d3dc3", 0x6d}], 0x8, &(0x7f0000000780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r1}}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xf8, 0x1}, 0x880) 14:14:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10049, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x430}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='\x00', 0x0, 0xffffffffffffffff) ioprio_get$pid(0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000640)=""/4096, &(0x7f0000000180)=0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) r3 = creat(&(0x7f0000000480)='./file0\x00', 0xa0) statx(r3, &(0x7f0000000340)='./file0\x00', 0x1000, 0x2, &(0x7f0000000240)) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0xca0b, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r4 = getpgrp(0x0) setpriority(0x1, r4, 0x0) 14:14:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4000000000000000) 14:14:46 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r1, 0x984c, 0x80000}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 14:14:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x52b387a0b9e043e) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffff) [ 1908.324227] kauditd_printk_skb: 67 callbacks suppressed [ 1908.324239] audit: type=1326 audit(1710339286.494:5507): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12615 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1908.326785] audit: type=1326 audit(1710339286.494:5508): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12615 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1908.338146] audit: type=1326 audit(1710339286.508:5509): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12615 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1908.340626] audit: type=1326 audit(1710339286.508:5510): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12615 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1908.345509] audit: type=1326 audit(1710339286.508:5511): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12615 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1908.351151] audit: type=1326 audit(1710339286.520:5512): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12614 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1908.359150] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1908.360016] EXT4-fs (loop5): group descriptors corrupted! [ 1908.362301] audit: type=1326 audit(1710339286.521:5513): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12614 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1908.363212] FAULT_INJECTION: forcing a failure. [ 1908.363212] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.365431] CPU: 1 PID: 12626 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1908.366120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.366974] Call Trace: [ 1908.367253] dump_stack+0x107/0x167 [ 1908.367661] should_fail.cold+0x5/0xa [ 1908.368061] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1908.368598] should_failslab+0x5/0x20 [ 1908.369018] kmem_cache_alloc_trace+0x55/0x320 [ 1908.369505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1908.370049] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1908.370572] __list_lru_init+0x44d/0x890 [ 1908.371010] alloc_super+0x8b8/0xa90 [ 1908.371403] ? fput+0x20/0x20 [ 1908.371753] sget_fc+0x13e/0x750 [ 1908.372123] ? set_anon_super+0xc0/0xc0 [ 1908.372555] ? rpc_kill_sb+0x1b0/0x1b0 [ 1908.372960] get_tree_keyed+0x55/0x210 [ 1908.373393] vfs_get_tree+0x8e/0x300 [ 1908.373782] __do_sys_fsconfig+0x8da/0xc20 [ 1908.374236] ? fscontext_read+0x310/0x310 [ 1908.374676] ? fput_many+0x2f/0x1a0 [ 1908.375061] ? __secure_computing+0x199/0x2f0 [ 1908.375561] do_syscall_64+0x33/0x40 [ 1908.375964] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1908.376499] RIP: 0033:0x7fef23554b19 [ 1908.376892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.378811] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1908.379574] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1908.380285] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1908.381001] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1908.381719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1908.382434] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1908.395750] audit: type=1326 audit(1710339286.521:5514): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12614 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1908.404928] audit: type=1326 audit(1710339286.521:5515): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12614 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef23507a04 code=0x7ffc0000 [ 1908.416304] audit: type=1326 audit(1710339286.521:5516): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12615 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 14:14:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4800000000000000) 14:14:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 14:14:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x7b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open_by_handle_at(r1, &(0x7f0000000180)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x50, 0x80000000, 0x8a, 0x1000}}, 0x105000) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r5 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000200)=0x7fffffff) pread64(r4, &(0x7f0000000040)=""/199, 0xc7, 0x5) sendfile(r2, r4, 0x0, 0xffff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) 14:14:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) write$binfmt_elf64(r1, &(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="a99c768f3b754e06632d5389f1d371e39205ff66e53df6ae50a9cd9113d1eb8fe4f93419336199b4d9ed4c9a43ea4fd1fbce800a081b4e5def127f68e72dbce226cad6a9c0564ce5dbdba1260033307616c7bbbca2a26fb1db7d58dc181e79ed"], 0xfdef) io_destroy(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="25030000000000000000010000000800016c2491d02cc2d2aa3adf8000000000000c0099000200000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x3, 0x8000008000) 14:14:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 60) 14:14:46 executing program 2: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x80000001, 0x4, 0x0, 0x13c5872, 0x2, [{0xf20, 0x6, 0x7, '\x00', 0x1085}, {0x2, 0x4, 0x1f, '\x00', 0x2388}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) 14:14:46 executing program 3: syz_io_uring_setup(0x387c, &(0x7f00000000c0)={0x0, 0x3d71, 0x20, 0x0, 0x4d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x6d3c, &(0x7f0000000180)={0x0, 0x11ad, 0x2, 0x1, 0x276}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)=0x80, &(0x7f00000002c0)=@alg, 0x0, 0x40800, 0x1, {0x0, r2}}, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1908.576980] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 14:14:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x4c00000000000000) [ 1908.601218] FAULT_INJECTION: forcing a failure. [ 1908.601218] name failslab, interval 1, probability 0, space 0, times 0 [ 1908.602483] CPU: 1 PID: 12647 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1908.603156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1908.603966] Call Trace: [ 1908.604241] dump_stack+0x107/0x167 [ 1908.604604] should_fail.cold+0x5/0xa [ 1908.605003] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1908.605518] should_failslab+0x5/0x20 [ 1908.605904] kmem_cache_alloc_trace+0x55/0x320 [ 1908.606369] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1908.606884] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1908.607388] __list_lru_init+0x44d/0x890 [ 1908.607807] alloc_super+0x8b8/0xa90 [ 1908.608191] ? fput+0x20/0x20 [ 1908.608511] sget_fc+0x13e/0x750 [ 1908.608870] ? set_anon_super+0xc0/0xc0 [ 1908.609288] ? rpc_kill_sb+0x1b0/0x1b0 [ 1908.609680] get_tree_keyed+0x55/0x210 [ 1908.610080] vfs_get_tree+0x8e/0x300 [ 1908.610464] __do_sys_fsconfig+0x8da/0xc20 [ 1908.610899] ? fscontext_read+0x310/0x310 [ 1908.611322] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1908.611876] ? __secure_computing+0x199/0x2f0 [ 1908.612349] do_syscall_64+0x33/0x40 [ 1908.612728] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1908.613257] RIP: 0033:0x7fef23554b19 [ 1908.613641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1908.615457] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1908.616222] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1908.616971] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1908.617679] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1908.618395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1908.619105] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:14:46 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:14:46 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0xffffffffffffffff}, 0x0) close(r3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x125ce2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x6c25, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="00012cbd7000fbdbdf256d00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900000200004600000041fbf6f4485b06dc3e84ee9dc7da13b385cde25474e5c83cd8154ecf5be18be973b6a670dfc716a62d1a62e2edebe3cf704b38097307399804ec7888ac4783bc7794966675da44462f8ead38a842a80b1dffe7588124700c4a"], 0x28}}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, 0x0, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x178, r10, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x409}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x58d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3f}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x67e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x935}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x35d}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x9, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x20}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1e1f9a97}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4d9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x482}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2d5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x8, 0x6, 0x7fff, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004801}, 0x14) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 14:14:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6800000000000000) 14:14:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x7a, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) r1 = add_key(&(0x7f00000011c0)='trusted\x00', &(0x7f0000001200)={'syz', 0x3}, &(0x7f0000001240)="a08b8289c86f2e94e64b41ea6d119eb5da7ca8c5500de8f4c97722ca6e6c316d716380b2a520bec0e69a", 0x2a, 0x0) keyctl$setperm(0x5, r1, 0xee13bda32cc518f5) keyctl$revoke(0x3, r1) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1) request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='logon\x00', r2) keyctl$invalidate(0x15, r1) keyctl$read(0xb, r1, &(0x7f0000001280)=""/4096, 0x1000) keyctl$assume_authority(0x10, r1) keyctl$invalidate(0x15, r1) add_key(&(0x7f0000002280)='logon\x00', &(0x7f00000022c0)={'syz', 0x2}, &(0x7f0000002300)="4920b37ce696c65cfcce56c9ac143fc50bc9dc39c957ef04503980a1456bdf92492b7ec81c831ad241a46ba067df9029f742b0ba4a439dcb3e334e8895b63b0bade0b0bc1e6b8a486724e8958a2c34467fc1da7a07072014919b136093063952", 0x60, r1) r3 = add_key$fscrypt_v1(&(0x7f0000002380), &(0x7f00000023c0)={'fscrypt:', @desc2}, &(0x7f0000002400)={0x0, "97859b2dd6763779b04e84bf07ae80550232bc25d2740d188095cf6f2572d6741df6af43c8492137b59d612a4bb76be12f0c984fd412901ec9b388f9b659dd6a", 0x3b}, 0x48, r1) keyctl$link(0x8, r3, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x6c0652cf) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)={0x2, 0x0, @d}, 0x18, r3) 14:14:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xdd}, {0x1, 0x1, 0x4, 0x4f}, {0xd2f, 0x20, 0x1, 0x8000}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) [ 1908.764929] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 14:15:00 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 61) 14:15:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x6c00000000000000) 14:15:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x8}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r3}}, 0x40) r4 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="8838d46fa4292cbf05f0cf0629dc79e10099f9009ee05719ba"], 0x340}}, 0x0) fcntl$setown(r1, 0x8, r4) [ 1922.269132] kauditd_printk_skb: 94 callbacks suppressed [ 1922.269155] audit: type=1326 audit(1710339300.439:5611): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12693 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1922.281136] audit: type=1326 audit(1710339300.451:5612): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12701 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1922.295000] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 14:15:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) r3 = openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) write$binfmt_elf64(r3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xa67) 14:15:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0x3f}]}, 0x58) close(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) tee(r1, r1, 0x5, 0x0) 14:15:00 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/177) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) r2 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/174) r3 = shmget(0x3, 0x3000, 0x1, &(0x7f0000ff3000/0x3000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000180)=""/246) shmat(r1, &(0x7f0000ff3000/0xa000)=nil, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000040)=""/17) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ff3000/0x1000)=nil) 14:15:00 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x3, 0x7}) fsmount(r0, 0x0, 0x0) 14:15:00 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1922.310649] FAULT_INJECTION: forcing a failure. [ 1922.310649] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.312210] CPU: 1 PID: 12698 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1922.313125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1922.314147] Call Trace: [ 1922.314489] dump_stack+0x107/0x167 [ 1922.314949] should_fail.cold+0x5/0xa [ 1922.315422] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1922.316048] should_failslab+0x5/0x20 [ 1922.316530] kmem_cache_alloc_trace+0x55/0x320 [ 1922.317107] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1922.317740] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1922.318340] __list_lru_init+0x44d/0x890 [ 1922.318872] alloc_super+0x8b8/0xa90 [ 1922.319346] ? fput+0x20/0x20 [ 1922.319742] sget_fc+0x13e/0x750 [ 1922.320163] ? set_anon_super+0xc0/0xc0 [ 1922.320660] ? rpc_kill_sb+0x1b0/0x1b0 [ 1922.321158] get_tree_keyed+0x55/0x210 [ 1922.321647] vfs_get_tree+0x8e/0x300 [ 1922.322129] __do_sys_fsconfig+0x8da/0xc20 [ 1922.322668] ? fscontext_read+0x310/0x310 [ 1922.323186] ? fput_many+0x2f/0x1a0 [ 1922.323652] ? __secure_computing+0x199/0x2f0 [ 1922.324239] do_syscall_64+0x33/0x40 [ 1922.324708] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1922.325357] RIP: 0033:0x7fef23554b19 [ 1922.325824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1922.328109] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1922.329050] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1922.329930] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1922.330808] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1922.331685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1922.332569] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1922.335246] audit: type=1326 audit(1710339300.451:5613): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12701 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1922.337915] 9pnet: Insufficient options for proto=fd [ 1922.345116] audit: type=1326 audit(1710339300.456:5614): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12690 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1922.351380] audit: type=1326 audit(1710339300.456:5615): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12690 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1922.355820] audit: type=1326 audit(1710339300.459:5616): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12701 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f042c0cfb19 code=0x7ffc0000 [ 1922.364355] audit: type=1326 audit(1710339300.462:5617): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12690 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1922.369587] audit: type=1326 audit(1710339300.462:5618): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12690 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1922.374354] audit: type=1326 audit(1710339300.462:5619): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12690 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1922.380026] audit: type=1326 audit(1710339300.463:5620): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12690 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 [ 1922.389950] 9pnet: Insufficient options for proto=fd [ 1937.434489] kauditd_printk_skb: 19 callbacks suppressed [ 1937.434506] audit: type=1326 audit(1710339315.604:5640): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12733 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1937.435929] serio: Serial port tty23 [ 1937.437382] audit: type=1326 audit(1710339315.605:5641): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12735 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1937.440780] audit: type=1326 audit(1710339315.605:5642): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12735 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1937.451839] audit: type=1326 audit(1710339315.614:5643): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12733 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 14:15:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 62) 14:15:15 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x20ff, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) io_uring_enter(r1, 0x1d99, 0xd4e7, 0x3, &(0x7f0000000140)={[0x3]}, 0x8) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r3, 0x3, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r2, 0x0}, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)}]) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x4, 0x4d, 0x8}) 14:15:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) 14:15:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7400000000000000) 14:15:15 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) utime(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x9, 0x7}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='mand\x00', &(0x7f0000000100)='-\xfc}{*]\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file0\x00', 0x40000, 0x180) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffd}, 0x2188932d843071f3, 0x31d, 0x0, 0x0, 0x4, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='cpuset\x00') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) 14:15:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000005040)=""/10, 0xa}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x400000) r2 = signalfd(r1, &(0x7f0000000140)={[0x2]}, 0x8) sendmsg$inet6(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x850d}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="47ca48260047a659b8c9c9d73c26da6c902f4a379b70b510877746d8780c1eb11b857d43eb3e399b6a7625cd9c5751c463c244493cdf97bb86e88845fe07833569875f8c186e003cd8ccc0ce4cd81879e32e6fab9eb0ed72a160e4028daa05789c", 0x61}], 0x1, &(0x7f0000000280)=[@rthdr={{0x38, 0x29, 0x39, {0x21, 0x4, 0x2, 0x3, 0x0, [@remote, @local]}}}], 0x38}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) 14:15:15 executing program 2: r0 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3) capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000480)={0x5, 0xfd4c, 0x6, 0xdfd, 0x7, 0x40}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffff) perf_event_open(0x0, r0, 0x4, r2, 0x3) syz_open_procfs(r0, &(0x7f0000000040)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x83}]}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000380)="4d91f66189c7b78a800ecbc52dea5c78b260801c1f698ad88e7927527c2fed8b2f556149bf6e9626d9885060b0bbc884765d3a6a6cdbfd0056e6b391d6e2c0b290ab601db5d2cb3031f76d7338f3e54c7f4d07cd3221a630e6914b3c9717c45aa4", 0x61) accept(r2, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000080)=0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r5 = openat(r4, &(0x7f0000000300)='./file0\x00', 0x422080, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private0, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xbc) r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) [ 1937.456546] FAULT_INJECTION: forcing a failure. [ 1937.456546] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.457785] CPU: 0 PID: 12737 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1937.458517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1937.459393] Call Trace: [ 1937.459678] dump_stack+0x107/0x167 [ 1937.460085] should_fail.cold+0x5/0xa [ 1937.460504] ? create_object.isra.0+0x3a/0xa20 [ 1937.460992] should_failslab+0x5/0x20 [ 1937.461421] kmem_cache_alloc+0x5b/0x310 [ 1937.461856] ? mark_held_locks+0x9e/0xe0 [ 1937.462303] create_object.isra.0+0x3a/0xa20 [ 1937.462769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1937.463322] kmem_cache_alloc_trace+0x151/0x320 [ 1937.463841] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1937.464374] __list_lru_init+0x44d/0x890 [ 1937.464831] alloc_super+0x8b8/0xa90 [ 1937.465252] ? fput+0x20/0x20 [ 1937.465593] sget_fc+0x13e/0x750 [ 1937.465959] ? set_anon_super+0xc0/0xc0 [ 1937.466387] ? rpc_kill_sb+0x1b0/0x1b0 [ 1937.466802] get_tree_keyed+0x55/0x210 [ 1937.467229] vfs_get_tree+0x8e/0x300 [ 1937.467641] __do_sys_fsconfig+0x8da/0xc20 [ 1937.468103] ? fscontext_read+0x310/0x310 [ 1937.468549] ? fput_many+0x2f/0x1a0 [ 1937.468957] ? __secure_computing+0x199/0x2f0 [ 1937.469475] do_syscall_64+0x33/0x40 [ 1937.469879] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1937.470427] RIP: 0033:0x7fef23554b19 [ 1937.470836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1937.472734] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1937.473555] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1937.474314] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1937.475062] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1937.475806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1937.476546] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:15:15 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1937.481416] audit: type=1326 audit(1710339315.614:5644): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12733 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef23554b19 code=0x7ffc0000 [ 1937.488365] audit: type=1326 audit(1710339315.615:5645): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12735 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1937.493518] audit: type=1326 audit(1710339315.615:5646): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12735 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1937.499534] audit: type=1326 audit(1710339315.615:5647): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12735 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cab7c4b19 code=0x7ffc0000 [ 1937.505223] audit: type=1326 audit(1710339315.617:5648): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12727 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f042c0cfb19 code=0x0 [ 1937.505562] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1937.519513] audit: type=1326 audit(1710339315.617:5649): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12735 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1cab7c3c27 code=0x7ffc0000 14:15:15 executing program 3: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5e, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de6", 0x97, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x8001) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x2f, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000004c0)={{r3}, r4, 0x16, @unused=[0x8, 0x4, 0x80, 0x2], @name="5eb2b1d3937b338f959505a10499e0d559364d735848ce81bea9db0d3aa17103b7bd92429406ac6dc98c5470b5feb0416cbdb74bb090359c19c04bb6076239488f732690f8a6a651818ade1b985e84d64a4039e26dad0f22ccd3f259003b049b60d187f8a98d68d57d8c91442afd50854ccc348aaaaa43b52d30ffc6dedee69e88e152ec52540c2bfe2fa6521dfe3486ab4a52ada027db211d8b0ad7c28fd242156247c411aa87d313968ae28d4cd863232716105c3722ba6ef4667a6d67b7daf4684d094860973da3eaeda86a178110968d26739d841c9f776bb35a2290b013c014dcbe8f45bee70830298573e2aef29697e1b26a5a69a6d6e4c96b2f1b05066c455c229b96e0d64123a852f84a71e111c3003391bca71e80753a921f13f288a8b1bb8fb66001196730b31c58837f6e9fbc9d6a332dcc6c0e7dafb007c06782b0b02d67a68c7024d1baa94492ff7dadf00add6141e8308aca03b071e22d0ccfed03890cbd22b9e0d9e2dfd4c2747046e3891d866d72b1c640716a66238811707ed8998e2068d5c0009b66bcecbcd2159dfcdc486417932daf27e1cf788321600997da1a9e9c86c9f27fdfcdac40ec0e078851621ec8be0148707df79053e839b75200190ca6fb6bf7475e38826b110a1102868e153a9db16a311170c6ab189a1453c8b9545c3027c29cf644fb7a2555e517074d5ffe4659d418dfc73351794b60918b71249f4f35f49b6e44783bff16efcfe558fbfdc5434c6048388e327fd606b58f432dab9e08adff4b23b424cb2748d943b30074b9093b41f9c568bbdd66b8008d6e1a68a78d995699857540db6eeaca4a44a3e5b83ae7417306ec6f86db60a1de70dc7578c520d0a4b50ac20366063a76e2558ba4778ab5ef19753378270476cbb28c19df7b5295e21f64d3ca7d2d36234a1f5605ef814b526e1f26056289c48cd5ee0b6915b78d42792efd596ba1427a47c8adbf539ce5d9e009b1dc4ddf8e81faf0879e3b8ed9b5a7f4e0d83406ecddabc4505b299cf60e3c16680a99eb63eed8e221659ce110832e6ffa31c3e5660169e1307e4db3cc73b9d4cebd3bb72cdc18f8e7d25aef5ffb6d130bb49c7377a1e8a84759be295a15dbac2f15f47f3cd92eb9933b682d3908b34f0f4315632d282cc8494b1674615a6db364388c3b2497d3f9be5cc23964c76da817ae73fe99b3f8c8840e7d7163c2c9a07a4648b347ede5da83bbf95d8f936b515d51989e60d56f2d8493f93a5b62c3c8fc4bab18c1c92d4257a50ba83ed1489cf4a217e3a2e1ffdf5985eef80245eae0cc567b2d5b9dc9d7907ad6a92b90e46d9cd4f56d6625cebd1e96331868ff25a73bcd466e2a4f376a818d98357bb99b547af7c0d6fd15ee6ca24edeadf83fd8300550570da07bfe1399105cc502b3fbf9e97ea896c8ab53ef764e15c3c3e0fcb1905a3a5bc0819f0667f971cd939a1ff9c1dcc5c4088ffae1b6e81aca6d568bc0fb456cef7491ae8ea4b2510588939846be3926f605cbef685645a5993faacf5e68aa58692ce67c89f8710db26ba556e8d9b91da44272f7d1401731db192cfbbe22630e048a0bd89718b90319dfa73a059f903618999fe9e39fc7085aa6c7219ed034584d2da3021bcb8d41f9867e16e7932493845b75c9a2fc60e14da2033a047a5b5a187110fb6786e61f449287bb2abc3a4146789f40ae90ca61171c327c54f47834974bd7024336e3b703bd1d09e8aaa1d380e50ca4c30ef9184d25952fcfcda1fc36a2afa2074c1da0749018a3acfb837e8d30ea9a54198892a71770d221fe4b076c229d9a5f598c05a3063d0ffa0bfbfb7cd508494cc5ba9556a673a4d0d60ebc5445037f8280f277f47f154a6c99304b59cc1f55feeacd4f4714c5aa005158258ae5ddad10cef227b61d6d19c9902c90be6a96c8ac074625d925247a24a6147049805b6adea49a0790d6873f0673bfd786a672b31ff1d6e35e2fba53691a931072f2c7587c1e08f44262591730e2e59785755a6b4c66e202a253f4317a1f2060b81c2f6f87febf9a461510ac51b2ed5af4cb69d87f76045882075c28357004ee88345e7ac46a8a28f1aa8883daa58c16946cba0486d72f1e136680e5063355ba954a124ffb6919a2561f6d322472e5849e18a18efb8c3a16a3b97af8700277b1d92af9c22acfef31bd37fcde6ef6f3b86e92f15bb8f68ca56ea22ce44ac7516a26cb0d72cbda5def111042c81ec897e5b969346f22d05f9f7033574650bdf03debd5cb33ef0f479352fa0fbe947ef9eeed3538cd245fe3b6ea97191faa24ca8750400a9c2fa67813b873451e3b016bd879d87a3d20c7be6575e662473b4be0ae4b17540157d242dc6bf2c70112a3418a153ee130afc1c4a233ed31b880da3a4fc46cf2e464be73956d48a9dc0a333dc4a32b1401af9f2f9ab47210cfceb5c1f1e4ffa301f1397a1e38294161c7c6a71d87271d411a8b73e4ceb9cc26530efdd944386fd5d0141928a5917c68792bc7da150b14b44b5c4a67445a5972ac7fccfdf5ae130915e2ab7fa92b74a4b4aa43be29796ba853f531074eefb450d3e62a8a03459435919cad90628bac148fec9bd24f3270d180c5f3ab15a6401295bfc4cd87680b3bbb3f71d32f88d70342d43b7d6ed66f1f4c78a2eeaac3cc30bcdf8665118acf9826b06587bd27a6132ba620475d588a5761ea3bcfba2b1816f549bdbf1e7c58fcbd123fb3e48a31cee16c97397b6b6d53ec25218af0309dc8526ac8cc6ff3ebf2fea2e97bbfa107fb48ac6bf9b95a349febaae34dbb92c2ce831fa48644fe95f3a54aa7c0703bb216428d8c479756b3c2f3c81cd94df37dab7c5bd6190f4e809a602280b64628d1fc0839a5834f9fa4bb3cb316bb7c99c3f788998b7ff7457a9cb20af6907c5406ab2599dac1c95f8793801a3b2e860553aa15b998cbf288f42f13dd1d22b2d6738ef55ffdbff7be4a1b0cc1bbc0f6e371b247e4a6311d61826b3a9a6749cb82d964847a4363e628f707c8f655148daa804705b98515a868999aee3caa5f26a6a13b27b098f4f702e6888eb355d329e90bf1db7d1046136bca5532bfda4de0fcf436de8c2e772952ec7acc1cb2afe63cd1828cd1aa820f469e5c6333b87384ffee31464b58b601a8c01051e258d313d8c1b11f1334bb39c4f6644564be9bc100b0fecfeff81e5fbf3bb6ba64af1ca6d283ed62233cd85fec580b9436a487cc15f48f4fbee5ec58f07f305c25c4b4a378e051d742886aef4183087aaf4883032676ce2bc55d2eab0b462a3be2a4ab028c23d461e68bbec16d6178ccfa387358c8671b70bcd61ff30fca0ebb86c1ecdb7efdc69cf33942f866931b2f25ea6052734ceadd0ebfbc3c3115cdc78401aca324f585e451783911f9320de97476fe3f014e35f24977af8f1310ec901f44f84fdbf67422513b9c398c3777253b44b85ed5fd9bde764f6079833c4b1b256beff4200e89f5a35ab6df348ea8ba3df0e237be3f1356c74f18597e66ead4052263365130ab11ccb16940d140e7c0b66915fabaecec583f5b9214c31b584e813478c7d917a5488cae179ab8bcf9c9fa1793a7d8a1645af95db743cc3f4431b6c095b869dd47f9178a55df43e27dd245a18455ab7428fe423b42c424e06fb35dfd0315c6f4f9eed04ca22d40feeb74e3a215e6b4a36662ed2e231575305440e9d48667d574e37647d6e56e74a92a313b3d0814ac7b0500427688e19c22d0ce46e167fa156bd484698eb601b7cdc8d8be147d00aad01a1fbe124199998db22725a2fd0492ac64ef8a146937834324c9ad42f7cfc269ecd42011325a84a84439e0fc3b9bd088457f84a86dc1fbef76e5826f3672cd859304390640ded73b569e10527d8cb80545ccdcddf880f21954277f65490ad88d575caac0a96c265ace9b168993fe06abc76968866efedf194d1729ce1575bc0ff5327703d769863389167ca9fecf785a2d36047c6cfee129a278ea294495a79a249352cd8cfda054335f2a18b45c175d933c33fe7506bb8926d471f9be04c6c4c3e8e6eeac6168f7b94f23ff48e869a205899ec58d106d80c48ae571a09b5c65c3a25c332ed6eea40550f5efe081f5fe534888ac66ca65a59c7f16c9e58d70e4969ae29739c147e109aa7d691709247e3101ab7cd4aefa115aad6099fac56bae1d21c5aa08790191feaa8a991e76cc8906df0d620999ee9fd76a24414eaee7ba66533e40e49ed7c9b6fbe62e135b675369e47d73183a10e425ca150f927fdbeef78f448c6c0b91dea9746b77b524014dafa99746fa35a39e7f0adfcfe869fba1893eb9c8fff23a2a34728318c336844604998c2de30cf72eeec7065ee1bc0f8bb1f5851cd6eb64ccfea89a4d6096c653acf044bc0e5d3d8814eac940136f4903b5d397c512382113d8a709e9c1971b6c0d5097fe88651d62c0b367b6a7208acdfcffe756085a4fb2b27b4a7b290978a35fda2db11372b96b764bf279458cf51dfc9584cb718aabd458fa7c1adfab816ad267e784c47ac03355ec4c924fcbac8be11f2fcf9249de4f524381e600d0394f2564f8ab197c222cc23ae893adcaf1d28948569644a5bbbe6d1d4b8b3b641abc3fcfe2f5429c6c9fa17510642fbd2b827327f6be0cb1c7c20c4a6d1214252b40dd82a4aec3f04fb5a756b66347788ded22cfbacaa17edee8d860061a6ab8f140210ee6278afbe2b110b7e1b98a90bb174a3ea0cc0bba474ecdfe1983eb9ac255588ed27d9dc804b8f37d0de45739231eaf56b1ee2835b70b232b735c3e191b106d1d5a06c3f1526e2b01761e5f7da7119e84546f670f98a7783d5d65861f7bb703007c5354ea83f22a9ca58f10d1a49c36b1a8b9aeb3c6edcba163a7d65ce9895a2f93f9d12c13d1a9c9f33b1fa5704553b95593e62d72798378eb957bb96eb21580e4bddfffcaa3d938b422825c35fcf1819827810720287db82ac914a3c9441b12f5bc61aa4b583e84e73018ac48b15721671cb78a7d754a1fde276d543c5d831fa4cb6d06c322706de368d87fd34861a22dac27c5824d6032f0d4d9140194cd3032c463901eb652fca155c952735794604fcbc562c499acf7e5f415f1e425fbc8b1b8061c9f6c19e20eab03c788b9e49d1a3f892ea6ae2d5ff5c3085887d3c7469dac23ccd4371602fa5cc53abaa44f27e65af8fe1c86e1ae193954e3c3acaa2ab1387b5f3e866e7f9c3e2196ab2cad891d523eb8b6829ac5e90525d724518d7b6db717ec3bdbd794e176161f609e5df1f5a632f23feb78b2b3b5d33a117d96eab7ddf90390332dea2f92b605876ab2fcd6ed172fb17c1e24b3de2bfaff95d71e33ac993a7397736f326f5509c1c5da9fdd66470c7ea352bb9fc6dc9a161b183ea52c9777bed36197b12ef31adf1d7cb2ee36144b551665f153e33812cff8ad594e47284af2448848c59e9fcae68bdd24c777691e4f8bd49e87ddb9e30fb227775592673202660ebd5b15b24074584cf286bd6acedfacb687f522d02e07663c884bde2fd8e34e05e4c23c3b9646a9a382103f2b02b5ac971c1d6514b77bdcb3354e7155dbb02c3dc367a3ca10fb0eea4bf6bdf3c3ae0b85870287d8e3eb04ba8007ba1a4371aaffa8a9413f49f5d3a73f6996eccff85f074bf120903130cebcb7f7b89784616aedefd013327a4baf01eb5a1fed91ab08708a50b6b231bd8a6a2f4f2bd89b21dc18c3b3c4af"}) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0x1, 0x1f, 0x20, 0x0, 0x1, 0x40062, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x10008, 0x7, 0x4, 0x1, 0x1000, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xf, r5, 0x2) kcmp(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0) 14:15:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x7a00000000000000) 14:15:15 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r0, 0x8000000) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200681, 0x104) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) bind$bt_sco(r4, &(0x7f0000000080)={0x1f, @fixed}, 0x32) r5 = dup2(r4, r3) inotify_rm_watch(r5, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000640)="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") r6 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) signalfd(r6, &(0x7f0000000180)={[0xffffffffffffffff]}, 0x8) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000340)="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") perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x7}, 0x7) 14:15:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x40005, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='wchan\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x85, 0x3f, 0x1f, 0xff, 0x0, 0x7fffffff, 0x8200, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xdd, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x2022, 0x7, 0x4f5, 0x3, 0x7, 0x8000, 0x800, 0x0, 0x2, 0x0, 0x6b}, 0x0, 0x9, r4, 0xb) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x5, 0xfffffff7, 0x0, 0x8, 0xff, 0x100000000}, {0xfff, 0x2, 0x37, 0x8001, 0x9, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x6}, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r1, 0x0) syz_io_uring_complete(0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x650483, 0x120) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000680), 0x2204804, 0x0) sendfile(r0, r2, 0x0, 0x20d315) 14:15:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 63) 14:15:15 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1937.696912] FAULT_INJECTION: forcing a failure. [ 1937.696912] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.698245] CPU: 1 PID: 12772 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1937.698985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1937.699856] Call Trace: [ 1937.700147] dump_stack+0x107/0x167 [ 1937.700548] should_fail.cold+0x5/0xa [ 1937.700966] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1937.701543] should_failslab+0x5/0x20 [ 1937.701958] kmem_cache_alloc_trace+0x55/0x320 [ 1937.702464] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1937.703020] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1937.703573] __list_lru_init+0x44d/0x890 [ 1937.704033] alloc_super+0x8b8/0xa90 [ 1937.704451] ? fput+0x20/0x20 [ 1937.704808] sget_fc+0x13e/0x750 [ 1937.705192] ? set_anon_super+0xc0/0xc0 [ 1937.705629] ? rpc_kill_sb+0x1b0/0x1b0 [ 1937.706078] get_tree_keyed+0x55/0x210 [ 1937.706512] vfs_get_tree+0x8e/0x300 [ 1937.706947] __do_sys_fsconfig+0x8da/0xc20 [ 1937.707428] ? fscontext_read+0x310/0x310 [ 1937.707885] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1937.708504] ? __secure_computing+0x199/0x2f0 [ 1937.709005] do_syscall_64+0x33/0x40 [ 1937.709433] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1937.709987] RIP: 0033:0x7fef23554b19 [ 1937.710417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1937.712374] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1937.713199] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1937.713322] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1937.713905] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1937.713917] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1937.715836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1937.716527] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 14:15:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0x8cffffff00000000) [ 1937.776824] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 14:15:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 64) 14:15:15 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001480)=ANY=[@ANYBLOB="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"]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, 0x15, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r4, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=@getpolicy={0x284, 0x15, 0x20, 0x70bd2c, 0x25dfdbff, {{@in=@multicast2, @in6=@local, 0x4e23, 0x5, 0x4e20, 0x9, 0xa, 0x80, 0x388035949f4cdff0, 0x1d, 0x0, r5}, 0x6e6bb3, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@loopback, 0x0, 0xa}}, @coaddr={0x14, 0xe, @in6=@remote}, @sec_ctx={0xbc, 0x8, {0xb8, 0x8, 0x0, 0x4, 0xb0, "7207feffe8405555c4d63d28fa5b1b0cd083ab00c8c4ed84aa2b6094f26c14a719e6779e2a70c059cd30712ebc90d640325a4112757954d8126b8f7e32e503ca76ca25f64ed98a82fc1307239c11e2a54eadfd4b0d681efa780f61ef6f7676c8bd2a517599b7cf03fa401b5c3a4181b61bc22ea83416f1559524c02339fd77b5e125f1ad989968440faf795fd574ab1397623796ee92679bccb70e2f9a31643874114b7066147974b59000c7b231cd3c"}}, @sec_ctx={0x8c, 0x8, {0x88, 0x8, 0x1, 0x0, 0x80, "a2a40294a07ad72ef17df5df752217e65e17bffd7d6446f57f4920558157561bd1476ed7207e89b53603a66439f736df99293ccdc323529f5aad3309337f63937aac72e48608f86aa57ef0eadceee3a0242dbbba77fe438c2c570753bf2b5523c394bb208894f6963fafe5bf06dc36091c0bcfd725b889d086156d95eaae78c6"}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x4e22, 0x8, 0x4e20, 0x200, 0x2, 0x20, 0x20, 0xff, 0x0, 0xee01}, {0x2, 0x5, 0x7, 0x6, 0x80, 0x4, 0x4, 0x5}, {0x2, 0xffb, 0x80, 0x5}, 0x5, 0x6e6bb8, 0x0, 0x0, 0x1, 0x2}}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040000) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) unshare(0x48020200) [ 1937.820631] FAULT_INJECTION: forcing a failure. [ 1937.820631] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.821871] CPU: 1 PID: 12780 Comm: syz-executor.6 Not tainted 5.10.212 #1 [ 1937.822584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1937.823433] Call Trace: [ 1937.823723] dump_stack+0x107/0x167 [ 1937.824121] should_fail.cold+0x5/0xa [ 1937.824535] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 1937.825072] should_failslab+0x5/0x20 [ 1937.825499] kmem_cache_alloc_trace+0x55/0x320 [ 1937.825986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1937.826528] __memcg_init_list_lru_node+0x7f/0x1e0 [ 1937.827063] __list_lru_init+0x44d/0x890 [ 1937.827522] alloc_super+0x8b8/0xa90 [ 1937.827923] ? fput+0x20/0x20 14:15:15 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) 14:15:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xa1ffffff00000000) [ 1937.828246] sget_fc+0x13e/0x750 [ 1937.828747] ? set_anon_super+0xc0/0xc0 [ 1937.829207] ? rpc_kill_sb+0x1b0/0x1b0 [ 1937.829604] get_tree_keyed+0x55/0x210 [ 1937.830001] vfs_get_tree+0x8e/0x300 [ 1937.830405] __do_sys_fsconfig+0x8da/0xc20 [ 1937.830859] ? fscontext_read+0x310/0x310 [ 1937.831340] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1937.831921] ? __secure_computing+0x199/0x2f0 [ 1937.832429] do_syscall_64+0x33/0x40 [ 1937.832800] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1937.833341] RIP: 0033:0x7fef23554b19 [ 1937.833751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1937.835723] RSP: 002b:00007fef20aca188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1937.836527] RAX: ffffffffffffffda RBX: 00007fef23667f60 RCX: 00007fef23554b19 [ 1937.837285] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1937.838020] RBP: 00007fef20aca1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1937.838785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1937.839554] R13: 00007ffcdf331c1f R14: 00007fef20aca300 R15: 0000000000022000 [ 1937.863321] [ 1937.863564] ====================================================== [ 1937.864199] WARNING: possible circular locking dependency detected [ 1937.864844] 5.10.212 #1 Not tainted [ 1937.865223] ------------------------------------------------------ [ 1937.865884] syz-executor.3/12784 is trying to acquire lock: [ 1937.866468] ffff88800f864b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1937.867524] [ 1937.867524] but task is already holding lock: [ 1937.868118] ffffffff8561a828 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1937.869031] [ 1937.869031] which lock already depends on the new lock. [ 1937.869031] [ 1937.869862] [ 1937.869862] the existing dependency chain (in reverse order) is: [ 1937.870627] [ 1937.870627] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1937.871324] __mutex_lock+0x13d/0x10b0 [ 1937.872034] rfkill_register+0x36/0xa10 [ 1937.874378] hci_register_dev+0x42e/0xc00 [ 1937.874867] __vhci_create_device+0x2c8/0x5c0 [ 1937.875382] vhci_open_timeout+0x38/0x50 [ 1937.875870] process_one_work+0x9a9/0x14b0 [ 1937.876364] worker_thread+0x61d/0x1310 [ 1937.876843] kthread+0x38f/0x470 [ 1937.877269] ret_from_fork+0x22/0x30 [ 1937.877707] [ 1937.877707] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1937.878390] __mutex_lock+0x13d/0x10b0 [ 1937.878844] vhci_send_frame+0x63/0xa0 [ 1937.879303] hci_send_frame+0x1b9/0x320 [ 1937.879763] hci_tx_work+0x10af/0x1660 [ 1937.880231] process_one_work+0x9a9/0x14b0 [ 1937.880726] worker_thread+0x61d/0x1310 [ 1937.881210] kthread+0x38f/0x470 [ 1937.881617] ret_from_fork+0x22/0x30 [ 1937.882048] [ 1937.882048] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1937.882872] __flush_work+0x105/0xa90 [ 1937.883316] hci_dev_do_close+0x131/0x1240 [ 1937.883802] hci_dev_close+0x175/0x1d0 [ 1937.884268] hci_sock_ioctl+0x288/0x980 [ 1937.884745] sock_do_ioctl+0xd3/0x300 [ 1937.885204] sock_ioctl+0x3ea/0x700 [ 1937.885643] __x64_sys_ioctl+0x19a/0x210 [ 1937.886121] do_syscall_64+0x33/0x40 [ 1937.886571] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1937.887147] [ 1937.887147] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1937.887813] __mutex_lock+0x13d/0x10b0 [ 1937.888273] bg_scan_update+0x82/0x500 [ 1937.888741] process_one_work+0x9a9/0x14b0 [ 1937.889243] worker_thread+0x61d/0x1310 [ 1937.889720] kthread+0x38f/0x470 [ 1937.890129] ret_from_fork+0x22/0x30 [ 1937.890574] [ 1937.890574] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1937.891464] __lock_acquire+0x29e7/0x5b00 [ 1937.891968] lock_acquire+0x197/0x470 [ 1937.892419] __flush_work+0x105/0xa90 [ 1937.892868] __cancel_work_timer+0x368/0x4c0 [ 1937.893396] hci_request_cancel_all+0x73/0x230 [ 1937.893930] hci_dev_do_close+0xd9/0x1240 [ 1937.894446] hci_rfkill_set_block+0x166/0x1a0 [ 1937.894967] rfkill_set_block+0x1fd/0x540 [ 1937.895466] rfkill_fop_write+0x253/0x4b0 [ 1937.895958] vfs_write+0x29a/0xa70 [ 1937.896398] ksys_write+0x1f6/0x260 [ 1937.896834] do_syscall_64+0x33/0x40 [ 1937.897284] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1937.897876] [ 1937.897876] other info that might help us debug this: [ 1937.897876] [ 1937.898716] Chain exists of: [ 1937.898716] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1937.898716] [ 1937.900068] Possible unsafe locking scenario: [ 1937.900068] [ 1937.900700] CPU0 CPU1 [ 1937.901189] ---- ---- [ 1937.901673] lock(rfkill_global_mutex); [ 1937.902102] lock(&data->open_mutex); [ 1937.902778] lock(rfkill_global_mutex); [ 1937.903493] lock((work_completion)(&hdev->bg_scan_update)); [ 1937.904102] [ 1937.904102] *** DEADLOCK *** [ 1937.904102] [ 1937.904756] 1 lock held by syz-executor.3/12784: [ 1937.905256] #0: ffffffff8561a828 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1937.906252] [ 1937.906252] stack backtrace: [ 1937.906746] CPU: 1 PID: 12784 Comm: syz-executor.3 Not tainted 5.10.212 #1 [ 1937.907465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1937.908328] Call Trace: [ 1937.908606] dump_stack+0x107/0x167 [ 1937.909013] check_noncircular+0x263/0x2e0 [ 1937.909477] ? print_circular_bug+0x470/0x470 [ 1937.909972] ? find_first_zero_bit+0x94/0xb0 [ 1937.910436] ? alloc_chain_hlocks+0x342/0x5a0 [ 1937.910910] __lock_acquire+0x29e7/0x5b00 [ 1937.911374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1937.911917] ? SOFTIRQ_verbose+0x10/0x10 [ 1937.912367] ? __lockdep_reset_lock+0x180/0x180 [ 1937.912858] ? mark_lock+0xf5/0x2df0 [ 1937.913288] lock_acquire+0x197/0x470 [ 1937.913693] ? __flush_work+0xdd/0xa90 [ 1937.914108] ? lock_release+0x680/0x680 [ 1937.914553] ? __flush_work+0x78c/0xa90 [ 1937.914968] ? lock_downgrade+0x6d0/0x6d0 [ 1937.915424] __flush_work+0x105/0xa90 [ 1937.915831] ? __flush_work+0xdd/0xa90 [ 1937.916240] ? lock_chain_count+0x20/0x20 [ 1937.916694] ? queue_delayed_work_on+0xe0/0xe0 [ 1937.917181] ? mark_lock+0xf5/0x2df0 [ 1937.917584] ? mark_lock+0xf5/0x2df0 [ 1937.917985] ? lock_chain_count+0x20/0x20 [ 1937.918418] ? perf_trace_lock+0xac/0x490 [ 1937.918867] ? lock_chain_count+0x20/0x20 [ 1937.919307] ? mark_held_locks+0x9e/0xe0 [ 1937.919754] __cancel_work_timer+0x368/0x4c0 [ 1937.920221] ? cancel_delayed_work+0x20/0x20 [ 1937.920683] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1937.921249] ? __cancel_work+0x250/0x2b0 [ 1937.921670] ? trace_hardirqs_on+0x5b/0x180 [ 1937.922140] ? __cancel_work+0x1bb/0x2b0 [ 1937.922569] ? try_to_grab_pending+0xe0/0xe0 [ 1937.923051] hci_request_cancel_all+0x73/0x230 [ 1937.923536] hci_dev_do_close+0xd9/0x1240 [ 1937.923976] ? rfkill_set_block+0x18f/0x540 [ 1937.924401] ? hci_dev_open+0x350/0x350 [ 1937.924792] ? mark_held_locks+0x9e/0xe0 [ 1937.925245] hci_rfkill_set_block+0x166/0x1a0 [ 1937.925717] ? hci_power_off+0x20/0x20 [ 1937.926142] rfkill_set_block+0x1fd/0x540 [ 1937.926580] rfkill_fop_write+0x253/0x4b0 [ 1937.927034] ? rfkill_sync_work+0xa0/0xa0 [ 1937.927468] ? security_file_permission+0x24e/0x570 [ 1937.927991] ? rfkill_sync_work+0xa0/0xa0 [ 1937.928443] vfs_write+0x29a/0xa70 [ 1937.928828] ksys_write+0x1f6/0x260 [ 1937.929241] ? __ia32_sys_read+0xb0/0xb0 [ 1937.929668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1937.930213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1937.930748] do_syscall_64+0x33/0x40 [ 1937.931118] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1937.931657] RIP: 0033:0x7f9ef645db19 [ 1937.932050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1937.933919] RSP: 002b:00007f9ef39d3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1937.934715] RAX: ffffffffffffffda RBX: 00007f9ef6570f60 RCX: 00007f9ef645db19 [ 1937.935442] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 1937.936174] RBP: 00007f9ef64b7f6d R08: 0000000000000000 R09: 0000000000000000 [ 1937.936897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1937.937627] R13: 00007fff549e33bf R14: 00007f9ef39d3300 R15: 0000000000022000 14:15:16 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41fdffffff0000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) mount$9p_unix(0x0, &(0x7f0000000440)='./mnt\x00', 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 14:15:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000380)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x70, 0x5e, 0x7f, 0xc4, 0x0, 0x6, 0x20984, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd1c7, 0x4, @perf_config_ext={0x4, 0x2}, 0x10009, 0x6741, 0xb16, 0x9, 0x101, 0x200, 0x3f, 0x0, 0x1, 0x0, 0x174b}, r1, 0x3, r0, 0x0) rmdir(0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x8, 0x8f, 0x400}) r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r2) openat(0xffffffffffffffff, &(0x7f0000004440)='./file0\x00', 0x101000, 0x10) keyctl$chown(0x4, r4, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {r0, 0xc28c}, {0xffffffffffffffff, 0x4}, {r0, 0x8090}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) [ 1937.989917] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 14:15:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) listxattr(&(0x7f00000000c0)='./mnt\x00', 0x0, 0xf6ffffff00000000) [ 1938.137206] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 VM DIAGNOSIS: 14:15:16 Registers: info registers vcpu 0 RAX=000000007fff0000 RBX=ffff88800c986800 RCX=0000000000000000 RDX=1ffff11001a87f9a RSI=ffffffff814d118e RDI=ffffffff84bdee48 RBP=000000007fff0000 RSP=ffff88800d43fd88 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000005 R11=0000000000000001 R12=dffffc0000000000 R13=000000007fff0000 R14=ffffc900006b3000 R15=ffff88800d43fe38 RIP=ffffffff8140b0f0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc6adf428c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555574ef708 CR3=000000000f6d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00007fc6ae00317570632f302f716d2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055bae1b59870000055bae1b59850 XMM06=000055bae1b583b00000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822d017c RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff888049ff7178 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d69d R14=fffffbfff0f3d652 R15=dffffc0000000000 RIP=ffffffff822d01d0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9ef39d3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d023000 CR3=000000004842e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f042c1b67c800007f042c1b67c0 XMM04=a45ac417973c4b91e630a62132cd074d XMM05=7f4ce5f338736df73130cbd2b51d60ab XMM06=90b2c0e2d691b3e65600fddb6c6a3a5d XMM07=7684c8bbb0605088d926966ebf496155 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000