0x0, 0x0) (fail_nth: 70) 09:06:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) recvmmsg$unix(r0, &(0x7f0000004f80)=[{{&(0x7f0000001240), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/42, 0x2a}, {&(0x7f0000001400)=""/74, 0x4a}], 0x4, &(0x7f00000014c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xe0}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001640)=""/194, 0xc2}, {&(0x7f0000001740)=""/24, 0x18}, {&(0x7f0000001780)=""/10, 0xa}, {&(0x7f00000017c0)=""/173, 0xad}, {&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/100, 0x64}, {&(0x7f0000001940)=""/228, 0xe4}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/208, 0xd0}], 0xa, &(0x7f0000001d00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/235, 0xeb}], 0x2, &(0x7f0000002000)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000020c0), 0x6e, &(0x7f0000002840)=[{&(0x7f0000002140)=""/156, 0x9c}, {&(0x7f0000002200)=""/227, 0xe3}, {&(0x7f0000002300)=""/100, 0x64}, {&(0x7f0000002380)=""/170, 0xaa}, {&(0x7f0000002440)=""/147, 0x93}, {&(0x7f0000002500)=""/185, 0xb9}, {&(0x7f00000025c0)=""/216, 0xd8}, {&(0x7f00000026c0)=""/70, 0x46}, {&(0x7f0000002740)=""/232, 0xe8}], 0x9, &(0x7f0000002900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000003c00)=[{&(0x7f00000029c0)=""/68, 0x44}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/184, 0xb8}, {&(0x7f0000003b00)=""/242, 0xf2}], 0x4, &(0x7f0000003c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003c80), 0x6e, &(0x7f0000004d00)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000004d40), 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004dc0)=""/45, 0x2d}, {&(0x7f0000004e00)=""/155, 0x9b}], 0x2, &(0x7f0000004f00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x10002, &(0x7f0000005140)={0x0, 0x3938700}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) sendfile(r3, r2, &(0x7f0000000000)=0x4, 0x0) perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0xe7, 0x7, 0x1f, 0x1f, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, 0x4, @perf_config_ext={0x7, 0x1f}, 0x81, 0x6, 0x1, 0x6, 0x9e89, 0xfe, 0x3, 0x0, 0x400, 0x0, 0x7}, r1, 0x7, r3, 0x18) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) shmdt(0x0) r4 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ff9000/0x2000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmat(0x0, &(0x7f0000fef000/0x4000)=nil, 0x3000) syz_io_uring_setup(0x3c1e, &(0x7f0000001180)={0x0, 0xc496, 0x2, 0x3, 0x10a}, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001200), &(0x7f0000001080)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 09:06:12 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86cb, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:06:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 09:06:12 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3e, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2125.269667] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2125.271054] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2125.272266] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2125.276308] FAULT_INJECTION: forcing a failure. [ 2125.276308] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.277752] FAULT_INJECTION: forcing a failure. [ 2125.277752] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.278563] CPU: 1 PID: 12921 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2125.281034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.282236] Call Trace: [ 2125.282634] dump_stack+0x107/0x167 [ 2125.283170] should_fail.cold+0x5/0xa [ 2125.283734] ? create_io_worker+0xe8/0x620 [ 2125.284350] ? create_io_worker+0xe8/0x620 [ 2125.284966] should_failslab+0x5/0x20 [ 2125.285530] kmem_cache_alloc_node_trace+0x59/0x340 [ 2125.286257] create_io_worker+0xe8/0x620 [ 2125.286872] io_wqe_enqueue+0x69e/0xbe0 [ 2125.287474] ? create_worker_cb+0x260/0x260 [ 2125.288113] ? io_wq_work_match_all+0x10/0x10 [ 2125.288773] ? io_prep_async_work+0x340/0x550 [ 2125.289453] io_queue_async_work+0x26b/0x4f0 [ 2125.290102] __io_queue_sqe+0x5cc/0x9d0 [ 2125.290714] ? io_issue_sqe+0x7700/0x7700 [ 2125.291354] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2125.292063] io_submit_sqes+0x4461/0x85c0 [ 2125.292723] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.293475] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.294198] ? lock_downgrade+0x6d0/0x6d0 [ 2125.294819] ? find_held_lock+0x2c/0x110 [ 2125.295453] ? io_submit_sqes+0x85c0/0x85c0 [ 2125.296103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2125.296834] ? wait_for_completion_io+0x270/0x270 [ 2125.297563] ? rcu_read_lock_any_held+0x75/0xa0 [ 2125.298257] ? vfs_write+0x354/0xa70 [ 2125.298824] ? fput_many+0x2f/0x1a0 [ 2125.299383] ? ksys_write+0x1a9/0x260 [ 2125.299951] ? __ia32_sys_read+0xb0/0xb0 [ 2125.300571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.301354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.302122] do_syscall_64+0x33/0x40 [ 2125.302686] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.303464] RIP: 0033:0x7f9c97c70b19 [ 2125.304017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.306747] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2125.307897] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2125.308962] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2125.310026] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.311088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.312156] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2125.313372] CPU: 0 PID: 12916 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2125.314415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.315665] Call Trace: [ 2125.316074] dump_stack+0x107/0x167 [ 2125.316630] should_fail.cold+0x5/0xa [ 2125.317205] ? create_object.isra.0+0x3a/0xa20 [ 2125.317900] should_failslab+0x5/0x20 [ 2125.318482] kmem_cache_alloc+0x5b/0x310 [ 2125.319101] ? mark_held_locks+0x9e/0xe0 [ 2125.319736] create_object.isra.0+0x3a/0xa20 [ 2125.320390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2125.321162] kmem_cache_alloc_bulk+0x168/0x320 [ 2125.321860] io_submit_sqes+0x6f76/0x85c0 [ 2125.322515] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.323274] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.324008] ? lock_downgrade+0x6d0/0x6d0 [ 2125.324626] ? find_held_lock+0x2c/0x110 [ 2125.325235] ? io_submit_sqes+0x85c0/0x85c0 [ 2125.325893] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2125.326623] ? wait_for_completion_io+0x270/0x270 [ 2125.326806] FAULT_INJECTION: forcing a failure. [ 2125.326806] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.327330] ? rcu_read_lock_any_held+0x75/0xa0 [ 2125.327347] ? vfs_write+0x354/0xa70 [ 2125.327365] ? fput_many+0x2f/0x1a0 [ 2125.327384] ? ksys_write+0x1a9/0x260 [ 2125.327403] ? __ia32_sys_read+0xb0/0xb0 [ 2125.327431] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.332639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.333404] do_syscall_64+0x33/0x40 [ 2125.333949] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.334701] RIP: 0033:0x7f705a641b19 [ 2125.335256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.337942] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2125.339058] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2125.340116] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2125.341159] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.342203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.343262] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2125.344365] CPU: 1 PID: 12920 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2125.345426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.346641] Call Trace: [ 2125.347037] dump_stack+0x107/0x167 [ 2125.347593] should_fail.cold+0x5/0xa [ 2125.348159] ? create_io_worker+0xe8/0x620 [ 2125.348783] should_failslab+0x5/0x20 [ 2125.349349] kmem_cache_alloc_node_trace+0x59/0x340 [ 2125.350090] create_io_worker+0xe8/0x620 [ 2125.350715] io_wqe_enqueue+0x69e/0xbe0 [ 2125.351317] ? create_worker_cb+0x260/0x260 [ 2125.351961] ? io_prep_async_work+0x340/0x550 [ 2125.352631] io_queue_async_work+0x26b/0x4f0 [ 2125.353288] __io_queue_sqe+0x5cc/0x9d0 [ 2125.353893] ? io_issue_sqe+0x7700/0x7700 [ 2125.354528] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2125.355252] io_submit_sqes+0x4461/0x85c0 [ 2125.355893] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.356622] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.357341] ? lock_downgrade+0x6d0/0x6d0 [ 2125.357945] ? find_held_lock+0x2c/0x110 [ 2125.358545] ? io_submit_sqes+0x85c0/0x85c0 [ 2125.359205] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2125.359917] ? wait_for_completion_io+0x270/0x270 [ 2125.360629] ? rcu_read_lock_any_held+0x75/0xa0 [ 2125.361322] ? vfs_write+0x354/0xa70 [ 2125.361876] ? fput_many+0x2f/0x1a0 [ 2125.362424] ? ksys_write+0x1a9/0x260 [ 2125.363001] ? __ia32_sys_read+0xb0/0xb0 [ 2125.363627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.364413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.365183] do_syscall_64+0x33/0x40 [ 2125.365728] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.366481] RIP: 0033:0x7fa6ace83b19 [ 2125.367049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.369748] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2125.370880] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2125.371941] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2125.373013] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.374047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.375096] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2125.402627] ISOFS: Unable to identify CD-ROM format. 09:06:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) flistxattr(r0, &(0x7f0000001240)=""/191, 0xbf) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) shmdt(0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ff9000/0x2000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) [ 2125.446697] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2125.474451] ISOFS: Unable to identify CD-ROM format. 09:06:12 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 1) 09:06:12 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86cc, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:06:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) [ 2125.554853] FAULT_INJECTION: forcing a failure. [ 2125.554853] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.556740] CPU: 1 PID: 12937 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2125.557757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.558959] Call Trace: [ 2125.559361] dump_stack+0x107/0x167 [ 2125.559894] should_fail.cold+0x5/0xa [ 2125.560461] ? __do_sys_memfd_create+0xfb/0x450 [ 2125.561146] should_failslab+0x5/0x20 [ 2125.561714] __kmalloc+0x72/0x390 [ 2125.562235] __do_sys_memfd_create+0xfb/0x450 [ 2125.562911] ? ksys_write+0x1a9/0x260 [ 2125.563493] ? memfd_file_seals_ptr+0x170/0x170 [ 2125.564180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.564946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.565706] do_syscall_64+0x33/0x40 [ 2125.566252] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.567008] RIP: 0033:0x7f643d472b19 [ 2125.567576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.570258] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2125.571393] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2125.572450] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2125.573485] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2125.574523] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2125.575566] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 09:06:12 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x42, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:06:12 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86cd, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2125.641880] FAULT_INJECTION: forcing a failure. [ 2125.641880] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.643904] CPU: 1 PID: 12941 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2125.644910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.646143] Call Trace: [ 2125.646533] dump_stack+0x107/0x167 [ 2125.647071] should_fail.cold+0x5/0xa [ 2125.647642] ? create_object.isra.0+0x3a/0xa20 [ 2125.648310] should_failslab+0x5/0x20 [ 2125.648859] kmem_cache_alloc+0x5b/0x310 [ 2125.649453] ? lock_acquire+0x197/0x470 [ 2125.650028] create_object.isra.0+0x3a/0xa20 [ 2125.650664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2125.651417] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2125.652167] create_io_worker+0xe8/0x620 [ 2125.652758] io_wqe_enqueue+0x69e/0xbe0 [ 2125.653346] ? create_worker_cb+0x260/0x260 [ 2125.653972] ? io_wq_work_match_all+0x10/0x10 [ 2125.654621] ? io_prep_async_work+0x340/0x550 [ 2125.655289] io_queue_async_work+0x26b/0x4f0 [ 2125.655938] __io_queue_sqe+0x5cc/0x9d0 [ 2125.656528] ? io_issue_sqe+0x7700/0x7700 [ 2125.657140] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2125.657836] io_submit_sqes+0x4461/0x85c0 [ 2125.658473] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.659208] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.659914] ? lock_downgrade+0x6d0/0x6d0 [ 2125.660520] ? find_held_lock+0x2c/0x110 [ 2125.661118] ? io_submit_sqes+0x85c0/0x85c0 [ 2125.661756] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2125.662464] ? wait_for_completion_io+0x270/0x270 [ 2125.663179] ? rcu_read_lock_any_held+0x75/0xa0 [ 2125.663872] ? vfs_write+0x354/0xa70 [ 2125.664420] ? fput_many+0x2f/0x1a0 [ 2125.664952] ? ksys_write+0x1a9/0x260 [ 2125.665512] ? __ia32_sys_read+0xb0/0xb0 [ 2125.666107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.666866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.667631] do_syscall_64+0x33/0x40 [ 2125.668171] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.668902] RIP: 0033:0x7f9c97c70b19 [ 2125.669447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.672066] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2125.673171] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2125.674205] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2125.675251] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.676282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.677314] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 09:06:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 09:06:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) flistxattr(r0, &(0x7f0000001240)=""/191, 0xbf) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) shmdt(0x0) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) [ 2125.729658] FAULT_INJECTION: forcing a failure. [ 2125.729658] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.731562] CPU: 0 PID: 12945 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2125.732569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.733771] Call Trace: [ 2125.734173] dump_stack+0x107/0x167 [ 2125.734705] should_fail.cold+0x5/0xa [ 2125.735276] ? create_object.isra.0+0x3a/0xa20 [ 2125.735945] should_failslab+0x5/0x20 [ 2125.736505] kmem_cache_alloc+0x5b/0x310 [ 2125.737100] ? mark_held_locks+0x9e/0xe0 [ 2125.737704] create_object.isra.0+0x3a/0xa20 [ 2125.738351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2125.739095] kmem_cache_alloc_bulk+0x168/0x320 [ 2125.739778] io_submit_sqes+0x6f76/0x85c0 [ 2125.740414] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.741142] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2125.741854] ? lock_downgrade+0x6d0/0x6d0 [ 2125.742459] ? find_held_lock+0x2c/0x110 [ 2125.743066] ? io_submit_sqes+0x85c0/0x85c0 [ 2125.743716] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2125.744442] ? wait_for_completion_io+0x270/0x270 [ 2125.745157] ? rcu_read_lock_any_held+0x75/0xa0 [ 2125.745836] ? vfs_write+0x354/0xa70 [ 2125.746396] ? fput_many+0x2f/0x1a0 [ 2125.746933] ? ksys_write+0x1a9/0x260 [ 2125.747502] ? __ia32_sys_read+0xb0/0xb0 [ 2125.748106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.748877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.749637] do_syscall_64+0x33/0x40 [ 2125.750182] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.750951] RIP: 0033:0x7fa6ace83b19 [ 2125.751518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.754168] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2125.755281] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2125.756313] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2125.757343] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.758378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2125.759420] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2125.766624] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2125.767959] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2125.769061] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2125.811991] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2125.829906] ISOFS: Unable to identify CD-ROM format. [ 2125.933601] ISOFS: Unable to identify CD-ROM format. 09:06:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 09:06:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) flistxattr(r0, &(0x7f0000001240)=""/191, 0xbf) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) 09:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 09:06:26 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 2) 09:06:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86ce, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:06:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x44, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:06:26 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:06:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) [ 2139.183774] FAULT_INJECTION: forcing a failure. [ 2139.183774] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.184999] CPU: 1 PID: 12974 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2139.185708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.186555] Call Trace: [ 2139.186831] dump_stack+0x107/0x167 [ 2139.187208] should_fail.cold+0x5/0xa [ 2139.187617] ? create_object.isra.0+0x3a/0xa20 [ 2139.188085] should_failslab+0x5/0x20 [ 2139.188478] kmem_cache_alloc+0x5b/0x310 [ 2139.188902] create_object.isra.0+0x3a/0xa20 [ 2139.189356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.189881] __kmalloc+0x16e/0x390 [ 2139.190254] __do_sys_memfd_create+0xfb/0x450 [ 2139.190712] ? ksys_write+0x1a9/0x260 [ 2139.191105] ? memfd_file_seals_ptr+0x170/0x170 [ 2139.191595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.192132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.192663] do_syscall_64+0x33/0x40 [ 2139.193045] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.193569] RIP: 0033:0x7f643d472b19 [ 2139.193955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.195842] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2139.196620] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2139.197364] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2139.198099] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2139.198837] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2139.199559] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2139.210724] FAULT_INJECTION: forcing a failure. [ 2139.210724] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.212418] CPU: 1 PID: 12975 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2139.213090] FAULT_INJECTION: forcing a failure. [ 2139.213090] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.213159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.213166] Call Trace: [ 2139.213188] dump_stack+0x107/0x167 [ 2139.213211] should_fail.cold+0x5/0xa [ 2139.213231] ? create_io_worker+0xe8/0x620 [ 2139.213255] should_failslab+0x5/0x20 [ 2139.213275] kmem_cache_alloc_node_trace+0x59/0x340 [ 2139.213307] create_io_worker+0xe8/0x620 [ 2139.213332] io_wqe_enqueue+0x69e/0xbe0 [ 2139.213360] ? create_worker_cb+0x260/0x260 [ 2139.213385] ? io_wq_work_match_all+0x10/0x10 [ 2139.219899] ? io_prep_async_work+0x340/0x550 [ 2139.220378] io_queue_async_work+0x26b/0x4f0 [ 2139.220845] __io_queue_sqe+0x5cc/0x9d0 [ 2139.221265] ? io_issue_sqe+0x7700/0x7700 [ 2139.221698] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2139.222181] io_submit_sqes+0x4461/0x85c0 [ 2139.222633] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.223134] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.223655] ? lock_downgrade+0x6d0/0x6d0 [ 2139.224085] ? find_held_lock+0x2c/0x110 [ 2139.224516] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.224961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.225467] ? wait_for_completion_io+0x270/0x270 [ 2139.225958] ? rcu_read_lock_any_held+0x75/0xa0 [ 2139.226451] ? vfs_write+0x354/0xa70 [ 2139.226828] ? fput_many+0x2f/0x1a0 [ 2139.227204] ? ksys_write+0x1a9/0x260 [ 2139.227613] ? __ia32_sys_read+0xb0/0xb0 [ 2139.228027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.228573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.229100] do_syscall_64+0x33/0x40 [ 2139.229494] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.230016] RIP: 0033:0x7fa6ace83b19 [ 2139.230408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.232294] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.233064] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2139.233800] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.234531] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.235266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.236006] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2139.236768] CPU: 0 PID: 12973 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2139.237813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.239023] Call Trace: [ 2139.239450] dump_stack+0x107/0x167 [ 2139.239988] should_fail.cold+0x5/0xa [ 2139.240558] ? create_io_worker+0xe8/0x620 [ 2139.241192] should_failslab+0x5/0x20 [ 2139.241775] kmem_cache_alloc_node_trace+0x59/0x340 [ 2139.242530] create_io_worker+0xe8/0x620 [ 2139.242683] FAULT_INJECTION: forcing a failure. [ 2139.242683] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.243137] io_wqe_enqueue+0x69e/0xbe0 [ 2139.243162] ? create_worker_cb+0x260/0x260 [ 2139.245499] ? io_wq_work_match_all+0x10/0x10 [ 2139.246138] ? io_prep_async_work+0x340/0x550 [ 2139.246781] io_queue_async_work+0x26b/0x4f0 [ 2139.247449] __io_queue_sqe+0x5cc/0x9d0 [ 2139.248016] ? io_issue_sqe+0x7700/0x7700 [ 2139.248640] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2139.249351] io_submit_sqes+0x4461/0x85c0 [ 2139.249988] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.250729] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.251474] ? lock_downgrade+0x6d0/0x6d0 [ 2139.252082] ? find_held_lock+0x2c/0x110 [ 2139.252692] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.253346] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.254061] ? wait_for_completion_io+0x270/0x270 [ 2139.254781] ? rcu_read_lock_any_held+0x75/0xa0 [ 2139.255494] ? vfs_write+0x354/0xa70 [ 2139.256043] ? fput_many+0x2f/0x1a0 [ 2139.256589] ? ksys_write+0x1a9/0x260 [ 2139.257152] ? __ia32_sys_read+0xb0/0xb0 [ 2139.257762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.258533] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.259323] do_syscall_64+0x33/0x40 [ 2139.259887] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.260645] RIP: 0033:0x7f9c97c70b19 [ 2139.261202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.263923] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.265055] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2139.266106] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.267153] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.268327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.269357] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2139.270428] CPU: 1 PID: 12976 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2139.271209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.272088] Call Trace: [ 2139.272373] dump_stack+0x107/0x167 [ 2139.272757] should_fail.cold+0x5/0xa [ 2139.273139] ? create_object.isra.0+0x3a/0xa20 [ 2139.273618] should_failslab+0x5/0x20 [ 2139.274013] kmem_cache_alloc+0x5b/0x310 [ 2139.274437] ? mark_held_locks+0x9e/0xe0 [ 2139.274861] create_object.isra.0+0x3a/0xa20 [ 2139.275326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.275844] kmem_cache_alloc_bulk+0x168/0x320 [ 2139.276320] io_submit_sqes+0x6f76/0x85c0 [ 2139.276756] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.277271] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.277757] ? lock_downgrade+0x6d0/0x6d0 [ 2139.278181] ? find_held_lock+0x2c/0x110 [ 2139.278598] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.279039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.279556] ? wait_for_completion_io+0x270/0x270 [ 2139.280038] ? rcu_read_lock_any_held+0x75/0xa0 [ 2139.280517] ? vfs_write+0x354/0xa70 [ 2139.280893] ? fput_many+0x2f/0x1a0 [ 2139.281276] ? ksys_write+0x1a9/0x260 [ 2139.281668] ? __ia32_sys_read+0xb0/0xb0 [ 2139.282079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.282613] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.283140] do_syscall_64+0x33/0x40 [ 2139.283538] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.284055] RIP: 0033:0x7f705a641b19 [ 2139.284448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.286312] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.287071] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2139.287809] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.288532] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.289245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.289963] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2139.305198] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2139.306460] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2139.307587] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2139.333321] ISOFS: Unable to identify CD-ROM format. 09:06:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) flistxattr(r0, &(0x7f0000001240)=""/191, 0xbf) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) 09:06:26 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) flistxattr(r0, &(0x7f0000001240)=""/191, 0xbf) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) shmdt(0x0) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ff9000/0x2000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) [ 2139.360113] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2139.361567] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2139.362669] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2139.379833] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2139.390226] ISOFS: Unable to identify CD-ROM format. 09:06:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86cf, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2139.417604] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:06:26 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 3) 09:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 09:06:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) 09:06:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x46, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:06:26 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) (fail_nth: 1) [ 2139.512811] FAULT_INJECTION: forcing a failure. [ 2139.512811] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.514375] CPU: 1 PID: 12991 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2139.515018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.515807] Call Trace: [ 2139.516060] dump_stack+0x107/0x167 [ 2139.516400] should_fail.cold+0x5/0xa [ 2139.516758] ? create_object.isra.0+0x3a/0xa20 [ 2139.517185] should_failslab+0x5/0x20 [ 2139.517541] kmem_cache_alloc+0x5b/0x310 [ 2139.517918] ? lock_acquire+0x197/0x470 [ 2139.518295] create_object.isra.0+0x3a/0xa20 [ 2139.518709] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.519187] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2139.519672] create_io_worker+0xe8/0x620 [ 2139.520061] io_wqe_enqueue+0x69e/0xbe0 [ 2139.520439] ? create_worker_cb+0x260/0x260 [ 2139.520841] ? io_wq_work_match_all+0x10/0x10 [ 2139.521259] ? io_prep_async_work+0x340/0x550 [ 2139.521682] io_queue_async_work+0x26b/0x4f0 [ 2139.522091] __io_queue_sqe+0x5cc/0x9d0 [ 2139.522469] ? io_issue_sqe+0x7700/0x7700 [ 2139.522858] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2139.523307] io_submit_sqes+0x4461/0x85c0 [ 2139.523709] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.524172] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.524621] ? lock_downgrade+0x6d0/0x6d0 [ 2139.525009] ? find_held_lock+0x2c/0x110 [ 2139.525390] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.525797] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.526242] ? wait_for_completion_io+0x270/0x270 [ 2139.526693] ? rcu_read_lock_any_held+0x75/0xa0 [ 2139.527119] ? vfs_write+0x354/0xa70 [ 2139.527475] ? fput_many+0x2f/0x1a0 [ 2139.527814] ? ksys_write+0x1a9/0x260 [ 2139.528168] ? __ia32_sys_read+0xb0/0xb0 [ 2139.528549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.529034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.529517] do_syscall_64+0x33/0x40 [ 2139.529863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.530340] RIP: 0033:0x7f9c97c70b19 [ 2139.530689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.532385] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.533089] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2139.533746] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.534399] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.535055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.535720] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2139.540742] FAULT_INJECTION: forcing a failure. [ 2139.540742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.541904] CPU: 1 PID: 12994 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2139.542543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.543310] Call Trace: [ 2139.543556] dump_stack+0x107/0x167 [ 2139.543892] should_fail.cold+0x5/0xa [ 2139.544247] _copy_from_user+0x2e/0x1b0 [ 2139.544621] __do_sys_memfd_create+0x16d/0x450 [ 2139.545046] ? memfd_file_seals_ptr+0x170/0x170 [ 2139.545477] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.545960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.546436] do_syscall_64+0x33/0x40 [ 2139.546782] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.547249] RIP: 0033:0x7f643d472b19 [ 2139.547603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.549270] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2139.549963] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2139.550616] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2139.551274] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2139.551935] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2139.552590] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2139.564813] FAULT_INJECTION: forcing a failure. [ 2139.564813] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.566884] CPU: 0 PID: 12996 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2139.567939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.569148] Call Trace: [ 2139.569553] dump_stack+0x107/0x167 [ 2139.570092] should_fail.cold+0x5/0xa [ 2139.570669] ? create_object.isra.0+0x3a/0xa20 [ 2139.571375] should_failslab+0x5/0x20 [ 2139.571949] kmem_cache_alloc+0x5b/0x310 [ 2139.572565] ? lock_acquire+0x197/0x470 [ 2139.573165] create_object.isra.0+0x3a/0xa20 [ 2139.573827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.574582] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2139.575380] create_io_worker+0xe8/0x620 [ 2139.575991] io_wqe_enqueue+0x69e/0xbe0 [ 2139.576590] ? create_worker_cb+0x260/0x260 [ 2139.577243] ? io_wq_work_match_all+0x10/0x10 [ 2139.577892] ? io_prep_async_work+0x340/0x550 [ 2139.578568] io_queue_async_work+0x26b/0x4f0 [ 2139.579230] __io_queue_sqe+0x5cc/0x9d0 [ 2139.579846] ? io_issue_sqe+0x7700/0x7700 [ 2139.580475] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2139.581173] io_submit_sqes+0x4461/0x85c0 [ 2139.581815] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.582547] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.583265] ? lock_downgrade+0x6d0/0x6d0 [ 2139.583876] ? find_held_lock+0x2c/0x110 [ 2139.584485] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.585126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.585836] ? wait_for_completion_io+0x270/0x270 [ 2139.586550] ? rcu_read_lock_any_held+0x75/0xa0 [ 2139.587235] ? vfs_write+0x354/0xa70 [ 2139.587798] ? fput_many+0x2f/0x1a0 [ 2139.588342] ? ksys_write+0x1a9/0x260 [ 2139.588889] ? __ia32_sys_read+0xb0/0xb0 [ 2139.589504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.590278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.591059] do_syscall_64+0x33/0x40 [ 2139.591628] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.592386] RIP: 0033:0x7fa6ace83b19 [ 2139.592935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.595637] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.596755] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2139.597795] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.598841] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.599906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.600952] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2139.613859] FAULT_INJECTION: forcing a failure. [ 2139.613859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.614976] CPU: 1 PID: 13002 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2139.615631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.616408] Call Trace: [ 2139.616669] dump_stack+0x107/0x167 [ 2139.617006] should_fail.cold+0x5/0xa [ 2139.617378] _copy_from_user+0x2e/0x1b0 [ 2139.617742] get_timespec64+0x75/0x190 [ 2139.618103] ? put_timespec64+0x130/0x130 [ 2139.618489] ? wait_for_completion_io+0x270/0x270 [ 2139.618931] __x64_sys_ppoll+0x14a/0x2a0 [ 2139.619316] ? fput_many+0x2f/0x1a0 [ 2139.619668] ? __ia32_sys_poll+0x490/0x490 [ 2139.620059] ? ksys_write+0x1a9/0x260 [ 2139.620418] ? __ia32_sys_read+0xb0/0xb0 [ 2139.620800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.621279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.621752] do_syscall_64+0x33/0x40 [ 2139.622099] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.622567] RIP: 0033:0x7f8be7960b19 [ 2139.622915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.624615] RSP: 002b:00007f8be4ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2139.625321] RAX: ffffffffffffffda RBX: 00007f8be7a73f60 RCX: 00007f8be7960b19 [ 2139.625979] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000020000180 [ 2139.626635] RBP: 00007f8be4ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.627292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.627939] R13: 00007ffc2ff4481f R14: 00007f8be4ed6300 R15: 0000000000022000 09:06:26 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 4) 09:06:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) 09:06:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ff0000/0xd000)=nil, 0x0) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) 09:06:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) [ 2139.655626] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2139.656337] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2139.656986] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2139.662756] FAULT_INJECTION: forcing a failure. [ 2139.662756] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.664496] CPU: 0 PID: 13007 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2139.665502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.666707] Call Trace: [ 2139.667099] dump_stack+0x107/0x167 [ 2139.667640] should_fail.cold+0x5/0xa [ 2139.668209] ? shmem_alloc_inode+0x18/0x40 [ 2139.668827] should_failslab+0x5/0x20 [ 2139.669388] kmem_cache_alloc+0x5b/0x310 [ 2139.669992] ? shmem_destroy_inode+0x70/0x70 [ 2139.670638] shmem_alloc_inode+0x18/0x40 [ 2139.671236] ? shmem_destroy_inode+0x70/0x70 [ 2139.671902] alloc_inode+0x63/0x240 [ 2139.672438] new_inode+0x23/0x250 [ 2139.672952] shmem_get_inode+0x15e/0xbc0 [ 2139.673559] __shmem_file_setup+0xb8/0x320 [ 2139.674180] ? _copy_from_user+0xfb/0x1b0 [ 2139.674489] ISOFS: Unable to identify CD-ROM format. [ 2139.674788] __do_sys_memfd_create+0x275/0x450 [ 2139.674810] ? memfd_file_seals_ptr+0x170/0x170 [ 2139.676600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.677368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.678130] do_syscall_64+0x33/0x40 [ 2139.678680] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.679446] RIP: 0033:0x7f643d472b19 [ 2139.680009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.682676] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2139.683812] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2139.684859] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2139.685898] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2139.686944] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2139.688006] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 09:06:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) [ 2139.713037] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:06:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x48, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:06:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2139.763559] FAULT_INJECTION: forcing a failure. [ 2139.763559] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.765372] CPU: 0 PID: 13011 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2139.766380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.767624] Call Trace: [ 2139.768018] dump_stack+0x107/0x167 [ 2139.768558] should_fail.cold+0x5/0xa [ 2139.769121] ? create_io_worker+0xe8/0x620 [ 2139.769747] should_failslab+0x5/0x20 [ 2139.770311] kmem_cache_alloc_node_trace+0x59/0x340 [ 2139.771048] create_io_worker+0xe8/0x620 [ 2139.771685] io_wqe_enqueue+0x69e/0xbe0 [ 2139.772412] ? create_worker_cb+0x260/0x260 [ 2139.773221] ? io_wq_work_match_all+0x10/0x10 [ 2139.773935] ? io_prep_async_work+0x340/0x550 [ 2139.774603] io_queue_async_work+0x26b/0x4f0 [ 2139.775273] __io_queue_sqe+0x5cc/0x9d0 [ 2139.775914] ? io_issue_sqe+0x7700/0x7700 [ 2139.776533] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2139.777249] io_submit_sqes+0x4461/0x85c0 [ 2139.777917] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.778656] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.779418] ? lock_downgrade+0x6d0/0x6d0 [ 2139.780050] ? find_held_lock+0x2c/0x110 [ 2139.780665] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.781317] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.782063] ? wait_for_completion_io+0x270/0x270 [ 2139.782818] ? rcu_read_lock_any_held+0x75/0xa0 [ 2139.783531] ? vfs_write+0x354/0xa70 [ 2139.784076] ? fput_many+0x2f/0x1a0 [ 2139.784611] ? ksys_write+0x1a9/0x260 [ 2139.785173] ? __ia32_sys_read+0xb0/0xb0 [ 2139.785773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.786540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.787308] do_syscall_64+0x33/0x40 [ 2139.787866] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.788613] RIP: 0033:0x7f9c97c70b19 [ 2139.789158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.791824] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.792933] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2139.793971] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.795011] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.796073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.797107] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2139.812852] FAULT_INJECTION: forcing a failure. [ 2139.812852] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.813918] CPU: 1 PID: 13014 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2139.814502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.815193] Call Trace: [ 2139.815442] dump_stack+0x107/0x167 [ 2139.815767] should_fail.cold+0x5/0xa [ 2139.816104] ? create_object.isra.0+0x3a/0xa20 [ 2139.816501] should_failslab+0x5/0x20 [ 2139.816835] kmem_cache_alloc+0x5b/0x310 [ 2139.817189] ? mark_held_locks+0x9e/0xe0 [ 2139.817529] create_object.isra.0+0x3a/0xa20 [ 2139.817893] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.818320] kmem_cache_alloc_bulk+0x168/0x320 [ 2139.818696] io_submit_sqes+0x6f76/0x85c0 [ 2139.819046] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.819481] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2139.819882] ? io_submit_sqes+0x85c0/0x85c0 [ 2139.820243] ? __mutex_unlock_slowpath+0xd4/0x600 [ 2139.820642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2139.821038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.821480] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2139.821925] ? trace_hardirqs_on+0x5b/0x180 [ 2139.822284] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2139.822735] ? __io_uring_cancel+0x20/0x20 [ 2139.823081] do_syscall_64+0x33/0x40 [ 2139.823392] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.823805] RIP: 0033:0x7f705a641b19 [ 2139.824109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.825590] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2139.826211] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2139.826807] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2139.827406] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.827996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.828591] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2139.865308] FAULT_INJECTION: forcing a failure. [ 2139.865308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.867150] CPU: 0 PID: 13021 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2139.868206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.869427] Call Trace: [ 2139.869840] dump_stack+0x107/0x167 [ 2139.870386] should_fail.cold+0x5/0xa [ 2139.870951] _copy_from_user+0x2e/0x1b0 [ 2139.871553] do_sys_poll+0x1f9/0xe60 [ 2139.872113] ? compat_core_sys_select+0x8b0/0x8b0 [ 2139.872825] ? mark_lock+0xf5/0x2df0 09:06:27 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) (fail_nth: 2) 09:06:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) 09:06:27 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 5) [ 2139.873537] ? mark_lock+0xf5/0x2df0 [ 2139.874089] ? lock_chain_count+0x20/0x20 [ 2139.874698] ? lock_chain_count+0x20/0x20 [ 2139.875328] ? mark_lock+0xf5/0x2df0 [ 2139.875888] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2139.876659] ? __lock_acquire+0x1657/0x5b00 [ 2139.877292] ? lock_chain_count+0x20/0x20 [ 2139.877907] ? __lock_acquire+0x1657/0x5b00 [ 2139.878553] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2139.879324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2139.880096] ? lock_acquire+0x197/0x470 [ 2139.880672] ? find_held_lock+0x2c/0x110 [ 2139.881275] ? __might_fault+0xd3/0x180 [ 2139.881853] ? lock_downgrade+0x6d0/0x6d0 [ 2139.882477] ? _copy_from_user+0xfb/0x1b0 [ 2139.883081] ? set_user_sigmask+0x211/0x2a0 [ 2139.883716] ? __set_current_blocked+0x110/0x110 [ 2139.884404] ? wait_for_completion_io+0x270/0x270 [ 2139.885110] __x64_sys_ppoll+0x227/0x2a0 [ 2139.885704] ? __ia32_sys_poll+0x490/0x490 [ 2139.886322] ? ksys_write+0x1a9/0x260 [ 2139.886877] ? __ia32_sys_read+0xb0/0xb0 [ 2139.887495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.888260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.889013] do_syscall_64+0x33/0x40 [ 2139.889561] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.890306] RIP: 0033:0x7f8be7960b19 [ 2139.890847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.893491] RSP: 002b:00007f8be4ed6188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2139.894592] RAX: ffffffffffffffda RBX: 00007f8be7a73f60 RCX: 00007f8be7960b19 [ 2139.895625] RDX: 00000000200001c0 RSI: 0000000000000001 RDI: 0000000020000180 [ 2139.896652] RBP: 00007f8be4ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.897677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.898710] R13: 00007ffc2ff4481f R14: 00007f8be4ed6300 R15: 0000000000022000 [ 2139.918933] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2139.919637] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2139.920246] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2139.924576] ISOFS: Unable to identify CD-ROM format. [ 2139.928544] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2139.940087] FAULT_INJECTION: forcing a failure. [ 2139.940087] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.941154] CPU: 1 PID: 13027 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2139.941707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.942369] Call Trace: [ 2139.942591] dump_stack+0x107/0x167 [ 2139.942886] should_fail.cold+0x5/0xa [ 2139.943199] ? create_object.isra.0+0x3a/0xa20 [ 2139.943576] should_failslab+0x5/0x20 [ 2139.943887] kmem_cache_alloc+0x5b/0x310 [ 2139.944229] create_object.isra.0+0x3a/0xa20 [ 2139.944585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.945001] kmem_cache_alloc+0x159/0x310 [ 2139.945342] ? shmem_destroy_inode+0x70/0x70 [ 2139.945700] shmem_alloc_inode+0x18/0x40 [ 2139.946030] ? shmem_destroy_inode+0x70/0x70 [ 2139.946388] alloc_inode+0x63/0x240 [ 2139.946678] new_inode+0x23/0x250 [ 2139.946961] shmem_get_inode+0x15e/0xbc0 [ 2139.947303] __shmem_file_setup+0xb8/0x320 [ 2139.947649] ? _copy_from_user+0xfb/0x1b0 [ 2139.947988] __do_sys_memfd_create+0x275/0x450 [ 2139.948359] ? memfd_file_seals_ptr+0x170/0x170 [ 2139.948739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.949168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.949586] do_syscall_64+0x33/0x40 [ 2139.949890] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.950305] RIP: 0033:0x7f643d472b19 [ 2139.950605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.952084] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2139.952697] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2139.953266] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2139.953838] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2139.954406] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2139.954978] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2140.008654] ISOFS: Unable to identify CD-ROM format. [ 2140.022227] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2140.022896] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2140.023586] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2140.028862] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2152.282919] FAULT_INJECTION: forcing a failure. 09:06:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 09:06:39 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 6) 09:06:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 09:06:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4a, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:06:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:06:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) 09:06:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) (fail_nth: 3) 09:06:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) [ 2152.282919] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.284992] CPU: 1 PID: 13045 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2152.285951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.287095] Call Trace: [ 2152.287484] dump_stack+0x107/0x167 [ 2152.287997] should_fail.cold+0x5/0xa [ 2152.288535] ? security_inode_alloc+0x34/0x160 [ 2152.289172] should_failslab+0x5/0x20 [ 2152.289706] kmem_cache_alloc+0x5b/0x310 [ 2152.290286] security_inode_alloc+0x34/0x160 [ 2152.290903] inode_init_always+0xa4e/0xd10 [ 2152.291505] ? shmem_destroy_inode+0x70/0x70 [ 2152.292146] alloc_inode+0x84/0x240 [ 2152.292663] new_inode+0x23/0x250 [ 2152.293156] shmem_get_inode+0x15e/0xbc0 [ 2152.293737] __shmem_file_setup+0xb8/0x320 [ 2152.294342] ? _copy_from_user+0xfb/0x1b0 [ 2152.294925] __do_sys_memfd_create+0x275/0x450 [ 2152.295567] ? memfd_file_seals_ptr+0x170/0x170 [ 2152.296239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.296656] FAULT_INJECTION: forcing a failure. [ 2152.296656] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.296975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.297005] do_syscall_64+0x33/0x40 [ 2152.299195] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.299924] RIP: 0033:0x7f643d472b19 [ 2152.300447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.302995] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2152.304069] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2152.305055] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2152.306048] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2152.307041] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2152.308040] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2152.309063] CPU: 0 PID: 13049 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2152.309669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.310383] Call Trace: [ 2152.310624] dump_stack+0x107/0x167 [ 2152.310945] should_fail.cold+0x5/0xa [ 2152.311287] ? create_object.isra.0+0x3a/0xa20 [ 2152.311693] should_failslab+0x5/0x20 [ 2152.312029] kmem_cache_alloc+0x5b/0x310 [ 2152.312387] ? lock_acquire+0x197/0x470 [ 2152.312735] create_object.isra.0+0x3a/0xa20 [ 2152.313119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2152.313563] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2152.314014] create_io_worker+0xe8/0x620 [ 2152.314369] io_wqe_enqueue+0x69e/0xbe0 [ 2152.314714] ? create_worker_cb+0x260/0x260 [ 2152.315092] ? io_wq_work_match_all+0x10/0x10 [ 2152.315508] ? io_prep_async_work+0x340/0x550 [ 2152.315903] io_queue_async_work+0x26b/0x4f0 [ 2152.316288] __io_queue_sqe+0x5cc/0x9d0 [ 2152.316636] ? io_issue_sqe+0x7700/0x7700 [ 2152.317000] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2152.317409] io_submit_sqes+0x4461/0x85c0 [ 2152.317785] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.318229] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.318660] ? lock_downgrade+0x6d0/0x6d0 [ 2152.319030] ? find_held_lock+0x2c/0x110 [ 2152.319386] ? io_submit_sqes+0x85c0/0x85c0 [ 2152.319794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2152.320232] ? wait_for_completion_io+0x270/0x270 [ 2152.320652] ? rcu_read_lock_any_held+0x75/0xa0 [ 2152.321061] ? vfs_write+0x354/0xa70 [ 2152.321387] ? fput_many+0x2f/0x1a0 [ 2152.321704] ? ksys_write+0x1a9/0x260 [ 2152.322035] ? __ia32_sys_read+0xb0/0xb0 [ 2152.322392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.322844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.323299] do_syscall_64+0x33/0x40 [ 2152.323629] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.324079] RIP: 0033:0x7f9c97c70b19 [ 2152.324401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.325974] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2152.326629] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2152.327232] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2152.327836] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.328437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.329042] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 09:06:39 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) [ 2152.336731] FAULT_INJECTION: forcing a failure. [ 2152.336731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2152.338561] CPU: 1 PID: 13048 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2152.339568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.340769] Call Trace: [ 2152.341170] dump_stack+0x107/0x167 [ 2152.341707] should_fail.cold+0x5/0xa [ 2152.342264] _copy_to_user+0x2e/0x180 [ 2152.342808] simple_read_from_buffer+0xcc/0x160 [ 2152.343486] proc_fail_nth_read+0x198/0x230 [ 2152.344116] ? proc_sessionid_read+0x230/0x230 [ 2152.344783] ? security_file_permission+0x24e/0x570 [ 2152.345500] ? perf_trace_initcall_start+0x101/0x380 [ 2152.346236] ? proc_sessionid_read+0x230/0x230 [ 2152.346890] vfs_read+0x228/0x580 [ 2152.347418] ksys_read+0x12d/0x260 [ 2152.348131] ? vfs_write+0xa70/0xa70 [ 2152.348701] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.349476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.350240] do_syscall_64+0x33/0x40 [ 2152.350786] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.351569] RIP: 0033:0x7f8be791369c [ 2152.352129] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2152.354797] RSP: 002b:00007f8be4ed6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2152.355909] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8be791369c [ 2152.356963] RDX: 000000000000000f RSI: 00007f8be4ed61e0 RDI: 0000000000000004 [ 2152.358014] RBP: 00007f8be4ed61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.359056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2152.360111] R13: 00007ffc2ff4481f R14: 00007f8be4ed6300 R15: 0000000000022000 [ 2152.366120] FAULT_INJECTION: forcing a failure. [ 2152.366120] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.368301] CPU: 1 PID: 13043 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2152.369335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.370579] Call Trace: [ 2152.370982] dump_stack+0x107/0x167 [ 2152.371540] should_fail.cold+0x5/0xa [ 2152.372114] ? create_io_worker+0xe8/0x620 [ 2152.372753] should_failslab+0x5/0x20 [ 2152.373313] kmem_cache_alloc_node_trace+0x59/0x340 [ 2152.374054] create_io_worker+0xe8/0x620 [ 2152.374656] io_wqe_enqueue+0x69e/0xbe0 [ 2152.375247] ? create_worker_cb+0x260/0x260 [ 2152.375884] ? io_wq_work_match_all+0x10/0x10 [ 2152.376544] ? io_prep_async_work+0x340/0x550 [ 2152.377209] io_queue_async_work+0x26b/0x4f0 [ 2152.377858] __io_queue_sqe+0x5cc/0x9d0 [ 2152.378450] ? io_issue_sqe+0x7700/0x7700 [ 2152.379064] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2152.379773] io_submit_sqes+0x4461/0x85c0 [ 2152.380412] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.381135] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.381841] ? lock_downgrade+0x6d0/0x6d0 [ 2152.382449] ? find_held_lock+0x2c/0x110 [ 2152.383045] ? io_submit_sqes+0x85c0/0x85c0 [ 2152.383695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2152.384405] ? wait_for_completion_io+0x270/0x270 [ 2152.385113] ? rcu_read_lock_any_held+0x75/0xa0 [ 2152.385799] ? vfs_write+0x354/0xa70 [ 2152.386351] ? fput_many+0x2f/0x1a0 [ 2152.386895] ? ksys_write+0x1a9/0x260 [ 2152.387461] ? __ia32_sys_read+0xb0/0xb0 [ 2152.388070] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.388839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.389600] do_syscall_64+0x33/0x40 [ 2152.390155] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.390903] RIP: 0033:0x7fa6ace83b19 [ 2152.391457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.394121] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2152.395240] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2152.396285] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2152.397323] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.398368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.399405] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2152.422822] FAULT_INJECTION: forcing a failure. [ 2152.422822] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.423869] CPU: 0 PID: 13051 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2152.424457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.425150] Call Trace: [ 2152.425390] dump_stack+0x107/0x167 [ 2152.425707] should_fail.cold+0x5/0xa [ 2152.426045] ? create_object.isra.0+0x3a/0xa20 [ 2152.426447] should_failslab+0x5/0x20 [ 2152.426776] kmem_cache_alloc+0x5b/0x310 [ 2152.427114] create_object.isra.0+0x3a/0xa20 [ 2152.427490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2152.427913] kmem_cache_alloc_bulk+0x168/0x320 [ 2152.428297] io_submit_sqes+0x6f76/0x85c0 [ 2152.428661] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.429072] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.429475] ? lock_downgrade+0x6d0/0x6d0 [ 2152.429816] ? find_held_lock+0x2c/0x110 [ 2152.430158] ? io_submit_sqes+0x85c0/0x85c0 [ 2152.430525] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2152.430928] ? wait_for_completion_io+0x270/0x270 [ 2152.431332] ? rcu_read_lock_any_held+0x75/0xa0 [ 2152.431733] ? vfs_write+0x354/0xa70 [ 2152.432040] ? fput_many+0x2f/0x1a0 [ 2152.432343] ? ksys_write+0x1a9/0x260 [ 2152.432659] ? __ia32_sys_read+0xb0/0xb0 [ 2152.432999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.433430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.433865] do_syscall_64+0x33/0x40 [ 2152.434174] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.434596] RIP: 0033:0x7f705a641b19 [ 2152.434906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.436417] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2152.437047] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2152.437638] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2152.438222] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.438811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.439393] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2152.454841] ISOFS: Unable to identify CD-ROM format. [ 2152.459662] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2152.460309] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2152.460902] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:06:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) [ 2152.502092] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2152.508595] FAULT_INJECTION: forcing a failure. [ 2152.508595] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.509576] CPU: 0 PID: 13061 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2152.510140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.510812] Call Trace: [ 2152.511033] dump_stack+0x107/0x167 [ 2152.511332] should_fail.cold+0x5/0xa [ 2152.511648] ? create_io_worker+0xe8/0x620 [ 2152.512004] should_failslab+0x5/0x20 [ 2152.512324] kmem_cache_alloc_node_trace+0x59/0x340 [ 2152.512737] create_io_worker+0xe8/0x620 [ 2152.513076] io_wqe_enqueue+0x69e/0xbe0 [ 2152.513407] ? create_worker_cb+0x260/0x260 [ 2152.513756] ? io_wq_work_match_all+0x10/0x10 [ 2152.514121] ? io_prep_async_work+0x340/0x550 [ 2152.514500] io_queue_async_work+0x26b/0x4f0 [ 2152.514861] __io_queue_sqe+0x5cc/0x9d0 [ 2152.515190] ? io_issue_sqe+0x7700/0x7700 [ 2152.515542] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2152.515925] io_submit_sqes+0x4461/0x85c0 [ 2152.516279] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.516694] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2152.517089] ? lock_downgrade+0x6d0/0x6d0 [ 2152.517431] ? find_held_lock+0x2c/0x110 [ 2152.517771] ? io_submit_sqes+0x85c0/0x85c0 [ 2152.518125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2152.518523] ? wait_for_completion_io+0x270/0x270 [ 2152.518926] ? rcu_read_lock_any_held+0x75/0xa0 [ 2152.519311] ? vfs_write+0x354/0xa70 [ 2152.519619] ? fput_many+0x2f/0x1a0 [ 2152.519921] ? ksys_write+0x1a9/0x260 [ 2152.520234] ? __ia32_sys_read+0xb0/0xb0 [ 2152.520569] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.520992] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.521423] do_syscall_64+0x33/0x40 [ 2152.521727] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2152.522141] RIP: 0033:0x7f9c97c70b19 [ 2152.522452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.523935] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2152.524553] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2152.525124] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2152.525696] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.526266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.526841] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 09:06:52 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 7) 09:06:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 09:06:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 09:06:52 executing program 2: shmget(0x3, 0x3000, 0x4, &(0x7f0000ff5000/0x3000)=nil) 09:06:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:06:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4c, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:06:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 09:06:52 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d2, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2165.155610] FAULT_INJECTION: forcing a failure. [ 2165.155610] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.157281] CPU: 1 PID: 13084 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2165.158257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.159409] Call Trace: [ 2165.159805] dump_stack+0x107/0x167 [ 2165.160331] should_fail.cold+0x5/0xa [ 2165.160873] ? create_object.isra.0+0x3a/0xa20 [ 2165.161512] should_failslab+0x5/0x20 [ 2165.161989] FAULT_INJECTION: forcing a failure. [ 2165.161989] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.162049] kmem_cache_alloc+0x5b/0x310 [ 2165.162074] create_object.isra.0+0x3a/0xa20 [ 2165.164174] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2165.164885] kmem_cache_alloc+0x159/0x310 [ 2165.165481] security_inode_alloc+0x34/0x160 [ 2165.166093] inode_init_always+0xa4e/0xd10 [ 2165.166699] ? shmem_destroy_inode+0x70/0x70 [ 2165.167322] alloc_inode+0x84/0x240 [ 2165.167842] new_inode+0x23/0x250 [ 2165.168337] shmem_get_inode+0x15e/0xbc0 [ 2165.168916] __shmem_file_setup+0xb8/0x320 [ 2165.169511] ? _copy_from_user+0xfb/0x1b0 [ 2165.170095] __do_sys_memfd_create+0x275/0x450 [ 2165.170743] ? memfd_file_seals_ptr+0x170/0x170 [ 2165.171398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2165.172146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.172876] do_syscall_64+0x33/0x40 [ 2165.173405] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.174119] RIP: 0033:0x7f643d472b19 [ 2165.174649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.177212] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2165.178280] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2165.179269] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2165.180261] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2165.181264] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2165.182264] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2165.183286] CPU: 0 PID: 13081 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2165.183873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.184556] Call Trace: [ 2165.184793] dump_stack+0x107/0x167 [ 2165.185095] should_fail.cold+0x5/0xa [ 2165.185418] ? create_object.isra.0+0x3a/0xa20 [ 2165.185798] should_failslab+0x5/0x20 [ 2165.186118] kmem_cache_alloc+0x5b/0x310 [ 2165.186456] ? mark_held_locks+0x9e/0xe0 [ 2165.186792] create_object.isra.0+0x3a/0xa20 [ 2165.187154] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2165.187576] kmem_cache_alloc_bulk+0x168/0x320 [ 2165.187963] io_submit_sqes+0x6f76/0x85c0 [ 2165.188327] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.188743] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.189140] ? lock_downgrade+0x6d0/0x6d0 [ 2165.189483] ? find_held_lock+0x2c/0x110 [ 2165.189823] ? io_submit_sqes+0x85c0/0x85c0 [ 2165.190186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2165.190581] ? wait_for_completion_io+0x270/0x270 [ 2165.190978] ? rcu_read_lock_any_held+0x75/0xa0 [ 2165.191357] ? vfs_write+0x354/0xa70 [ 2165.191669] ? fput_many+0x2f/0x1a0 [ 2165.191965] ? ksys_write+0x1a9/0x260 [ 2165.192279] ? __ia32_sys_read+0xb0/0xb0 [ 2165.192613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2165.193041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.193468] do_syscall_64+0x33/0x40 [ 2165.193774] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.194192] RIP: 0033:0x7fa6ace83b19 [ 2165.194497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.195994] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2165.196611] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2165.197189] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2165.197768] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.198349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.198928] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2165.203198] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2165.204370] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2165.205400] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2165.206623] FAULT_INJECTION: forcing a failure. [ 2165.206623] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.207662] CPU: 0 PID: 13072 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2165.208250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.208944] Call Trace: [ 2165.209175] dump_stack+0x107/0x167 [ 2165.209488] should_fail.cold+0x5/0xa [ 2165.209822] ? create_object.isra.0+0x3a/0xa20 [ 2165.210218] should_failslab+0x5/0x20 [ 2165.210557] kmem_cache_alloc+0x5b/0x310 [ 2165.210898] ? lock_acquire+0x197/0x470 [ 2165.211231] create_object.isra.0+0x3a/0xa20 [ 2165.211604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2165.212021] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2165.212448] create_io_worker+0xe8/0x620 [ 2165.212783] io_wqe_enqueue+0x69e/0xbe0 [ 2165.213111] ? create_worker_cb+0x260/0x260 [ 2165.213474] ? io_wq_work_match_all+0x10/0x10 [ 2165.213850] ? io_prep_async_work+0x340/0x550 [ 2165.214224] io_queue_async_work+0x26b/0x4f0 [ 2165.214595] __io_queue_sqe+0x5cc/0x9d0 [ 2165.214933] ? io_issue_sqe+0x7700/0x7700 [ 2165.215281] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2165.215685] io_submit_sqes+0x4461/0x85c0 [ 2165.216043] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.216464] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.216878] ? lock_downgrade+0x6d0/0x6d0 [ 2165.217221] ? find_held_lock+0x2c/0x110 [ 2165.217560] ? io_submit_sqes+0x85c0/0x85c0 [ 2165.217921] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2165.218327] ? wait_for_completion_io+0x270/0x270 [ 2165.218719] ? rcu_read_lock_any_held+0x75/0xa0 [ 2165.219114] ? vfs_write+0x354/0xa70 [ 2165.219431] ? fput_many+0x2f/0x1a0 [ 2165.219747] ? ksys_write+0x1a9/0x260 [ 2165.220072] ? __ia32_sys_read+0xb0/0xb0 [ 2165.220421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2165.220848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.221280] do_syscall_64+0x33/0x40 [ 2165.221587] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.222003] RIP: 0033:0x7f705a641b19 [ 2165.222316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.223830] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2165.224456] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2165.225035] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2165.225626] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.226205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.226788] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2165.237630] ISOFS: Unable to identify CD-ROM format. 09:06:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x300, &(0x7f00000001c0), 0x0, 0x0) 09:06:52 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2165.246945] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2165.256394] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2165.257040] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2165.257660] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2165.265078] FAULT_INJECTION: forcing a failure. [ 2165.265078] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.267060] CPU: 1 PID: 13085 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2165.268040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.269195] Call Trace: [ 2165.269498] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2165.269572] dump_stack+0x107/0x167 [ 2165.270780] should_fail.cold+0x5/0xa [ 2165.271317] ? create_io_worker+0xe8/0x620 [ 2165.271918] should_failslab+0x5/0x20 [ 2165.272458] kmem_cache_alloc_node_trace+0x59/0x340 [ 2165.273162] create_io_worker+0xe8/0x620 [ 2165.273737] io_wqe_enqueue+0x69e/0xbe0 [ 2165.274305] ? create_worker_cb+0x260/0x260 [ 2165.274907] ? io_wq_work_match_all+0x10/0x10 [ 2165.275530] ? io_prep_async_work+0x340/0x550 [ 2165.276172] io_queue_async_work+0x26b/0x4f0 [ 2165.276793] __io_queue_sqe+0x5cc/0x9d0 [ 2165.277358] ? io_issue_sqe+0x7700/0x7700 [ 2165.277945] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2165.278613] io_submit_sqes+0x4461/0x85c0 [ 2165.279217] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.279919] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.280600] ? lock_downgrade+0x6d0/0x6d0 [ 2165.281177] ? find_held_lock+0x2c/0x110 [ 2165.281752] ? io_submit_sqes+0x85c0/0x85c0 [ 2165.282362] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2165.283039] ? wait_for_completion_io+0x270/0x270 [ 2165.283728] ? rcu_read_lock_any_held+0x75/0xa0 [ 2165.284377] ? vfs_write+0x354/0xa70 [ 2165.284904] ? fput_many+0x2f/0x1a0 [ 2165.285425] ? ksys_write+0x1a9/0x260 [ 2165.285960] ? __ia32_sys_read+0xb0/0xb0 [ 2165.286533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2165.287264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.287998] do_syscall_64+0x33/0x40 [ 2165.288515] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.289231] RIP: 0033:0x7f9c97c70b19 [ 2165.289750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.292297] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2165.292370] ISOFS: Unable to identify CD-ROM format. [ 2165.293349] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2165.293360] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2165.293371] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.293387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.297696] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 09:06:52 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 8) 09:06:52 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d3, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2165.341974] FAULT_INJECTION: forcing a failure. [ 2165.341974] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.342915] CPU: 0 PID: 13099 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2165.343474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.344157] Call Trace: [ 2165.344379] dump_stack+0x107/0x167 [ 2165.344673] should_fail.cold+0x5/0xa [ 2165.344986] ? __d_alloc+0x2a/0x990 [ 2165.345282] should_failslab+0x5/0x20 [ 2165.345591] kmem_cache_alloc+0x5b/0x310 [ 2165.345919] ? trace_hardirqs_on+0x5b/0x180 [ 2165.346268] __d_alloc+0x2a/0x990 [ 2165.346551] d_alloc_pseudo+0x19/0x70 [ 2165.346866] alloc_file_pseudo+0xce/0x250 09:06:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4e, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2165.347200] ? alloc_file+0x5a0/0x5a0 [ 2165.347714] ? shmem_get_inode+0x55c/0xbc0 [ 2165.348061] __shmem_file_setup+0x144/0x320 [ 2165.348415] ? _copy_from_user+0xfb/0x1b0 [ 2165.348754] __do_sys_memfd_create+0x275/0x450 [ 2165.349118] ? memfd_file_seals_ptr+0x170/0x170 [ 2165.349497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2165.349928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.350346] do_syscall_64+0x33/0x40 [ 2165.350647] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.351055] RIP: 0033:0x7f643d472b19 [ 2165.351362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.352844] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2165.353470] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2165.354036] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2165.354620] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2165.355188] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2165.355763] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 09:06:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) [ 2165.396544] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2165.397799] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2165.398851] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2165.423869] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2165.428188] ISOFS: Unable to identify CD-ROM format. [ 2165.449538] FAULT_INJECTION: forcing a failure. [ 2165.449538] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.450727] CPU: 0 PID: 13107 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2165.451280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2165.451943] Call Trace: [ 2165.452169] dump_stack+0x107/0x167 [ 2165.452463] should_fail.cold+0x5/0xa [ 2165.452772] ? create_io_worker+0xe8/0x620 [ 2165.453121] should_failslab+0x5/0x20 [ 2165.453429] kmem_cache_alloc_node_trace+0x59/0x340 [ 2165.453834] create_io_worker+0xe8/0x620 [ 2165.454167] io_wqe_enqueue+0x69e/0xbe0 [ 2165.454493] ? create_worker_cb+0x260/0x260 [ 2165.454851] ? io_prep_async_work+0x340/0x550 [ 2165.455216] io_queue_async_work+0x26b/0x4f0 [ 2165.455575] __io_queue_sqe+0x5cc/0x9d0 [ 2165.455913] ? io_issue_sqe+0x7700/0x7700 [ 2165.456253] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2165.456638] io_submit_sqes+0x4461/0x85c0 [ 2165.456989] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.457391] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2165.457781] ? lock_downgrade+0x6d0/0x6d0 [ 2165.458115] ? find_held_lock+0x2c/0x110 [ 2165.458443] ? io_submit_sqes+0x85c0/0x85c0 [ 2165.458796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2165.459189] ? wait_for_completion_io+0x270/0x270 [ 2165.459583] ? rcu_read_lock_any_held+0x75/0xa0 [ 2165.459966] ? vfs_write+0x354/0xa70 [ 2165.460276] ? fput_many+0x2f/0x1a0 [ 2165.460573] ? ksys_write+0x1a9/0x260 [ 2165.460881] ? __ia32_sys_read+0xb0/0xb0 [ 2165.461213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2165.461633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2165.462052] do_syscall_64+0x33/0x40 [ 2165.462354] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2165.462767] RIP: 0033:0x7fa6ace83b19 [ 2165.463078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2165.464553] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2165.465166] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2165.465736] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2165.466311] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.466881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2165.467454] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:07:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 09:07:05 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d4, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:07:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) 09:07:05 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) (fail_nth: 1) 09:07:05 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 9) 09:07:05 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x300, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:07:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 09:07:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x3b9ac9ff) [ 2178.501670] FAULT_INJECTION: forcing a failure. [ 2178.501670] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.502674] CPU: 1 PID: 13118 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2178.503262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.503912] Call Trace: [ 2178.504133] dump_stack+0x107/0x167 [ 2178.504444] should_fail.cold+0x5/0xa [ 2178.504752] ? create_object.isra.0+0x3a/0xa20 [ 2178.505141] should_failslab+0x5/0x20 [ 2178.505465] kmem_cache_alloc+0x5b/0x310 [ 2178.505811] ? lock_acquire+0x197/0x470 [ 2178.506136] create_object.isra.0+0x3a/0xa20 [ 2178.506512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2178.506916] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2178.507349] create_io_worker+0xe8/0x620 [ 2178.507680] io_wqe_enqueue+0x69e/0xbe0 [ 2178.508028] ? create_worker_cb+0x260/0x260 [ 2178.508394] ? io_wq_work_match_all+0x10/0x10 [ 2178.508755] ? io_prep_async_work+0x340/0x550 [ 2178.509142] io_queue_async_work+0x26b/0x4f0 [ 2178.509520] __io_queue_sqe+0x5cc/0x9d0 [ 2178.509863] ? io_issue_sqe+0x7700/0x7700 [ 2178.510203] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2178.510609] io_submit_sqes+0x4461/0x85c0 [ 2178.510959] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.511382] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.511800] ? lock_downgrade+0x6d0/0x6d0 [ 2178.512135] ? find_held_lock+0x2c/0x110 [ 2178.512486] ? io_submit_sqes+0x85c0/0x85c0 [ 2178.512837] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2178.513248] ? wait_for_completion_io+0x270/0x270 [ 2178.513658] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.514025] ? vfs_write+0x354/0xa70 [ 2178.514341] ? fput_many+0x2f/0x1a0 [ 2178.514638] ? ksys_write+0x1a9/0x260 [ 2178.514960] ? __ia32_sys_read+0xb0/0xb0 [ 2178.515307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.515764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.516202] do_syscall_64+0x33/0x40 [ 2178.516500] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2178.516927] RIP: 0033:0x7fa6ace83b19 [ 2178.517228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.518700] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2178.519318] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2178.519884] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2178.520433] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.520980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2178.521529] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2178.522884] FAULT_INJECTION: forcing a failure. [ 2178.522884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.523568] FAULT_INJECTION: forcing a failure. [ 2178.523568] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.523863] CPU: 1 PID: 13120 Comm: syz-executor.2 Not tainted 5.10.214 #1 [ 2178.526236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.527100] Call Trace: [ 2178.527380] dump_stack+0x107/0x167 [ 2178.527773] should_fail.cold+0x5/0xa [ 2178.528184] _copy_to_user+0x2e/0x180 [ 2178.528592] simple_read_from_buffer+0xcc/0x160 [ 2178.529087] proc_fail_nth_read+0x198/0x230 [ 2178.529548] ? proc_sessionid_read+0x230/0x230 [ 2178.530034] ? security_file_permission+0x24e/0x570 [ 2178.530565] ? perf_trace_initcall_start+0x101/0x380 [ 2178.531107] ? proc_sessionid_read+0x230/0x230 [ 2178.531590] vfs_read+0x228/0x580 [ 2178.531972] ksys_read+0x12d/0x260 [ 2178.532344] ? vfs_write+0xa70/0xa70 [ 2178.532742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.533288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.533837] do_syscall_64+0x33/0x40 [ 2178.534231] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2178.534766] RIP: 0033:0x7f6b6f18f69c [ 2178.535155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2178.537066] RSP: 002b:00007f6b6c752170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2178.537869] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f6b6f18f69c [ 2178.538617] RDX: 000000000000000f RSI: 00007f6b6c7521e0 RDI: 0000000000000003 [ 2178.539358] RBP: 00007f6b6c7521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.540112] R10: 0000000020ff5000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.540852] R13: 00007ffe85e968bf R14: 00007f6b6c752300 R15: 0000000000022000 [ 2178.541613] CPU: 0 PID: 13126 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2178.542668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.543920] Call Trace: [ 2178.544329] dump_stack+0x107/0x167 [ 2178.544882] should_fail.cold+0x5/0xa [ 2178.545470] ? create_object.isra.0+0x3a/0xa20 [ 2178.546168] should_failslab+0x5/0x20 [ 2178.546753] kmem_cache_alloc+0x5b/0x310 [ 2178.547378] create_object.isra.0+0x3a/0xa20 [ 2178.548054] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2178.548843] kmem_cache_alloc+0x159/0x310 [ 2178.549474] ? trace_hardirqs_on+0x5b/0x180 [ 2178.550139] __d_alloc+0x2a/0x990 [ 2178.550677] d_alloc_pseudo+0x19/0x70 [ 2178.551260] alloc_file_pseudo+0xce/0x250 [ 2178.551902] ? alloc_file+0x5a0/0x5a0 [ 2178.552496] ? shmem_get_inode+0x55c/0xbc0 [ 2178.553156] __shmem_file_setup+0x144/0x320 [ 2178.553821] ? _copy_from_user+0xfb/0x1b0 [ 2178.554459] __do_sys_memfd_create+0x275/0x450 [ 2178.555160] ? memfd_file_seals_ptr+0x170/0x170 [ 2178.555896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.556712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.557514] do_syscall_64+0x33/0x40 [ 2178.558094] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2178.558897] RIP: 0033:0x7f643d472b19 [ 2178.559474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.560539] FAULT_INJECTION: forcing a failure. [ 2178.560539] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.562318] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2178.562339] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2178.562350] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2178.562361] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2178.562373] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2178.562384] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2178.572141] CPU: 1 PID: 13127 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2178.573227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.574523] Call Trace: [ 2178.574945] dump_stack+0x107/0x167 [ 2178.575537] should_fail.cold+0x5/0xa [ 2178.576149] ? create_object.isra.0+0x3a/0xa20 [ 2178.576875] should_failslab+0x5/0x20 [ 2178.577486] kmem_cache_alloc+0x5b/0x310 [ 2178.578131] ? mark_held_locks+0x9e/0xe0 [ 2178.578778] create_object.isra.0+0x3a/0xa20 [ 2178.579473] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2178.580288] kmem_cache_alloc_bulk+0x168/0x320 [ 2178.581016] io_submit_sqes+0x6f76/0x85c0 [ 2178.581702] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.582484] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.583245] ? lock_downgrade+0x6d0/0x6d0 [ 2178.583902] ? find_held_lock+0x2c/0x110 [ 2178.584546] ? io_submit_sqes+0x85c0/0x85c0 [ 2178.585232] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2178.585991] ? wait_for_completion_io+0x270/0x270 [ 2178.586751] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.587477] ? vfs_write+0x354/0xa70 [ 2178.588071] ? fput_many+0x2f/0x1a0 [ 2178.588647] ? ksys_write+0x1a9/0x260 [ 2178.589248] ? __ia32_sys_read+0xb0/0xb0 [ 2178.589892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.590712] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.591525] do_syscall_64+0x33/0x40 [ 2178.592117] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2178.592917] RIP: 0033:0x7f9c97c70b19 [ 2178.593502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.596386] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2178.597564] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2178.598670] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2178.599782] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.600884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2178.601986] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 09:07:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0xfefdffff) [ 2178.624906] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2178.626036] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2178.627067] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2178.632652] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2178.635800] FAULT_INJECTION: forcing a failure. [ 2178.635800] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.637562] CPU: 1 PID: 13119 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2178.638539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.639704] Call Trace: [ 2178.640101] dump_stack+0x107/0x167 [ 2178.640632] should_fail.cold+0x5/0xa [ 2178.641187] ? create_object.isra.0+0x3a/0xa20 [ 2178.641847] should_failslab+0x5/0x20 [ 2178.642390] kmem_cache_alloc+0x5b/0x310 [ 2178.642961] ? mark_held_locks+0x9e/0xe0 [ 2178.643538] create_object.isra.0+0x3a/0xa20 [ 2178.644166] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2178.644885] kmem_cache_alloc_bulk+0x168/0x320 [ 2178.645539] io_submit_sqes+0x6f76/0x85c0 [ 2178.646148] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.646863] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.647556] ? lock_downgrade+0x6d0/0x6d0 [ 2178.648157] ? find_held_lock+0x2c/0x110 [ 2178.648745] ? io_submit_sqes+0x85c0/0x85c0 [ 2178.649373] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2178.650064] ? wait_for_completion_io+0x270/0x270 [ 2178.650755] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.651404] ? vfs_write+0x354/0xa70 [ 2178.651936] ? fput_many+0x2f/0x1a0 [ 2178.652451] ? ksys_write+0x1a9/0x260 [ 2178.652990] ? __ia32_sys_read+0xb0/0xb0 [ 2178.653568] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.654312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.655039] do_syscall_64+0x33/0x40 [ 2178.655581] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2178.656352] RIP: 0033:0x7f705a641b19 [ 2178.656886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.659459] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2178.660548] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2178.661560] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2178.662565] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.663558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2178.664568] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2178.684025] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2178.697967] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2178.731606] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2178.732861] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2178.733997] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:07:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0xffc99a3b) 09:07:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 09:07:06 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2178.809642] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:07:06 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d5, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:07:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x500, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:07:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) 09:07:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0xfffffdfe) 09:07:06 executing program 2: shmget(0x3, 0x3000, 0x6, &(0x7f0000ff5000/0x3000)=nil) [ 2178.974775] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2178.977658] FAULT_INJECTION: forcing a failure. [ 2178.977658] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.979507] CPU: 0 PID: 13151 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2178.980514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.981698] Call Trace: [ 2178.982088] dump_stack+0x107/0x167 [ 2178.982618] should_fail.cold+0x5/0xa [ 2178.983177] ? create_io_worker+0xe8/0x620 [ 2178.983802] should_failslab+0x5/0x20 [ 2178.984353] kmem_cache_alloc_node_trace+0x59/0x340 [ 2178.985084] create_io_worker+0xe8/0x620 [ 2178.985681] io_wqe_enqueue+0x69e/0xbe0 [ 2178.986265] ? create_worker_cb+0x260/0x260 [ 2178.986894] ? io_wq_work_match_all+0x10/0x10 [ 2178.987547] ? io_prep_async_work+0x340/0x550 [ 2178.988210] io_queue_async_work+0x26b/0x4f0 [ 2178.988857] __io_queue_sqe+0x5cc/0x9d0 [ 2178.989437] ? io_issue_sqe+0x7700/0x7700 [ 2178.990046] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2178.990741] io_submit_sqes+0x4461/0x85c0 [ 2178.991368] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.992096] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2178.992800] ? lock_downgrade+0x6d0/0x6d0 [ 2178.993407] ? find_held_lock+0x2c/0x110 [ 2178.994005] ? io_submit_sqes+0x85c0/0x85c0 [ 2178.994644] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2178.995348] ? wait_for_completion_io+0x270/0x270 [ 2178.996055] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.996732] ? vfs_write+0x354/0xa70 [ 2178.997272] ? fput_many+0x2f/0x1a0 [ 2178.997803] ? ksys_write+0x1a9/0x260 [ 2178.998355] ? __ia32_sys_read+0xb0/0xb0 [ 2178.998952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.999710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.000473] do_syscall_64+0x33/0x40 [ 2179.001012] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2179.001757] RIP: 0033:0x7fa6ace83b19 [ 2179.002300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.004950] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2179.006051] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2179.007083] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2179.008148] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2179.009177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2179.010207] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:07:06 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 10) 09:07:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 09:07:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x600, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2179.110602] FAULT_INJECTION: forcing a failure. [ 2179.110602] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.112541] CPU: 0 PID: 13158 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2179.113560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.114772] Call Trace: [ 2179.115172] dump_stack+0x107/0x167 [ 2179.115723] should_fail.cold+0x5/0xa [ 2179.116312] ? create_object.isra.0+0x3a/0xa20 [ 2179.116993] should_failslab+0x5/0x20 [ 2179.117556] kmem_cache_alloc+0x5b/0x310 [ 2179.118148] ? mark_held_locks+0x9e/0xe0 [ 2179.118742] create_object.isra.0+0x3a/0xa20 [ 2179.119385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2179.120142] kmem_cache_alloc_bulk+0x168/0x320 [ 2179.120819] io_submit_sqes+0x6f76/0x85c0 [ 2179.121451] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2179.122175] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2179.122890] ? lock_downgrade+0x6d0/0x6d0 [ 2179.123493] ? find_held_lock+0x2c/0x110 [ 2179.124092] ? io_submit_sqes+0x85c0/0x85c0 [ 2179.124727] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2179.125429] ? wait_for_completion_io+0x270/0x270 [ 2179.126132] ? rcu_read_lock_any_held+0x75/0xa0 [ 2179.126807] ? vfs_write+0x354/0xa70 [ 2179.127350] ? fput_many+0x2f/0x1a0 [ 2179.127886] ? ksys_write+0x1a9/0x260 [ 2179.128444] ? __ia32_sys_read+0xb0/0xb0 [ 2179.129034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.129791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.130547] do_syscall_64+0x33/0x40 [ 2179.131075] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2179.131808] RIP: 0033:0x7f705a641b19 [ 2179.132354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.135007] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2179.136123] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2179.137164] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2179.138198] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2179.139233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2179.140270] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2179.165757] FAULT_INJECTION: forcing a failure. [ 2179.165757] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.167422] CPU: 0 PID: 13167 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2179.168456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.169661] Call Trace: [ 2179.170052] dump_stack+0x107/0x167 [ 2179.170588] should_fail.cold+0x5/0xa [ 2179.171151] ? __alloc_file+0x21/0x320 [ 2179.171722] should_failslab+0x5/0x20 [ 2179.172289] kmem_cache_alloc+0x5b/0x310 [ 2179.172894] __alloc_file+0x21/0x320 [ 2179.173445] alloc_empty_file+0x6d/0x170 [ 2179.174040] alloc_file+0x5e/0x5a0 [ 2179.174567] alloc_file_pseudo+0x16a/0x250 [ 2179.175182] ? alloc_file+0x5a0/0x5a0 [ 2179.175749] ? shmem_get_inode+0x55c/0xbc0 [ 2179.176389] __shmem_file_setup+0x144/0x320 [ 2179.177026] ? _copy_from_user+0xfb/0x1b0 [ 2179.177647] __do_sys_memfd_create+0x275/0x450 [ 2179.178314] ? memfd_file_seals_ptr+0x170/0x170 [ 2179.178995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.179768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.180527] do_syscall_64+0x33/0x40 [ 2179.181070] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2179.181814] RIP: 0033:0x7f643d472b19 [ 2179.182360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.182791] FAULT_INJECTION: forcing a failure. [ 2179.182791] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.185023] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2179.185044] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2179.185055] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2179.185066] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2179.185076] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2179.185087] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2179.193655] CPU: 1 PID: 13165 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2179.194623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.195773] Call Trace: [ 2179.196151] dump_stack+0x107/0x167 [ 2179.196667] should_fail.cold+0x5/0xa [ 2179.197209] ? create_object.isra.0+0x3a/0xa20 [ 2179.197854] should_failslab+0x5/0x20 [ 2179.198396] kmem_cache_alloc+0x5b/0x310 [ 2179.198974] ? lock_acquire+0x197/0x470 [ 2179.199576] create_object.isra.0+0x3a/0xa20 [ 2179.200201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2179.200933] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2179.201666] create_io_worker+0xe8/0x620 [ 2179.202279] io_wqe_enqueue+0x69e/0xbe0 [ 2179.202843] ? create_worker_cb+0x260/0x260 [ 2179.203447] ? io_wq_work_match_all+0x10/0x10 [ 2179.204082] ? io_prep_async_work+0x340/0x550 [ 2179.204719] io_queue_async_work+0x26b/0x4f0 [ 2179.205361] __io_queue_sqe+0x5cc/0x9d0 [ 2179.205924] ? io_issue_sqe+0x7700/0x7700 [ 2179.206277] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2179.206509] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2179.208263] io_submit_sqes+0x4461/0x85c0 [ 2179.208884] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2179.209624] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2179.210323] ? lock_downgrade+0x6d0/0x6d0 [ 2179.210909] ? find_held_lock+0x2c/0x110 [ 2179.211505] ? io_submit_sqes+0x85c0/0x85c0 [ 2179.212134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2179.212818] ? wait_for_completion_io+0x270/0x270 [ 2179.213541] ? rcu_read_lock_any_held+0x75/0xa0 [ 2179.214196] ? vfs_write+0x354/0xa70 [ 2179.214736] ? fput_many+0x2f/0x1a0 [ 2179.215253] ? ksys_write+0x1a9/0x260 [ 2179.215822] ? __ia32_sys_read+0xb0/0xb0 [ 2179.216405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2179.217174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2179.217916] do_syscall_64+0x33/0x40 [ 2179.218442] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2179.219194] RIP: 0033:0x7f9c97c70b19 [ 2179.219726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.222421] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2179.223491] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2179.224497] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2179.225491] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2179.226494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2179.227495] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2179.247187] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:07:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 09:07:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x700, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:07:18 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d6, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:07:18 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0xfefdffff00000000) 09:07:18 executing program 2: shmget(0x3, 0x3000, 0x600, &(0x7f0000ff5000/0x3000)=nil) 09:07:18 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 11) 09:07:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) [ 2191.715050] FAULT_INJECTION: forcing a failure. [ 2191.715050] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.716144] CPU: 1 PID: 13182 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2191.716744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.717468] Call Trace: [ 2191.717712] dump_stack+0x107/0x167 [ 2191.718037] should_fail.cold+0x5/0xa [ 2191.718379] ? create_object.isra.0+0x3a/0xa20 [ 2191.718787] should_failslab+0x5/0x20 [ 2191.719126] kmem_cache_alloc+0x5b/0x310 [ 2191.719546] create_object.isra.0+0x3a/0xa20 [ 2191.719958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2191.720477] kmem_cache_alloc+0x159/0x310 [ 2191.720872] __alloc_file+0x21/0x320 [ 2191.721234] alloc_empty_file+0x6d/0x170 [ 2191.721649] alloc_file+0x5e/0x5a0 [ 2191.721961] alloc_file_pseudo+0x16a/0x250 [ 2191.722363] ? alloc_file+0x5a0/0x5a0 [ 2191.722743] ? shmem_get_inode+0x55c/0xbc0 [ 2191.723152] __shmem_file_setup+0x144/0x320 [ 2191.723552] ? _copy_from_user+0xfb/0x1b0 [ 2191.723968] __do_sys_memfd_create+0x275/0x450 [ 2191.724427] ? memfd_file_seals_ptr+0x170/0x170 [ 2191.724910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2191.725441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2191.725941] do_syscall_64+0x33/0x40 [ 2191.726273] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2191.726766] RIP: 0033:0x7f643d472b19 [ 2191.727131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.728806] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2191.729509] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2191.730133] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2191.730834] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2191.731466] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2191.732141] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2191.748460] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2191.749181] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2191.749908] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:07:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 09:07:18 executing program 2: shmget(0x3, 0x3000, 0x60000, &(0x7f0000ff5000/0x3000)=nil) [ 2191.770788] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2191.771601] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2191.772341] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2191.783280] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2191.786614] FAULT_INJECTION: forcing a failure. [ 2191.786614] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.787861] CPU: 1 PID: 13200 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2191.788489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.789191] Call Trace: [ 2191.789420] dump_stack+0x107/0x167 [ 2191.789732] should_fail.cold+0x5/0xa [ 2191.790063] ? create_object.isra.0+0x3a/0xa20 [ 2191.790465] should_failslab+0x5/0x20 [ 2191.790864] kmem_cache_alloc+0x5b/0x310 [ 2191.791243] ? lock_acquire+0x197/0x470 [ 2191.791597] create_object.isra.0+0x3a/0xa20 [ 2191.792032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2191.792487] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2191.792922] create_io_worker+0xe8/0x620 [ 2191.793355] io_wqe_enqueue+0x69e/0xbe0 [ 2191.793741] ? create_worker_cb+0x260/0x260 [ 2191.794156] ? io_wq_work_match_all+0x10/0x10 [ 2191.794629] ? io_prep_async_work+0x340/0x550 [ 2191.795048] io_queue_async_work+0x26b/0x4f0 [ 2191.795449] FAULT_INJECTION: forcing a failure. [ 2191.795449] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.796508] __io_queue_sqe+0x5cc/0x9d0 [ 2191.796884] ? io_issue_sqe+0x7700/0x7700 [ 2191.797334] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2191.797778] io_submit_sqes+0x4461/0x85c0 [ 2191.798183] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2191.798618] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2191.799038] ? lock_downgrade+0x6d0/0x6d0 [ 2191.799406] ? find_held_lock+0x2c/0x110 [ 2191.799763] ? io_submit_sqes+0x85c0/0x85c0 [ 2191.800234] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2191.800664] ? wait_for_completion_io+0x270/0x270 [ 2191.801086] ? rcu_read_lock_any_held+0x75/0xa0 [ 2191.801500] ? vfs_write+0x354/0xa70 [ 2191.801827] ? fput_many+0x2f/0x1a0 [ 2191.802209] ? ksys_write+0x1a9/0x260 [ 2191.802545] ? __ia32_sys_read+0xb0/0xb0 [ 2191.802917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2191.803382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2191.803826] do_syscall_64+0x33/0x40 [ 2191.804162] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2191.804603] RIP: 0033:0x7fa6ace83b19 [ 2191.804926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.806505] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2191.807220] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2191.807896] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2191.808530] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2191.809138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2191.809754] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2191.810397] CPU: 0 PID: 13193 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2191.811485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.811680] FAULT_INJECTION: forcing a failure. [ 2191.811680] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.812718] Call Trace: [ 2191.812743] dump_stack+0x107/0x167 [ 2191.812768] should_fail.cold+0x5/0xa [ 2191.815316] ? create_io_worker+0xe8/0x620 [ 2191.815956] should_failslab+0x5/0x20 [ 2191.816537] kmem_cache_alloc_node_trace+0x59/0x340 [ 2191.817292] create_io_worker+0xe8/0x620 [ 2191.817899] io_wqe_enqueue+0x69e/0xbe0 [ 2191.818499] ? create_worker_cb+0x260/0x260 [ 2191.819151] ? io_prep_async_work+0x340/0x550 [ 2191.819828] io_queue_async_work+0x26b/0x4f0 [ 2191.820503] __io_queue_sqe+0x5cc/0x9d0 [ 2191.821065] ? io_issue_sqe+0x7700/0x7700 [ 2191.821699] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2191.822401] io_submit_sqes+0x4461/0x85c0 [ 2191.823014] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2191.823769] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2191.824462] ? lock_downgrade+0x6d0/0x6d0 [ 2191.825082] ? find_held_lock+0x2c/0x110 [ 2191.825709] ? io_submit_sqes+0x85c0/0x85c0 [ 2191.826367] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2191.827060] ? wait_for_completion_io+0x270/0x270 [ 2191.827757] ? rcu_read_lock_any_held+0x75/0xa0 [ 2191.828466] ? vfs_write+0x354/0xa70 [ 2191.829021] ? fput_many+0x2f/0x1a0 [ 2191.829568] ? ksys_write+0x1a9/0x260 [ 2191.830144] ? __ia32_sys_read+0xb0/0xb0 [ 2191.830759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2191.831542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2191.832324] do_syscall_64+0x33/0x40 [ 2191.832873] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2191.833634] RIP: 0033:0x7f705a641b19 [ 2191.834188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.836935] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2191.837997] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2191.839008] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2191.840014] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2191.841007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2191.841990] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2191.843007] CPU: 1 PID: 13196 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2191.843621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2191.844331] Call Trace: [ 2191.844566] dump_stack+0x107/0x167 [ 2191.844881] should_fail.cold+0x5/0xa [ 2191.845269] ? create_object.isra.0+0x3a/0xa20 [ 2191.845679] should_failslab+0x5/0x20 [ 2191.846067] kmem_cache_alloc+0x5b/0x310 [ 2191.846470] ? mark_held_locks+0x9e/0xe0 [ 2191.846862] create_object.isra.0+0x3a/0xa20 [ 2191.847330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2191.847855] kmem_cache_alloc_bulk+0x168/0x320 [ 2191.848349] io_submit_sqes+0x6f76/0x85c0 [ 2191.848792] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2191.849276] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2191.849697] ? lock_downgrade+0x6d0/0x6d0 [ 2191.850049] ? find_held_lock+0x2c/0x110 [ 2191.850406] ? io_submit_sqes+0x85c0/0x85c0 [ 2191.850766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2191.851177] ? wait_for_completion_io+0x270/0x270 [ 2191.851591] ? rcu_read_lock_any_held+0x75/0xa0 [ 2191.851979] ? vfs_write+0x354/0xa70 [ 2191.852299] ? fput_many+0x2f/0x1a0 [ 2191.852618] ? ksys_write+0x1a9/0x260 [ 2191.852947] ? __ia32_sys_read+0xb0/0xb0 [ 2191.853321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2191.853772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2191.854297] do_syscall_64+0x33/0x40 [ 2191.854640] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2191.855157] RIP: 0033:0x7f9c97c70b19 [ 2191.855477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2191.858558] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2191.859923] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2191.861133] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2191.862224] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2191.863295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2191.864625] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2191.881694] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:07:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0xffc99a3b00000000) 09:07:19 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2191.919487] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2191.929188] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:07:19 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x900, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2192.023765] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2192.025002] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2192.026149] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2192.060637] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2192.074242] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2192.079068] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:07:32 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 12) 09:07:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 09:07:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:07:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4039, &(0x7f0000000040)={0x0, 0xa1d4, 0x0, 0x0, 0x1c4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x3dfc, &(0x7f0000000200)={0x0, 0xd204, 0x1, 0x1, 0x250}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0x5}, 0xfffff6d6) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:07:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) 09:07:32 executing program 2: shmget(0x3, 0x3000, 0x6000000000000, &(0x7f0000ff5000/0x3000)=nil) 09:07:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 09:07:32 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d8, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2205.398521] FAULT_INJECTION: forcing a failure. [ 2205.398521] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.399572] CPU: 0 PID: 13228 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2205.400156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.400845] Call Trace: [ 2205.401073] dump_stack+0x107/0x167 [ 2205.401382] should_fail.cold+0x5/0xa [ 2205.401704] ? create_object.isra.0+0x3a/0xa20 [ 2205.402089] should_failslab+0x5/0x20 [ 2205.402414] kmem_cache_alloc+0x5b/0x310 [ 2205.402762] ? lock_acquire+0x197/0x470 [ 2205.403105] create_object.isra.0+0x3a/0xa20 [ 2205.403481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.403916] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2205.404364] create_io_worker+0xe8/0x620 [ 2205.404714] io_wqe_enqueue+0x69e/0xbe0 [ 2205.405053] ? create_worker_cb+0x260/0x260 [ 2205.405425] ? io_prep_async_work+0x340/0x550 [ 2205.405811] io_queue_async_work+0x26b/0x4f0 [ 2205.406188] __io_queue_sqe+0x5cc/0x9d0 [ 2205.406526] ? io_issue_sqe+0x7700/0x7700 [ 2205.406881] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2205.407285] io_submit_sqes+0x4461/0x85c0 [ 2205.407651] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.408077] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.408487] ? lock_downgrade+0x6d0/0x6d0 [ 2205.408835] ? find_held_lock+0x2c/0x110 [ 2205.409180] ? io_submit_sqes+0x85c0/0x85c0 [ 2205.409556] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.409969] ? wait_for_completion_io+0x270/0x270 [ 2205.410381] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.410769] ? vfs_write+0x354/0xa70 [ 2205.411088] ? fput_many+0x2f/0x1a0 [ 2205.411403] ? ksys_write+0x1a9/0x260 [ 2205.411729] ? __ia32_sys_read+0xb0/0xb0 [ 2205.412082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.412528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.412968] do_syscall_64+0x33/0x40 [ 2205.413286] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.413724] RIP: 0033:0x7f705a641b19 [ 2205.414041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.415568] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.416209] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2205.416813] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2205.417434] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.418036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.418643] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2205.420918] FAULT_INJECTION: forcing a failure. [ 2205.420918] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.422661] CPU: 1 PID: 13231 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2205.423670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.424882] Call Trace: [ 2205.425286] dump_stack+0x107/0x167 [ 2205.425825] should_fail.cold+0x5/0xa [ 2205.426394] ? security_file_alloc+0x34/0x170 [ 2205.427047] should_failslab+0x5/0x20 [ 2205.427610] kmem_cache_alloc+0x5b/0x310 [ 2205.428235] security_file_alloc+0x34/0x170 [ 2205.428877] __alloc_file+0xb7/0x320 [ 2205.429426] alloc_empty_file+0x6d/0x170 [ 2205.430026] alloc_file+0x5e/0x5a0 [ 2205.430563] alloc_file_pseudo+0x16a/0x250 [ 2205.431190] ? alloc_file+0x5a0/0x5a0 [ 2205.431754] ? shmem_get_inode+0x55c/0xbc0 [ 2205.432392] __shmem_file_setup+0x144/0x320 [ 2205.433025] ? _copy_from_user+0xfb/0x1b0 [ 2205.433636] __do_sys_memfd_create+0x275/0x450 [ 2205.434318] ? memfd_file_seals_ptr+0x170/0x170 [ 2205.435017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.435807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.436587] do_syscall_64+0x33/0x40 [ 2205.437138] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.437910] RIP: 0033:0x7f643d472b19 [ 2205.438470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.441237] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2205.442378] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2205.443452] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2205.444539] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2205.445612] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2205.446678] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 [ 2205.457637] FAULT_INJECTION: forcing a failure. [ 2205.457637] name failslab, interval 1, probability 0, space 0, times 0 09:07:32 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget(0x3, 0x1000, 0x20, &(0x7f0000ff5000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x4000) [ 2205.459518] CPU: 1 PID: 13230 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2205.460717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.461915] Call Trace: [ 2205.462316] dump_stack+0x107/0x167 [ 2205.462861] should_fail.cold+0x5/0xa [ 2205.463437] ? create_io_worker+0xe8/0x620 [ 2205.464055] should_failslab+0x5/0x20 [ 2205.464626] kmem_cache_alloc_node_trace+0x59/0x340 [ 2205.465362] create_io_worker+0xe8/0x620 [ 2205.465955] io_wqe_enqueue+0x69e/0xbe0 [ 2205.466533] ? create_worker_cb+0x260/0x260 [ 2205.467158] ? io_wq_work_match_all+0x10/0x10 [ 2205.467807] ? io_prep_async_work+0x340/0x550 [ 2205.468478] io_queue_async_work+0x26b/0x4f0 [ 2205.469130] __io_queue_sqe+0x5cc/0x9d0 [ 2205.469709] ? io_issue_sqe+0x7700/0x7700 [ 2205.470329] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2205.471017] io_submit_sqes+0x4461/0x85c0 [ 2205.471645] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.472384] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.473092] ? lock_downgrade+0x6d0/0x6d0 [ 2205.473698] ? find_held_lock+0x2c/0x110 [ 2205.474294] ? io_submit_sqes+0x85c0/0x85c0 [ 2205.474926] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.475639] ? wait_for_completion_io+0x270/0x270 [ 2205.476345] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.477015] ? vfs_write+0x354/0xa70 [ 2205.477554] ? fput_many+0x2f/0x1a0 [ 2205.478093] ? ksys_write+0x1a9/0x260 [ 2205.478650] ? __ia32_sys_read+0xb0/0xb0 [ 2205.479255] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.480016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.480798] do_syscall_64+0x33/0x40 [ 2205.481351] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.482094] RIP: 0033:0x7fa6ace83b19 09:07:32 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 13) [ 2205.482641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.485435] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.486133] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2205.486541] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2205.486557] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2205.489224] FAULT_INJECTION: forcing a failure. [ 2205.489224] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.490817] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.490828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.490847] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2205.493500] CPU: 0 PID: 13226 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2205.494076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.494752] Call Trace: [ 2205.494979] dump_stack+0x107/0x167 [ 2205.495288] should_fail.cold+0x5/0xa [ 2205.495605] ? create_object.isra.0+0x3a/0xa20 [ 2205.495988] should_failslab+0x5/0x20 [ 2205.496306] kmem_cache_alloc+0x5b/0x310 [ 2205.496645] ? lock_acquire+0x197/0x470 [ 2205.496971] create_object.isra.0+0x3a/0xa20 [ 2205.497334] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.497757] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2205.498181] create_io_worker+0xe8/0x620 [ 2205.498519] io_wqe_enqueue+0x69e/0xbe0 [ 2205.498851] ? create_worker_cb+0x260/0x260 [ 2205.499206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.499632] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2205.500076] ? trace_hardirqs_on+0x5b/0x180 [ 2205.500434] ? io_prep_async_work+0x340/0x550 [ 2205.500804] io_queue_async_work+0x26b/0x4f0 [ 2205.501167] __io_queue_sqe+0x5cc/0x9d0 [ 2205.501490] ? io_issue_sqe+0x7700/0x7700 [ 2205.501849] ? io_submit_sqes+0x9a0/0x85c0 [ 2205.502220] ? write_comp_data+0xa/0x80 [ 2205.502560] io_submit_sqes+0x4461/0x85c0 [ 2205.502913] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.503318] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.503711] ? lock_downgrade+0x6d0/0x6d0 [ 2205.504050] ? find_held_lock+0x2c/0x110 [ 2205.504394] ? io_submit_sqes+0x85c0/0x85c0 [ 2205.504759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.505151] ? wait_for_completion_io+0x270/0x270 [ 2205.505554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.505947] ? vfs_write+0x354/0xa70 [ 2205.506264] ? fput_many+0x2f/0x1a0 [ 2205.506570] ? ksys_write+0x1a9/0x260 [ 2205.506888] ? __ia32_sys_read+0xb0/0xb0 [ 2205.507235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.507677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.508122] do_syscall_64+0x33/0x40 [ 2205.508438] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.508871] RIP: 0033:0x7f9c97c70b19 [ 2205.509187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.510722] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.511354] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2205.511950] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2205.512545] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.513142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.513733] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 [ 2205.515276] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2205.516452] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2205.517519] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:07:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) [ 2205.561538] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:07:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 09:07:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xb00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2205.587649] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:07:32 executing program 2: shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) [ 2205.633340] FAULT_INJECTION: forcing a failure. [ 2205.633340] name failslab, interval 1, probability 0, space 0, times 0 09:07:32 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86d9, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2205.635021] CPU: 1 PID: 13253 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2205.636187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.637371] Call Trace: [ 2205.637769] dump_stack+0x107/0x167 [ 2205.638309] should_fail.cold+0x5/0xa [ 2205.638870] ? create_object.isra.0+0x3a/0xa20 [ 2205.639536] should_failslab+0x5/0x20 [ 2205.640106] kmem_cache_alloc+0x5b/0x310 [ 2205.640699] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2205.641510] create_object.isra.0+0x3a/0xa20 [ 2205.642157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.642906] kmem_cache_alloc+0x159/0x310 [ 2205.643525] security_file_alloc+0x34/0x170 [ 2205.644172] __alloc_file+0xb7/0x320 [ 2205.644719] alloc_empty_file+0x6d/0x170 [ 2205.645320] alloc_file+0x5e/0x5a0 [ 2205.645838] alloc_file_pseudo+0x16a/0x250 [ 2205.646461] ? alloc_file+0x5a0/0x5a0 [ 2205.647021] ? shmem_get_inode+0x55c/0xbc0 [ 2205.647654] __shmem_file_setup+0x144/0x320 [ 2205.648288] ? _copy_from_user+0xfb/0x1b0 [ 2205.648900] __do_sys_memfd_create+0x275/0x450 [ 2205.649573] ? memfd_file_seals_ptr+0x170/0x170 [ 2205.650253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.651011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.651773] do_syscall_64+0x33/0x40 [ 2205.652333] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.653078] RIP: 0033:0x7f643d472b19 [ 2205.653634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.656320] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2205.657428] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f643d472b19 [ 2205.658452] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 00007f643d4cc0fb [ 2205.659479] RBP: 0000000000000004 R08: 0000000000002100 R09: ffffffffffffffff [ 2205.660515] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000008100000 [ 2205.661554] R13: 0000000020000100 R14: 0000000008100000 R15: 0000000020000080 09:07:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file2\x00', &(0x7f0000000500)=""/4096, 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000480)={0x8000, 0x1, 0x5, 0x5}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x89c8}}, './file2\x00'}) clone3(&(0x7f00000003c0)={0x4020200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x41}, &(0x7f0000000200)=""/170, 0xaa, &(0x7f00000002c0)=""/211, &(0x7f0000000100)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) [ 2205.716962] FAULT_INJECTION: forcing a failure. [ 2205.716962] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.718875] CPU: 1 PID: 13258 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2205.719880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.721116] Call Trace: [ 2205.721505] dump_stack+0x107/0x167 [ 2205.722048] should_fail.cold+0x5/0xa [ 2205.722617] ? create_object.isra.0+0x3a/0xa20 [ 2205.723294] should_failslab+0x5/0x20 [ 2205.723856] kmem_cache_alloc+0x5b/0x310 [ 2205.724467] ? mark_held_locks+0x9e/0xe0 [ 2205.725075] create_object.isra.0+0x3a/0xa20 [ 2205.725715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.726481] kmem_cache_alloc_bulk+0x168/0x320 [ 2205.727152] io_submit_sqes+0x6f76/0x85c0 [ 2205.727776] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.728521] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.729236] ? lock_downgrade+0x6d0/0x6d0 [ 2205.729837] ? find_held_lock+0x2c/0x110 [ 2205.730441] ? io_submit_sqes+0x85c0/0x85c0 [ 2205.731094] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.731803] ? wait_for_completion_io+0x270/0x270 [ 2205.732513] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.733204] ? vfs_write+0x354/0xa70 [ 2205.733762] ? fput_many+0x2f/0x1a0 [ 2205.734292] ? ksys_write+0x1a9/0x260 [ 2205.734851] ? __ia32_sys_read+0xb0/0xb0 [ 2205.735453] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.736236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.736984] do_syscall_64+0x33/0x40 [ 2205.737530] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.738282] RIP: 0033:0x7f705a641b19 [ 2205.738829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.741519] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.742613] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2205.743649] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2205.744684] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.745705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.746730] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2205.751941] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2205.779019] FAULT_INJECTION: forcing a failure. [ 2205.779019] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.782956] CPU: 1 PID: 13264 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 2205.783989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.785206] Call Trace: [ 2205.785599] dump_stack+0x107/0x167 [ 2205.786133] should_fail.cold+0x5/0xa [ 2205.786697] ? create_io_worker+0xe8/0x620 [ 2205.787319] should_failslab+0x5/0x20 [ 2205.787880] kmem_cache_alloc_node_trace+0x59/0x340 [ 2205.788634] create_io_worker+0xe8/0x620 [ 2205.789231] io_wqe_enqueue+0x69e/0xbe0 [ 2205.789817] ? create_worker_cb+0x260/0x260 [ 2205.790445] ? io_wq_work_match_all+0x10/0x10 [ 2205.791098] ? io_prep_async_work+0x340/0x550 [ 2205.791767] io_queue_async_work+0x26b/0x4f0 [ 2205.792431] __io_queue_sqe+0x5cc/0x9d0 [ 2205.793015] ? io_issue_sqe+0x7700/0x7700 [ 2205.793630] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2205.794336] io_submit_sqes+0x4461/0x85c0 [ 2205.794974] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.795705] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.796432] ? lock_downgrade+0x6d0/0x6d0 [ 2205.797035] ? find_held_lock+0x2c/0x110 [ 2205.797640] ? io_submit_sqes+0x85c0/0x85c0 09:07:33 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil) shmat(r0, &(0x7f0000ff5000/0x2000)=nil, 0x1000) [ 2205.798275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.799158] ? wait_for_completion_io+0x270/0x270 [ 2205.799860] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.800557] ? vfs_write+0x354/0xa70 [ 2205.801107] ? fput_many+0x2f/0x1a0 [ 2205.801640] ? ksys_write+0x1a9/0x260 [ 2205.802199] ? __ia32_sys_read+0xb0/0xb0 [ 2205.802799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.803558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.804326] do_syscall_64+0x33/0x40 [ 2205.804867] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.805606] RIP: 0033:0x7f9c97c70b19 [ 2205.806147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.808780] RSP: 002b:00007f9c951e6188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.809884] RAX: ffffffffffffffda RBX: 00007f9c97d83f60 RCX: 00007f9c97c70b19 [ 2205.810906] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2205.811930] RBP: 00007f9c951e61d0 R08: 0000000000000000 R09: 0000000000000000 09:07:33 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xc00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2205.812962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.814083] R13: 00007ffe7014972f R14: 00007f9c951e6300 R15: 0000000000022000 09:07:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 09:07:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 2205.870362] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2205.871020] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2205.871666] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2205.877548] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2205.881940] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:07:33 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff5000/0x4000)=nil, 0x5000) 09:07:33 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86da, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2205.905813] FAULT_INJECTION: forcing a failure. [ 2205.905813] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.907631] CPU: 1 PID: 13273 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2205.908671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.909892] Call Trace: [ 2205.910285] dump_stack+0x107/0x167 [ 2205.910820] should_fail.cold+0x5/0xa [ 2205.911382] ? create_object.isra.0+0x3a/0xa20 [ 2205.912055] should_failslab+0x5/0x20 [ 2205.912635] kmem_cache_alloc+0x5b/0x310 [ 2205.913239] ? lock_acquire+0x197/0x470 [ 2205.913830] create_object.isra.0+0x3a/0xa20 [ 2205.914484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.915234] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2205.915982] create_io_worker+0xe8/0x620 [ 2205.916598] io_wqe_enqueue+0x69e/0xbe0 [ 2205.917198] ? create_worker_cb+0x260/0x260 [ 2205.917843] ? io_wq_work_match_all+0x10/0x10 [ 2205.918516] ? io_prep_async_work+0x340/0x550 [ 2205.919193] io_queue_async_work+0x26b/0x4f0 [ 2205.919840] __io_queue_sqe+0x5cc/0x9d0 [ 2205.920457] ? io_issue_sqe+0x7700/0x7700 [ 2205.921076] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2205.921776] io_submit_sqes+0x4461/0x85c0 [ 2205.922436] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.923171] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2205.923896] ? lock_downgrade+0x6d0/0x6d0 [ 2205.924520] ? find_held_lock+0x2c/0x110 [ 2205.925117] ? io_submit_sqes+0x85c0/0x85c0 [ 2205.925758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.926483] ? wait_for_completion_io+0x270/0x270 [ 2205.927216] ? rcu_read_lock_any_held+0x75/0xa0 [ 2205.927897] ? vfs_write+0x354/0xa70 [ 2205.928452] ? fput_many+0x2f/0x1a0 [ 2205.928987] ? ksys_write+0x1a9/0x260 [ 2205.929545] ? __ia32_sys_read+0xb0/0xb0 [ 2205.930158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.930931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.931707] do_syscall_64+0x33/0x40 [ 2205.932281] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2205.933032] RIP: 0033:0x7fa6ace83b19 [ 2205.933581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.936271] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2205.937379] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2205.938424] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2205.939464] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.940519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.941578] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:07:33 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:07:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6810000001fa07f1a5f0e077f16aeadb19f6486304010400000007080003400000000605000100030000000800034000000037080004400000000000000640000600000500af080200000005000100000000000a00020004000000000000000000000000000000000900"/119], 0x68}, 0x1, 0x0, 0x0, 0x40045}, 0x800) close(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRESDEC, @ANYBLOB="ebffffffffff0200272f66696c6539005bc6559962e42cb0f148d9"]) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0x3, 0x8, 0x9, 0x4, 0x100}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x1, 0x0, 0x1}, 0x5ebf}}, 0x18) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x3, 0x15}) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) ioctl$HIDIOCGFLAG(r4, 0x8004480e, &(0x7f0000000100)) [ 2205.988187] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2205.988834] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2205.989461] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2205.998168] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2206.022310] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2206.051236] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2206.052461] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2206.053689] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2206.100348] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:07:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) 09:07:46 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86db, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:07:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 09:07:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) [ 2219.210857] FAULT_INJECTION: forcing a failure. [ 2219.210857] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.211871] FAULT_INJECTION: forcing a failure. [ 2219.211871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2219.212825] CPU: 1 PID: 13307 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2219.215266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.216478] Call Trace: [ 2219.216871] dump_stack+0x107/0x167 [ 2219.217406] should_fail.cold+0x5/0xa [ 2219.217962] ? create_io_worker+0xe8/0x620 [ 2219.218580] should_failslab+0x5/0x20 [ 2219.219142] kmem_cache_alloc_node_trace+0x59/0x340 [ 2219.219876] create_io_worker+0xe8/0x620 [ 2219.220469] io_wqe_enqueue+0x69e/0xbe0 [ 2219.221044] ? create_worker_cb+0x260/0x260 [ 2219.221670] ? io_wq_work_match_all+0x10/0x10 [ 2219.222326] ? io_prep_async_work+0x340/0x550 [ 2219.222980] io_queue_async_work+0x26b/0x4f0 [ 2219.223625] __io_queue_sqe+0x5cc/0x9d0 [ 2219.224211] ? io_issue_sqe+0x7700/0x7700 [ 2219.224820] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2219.225505] io_submit_sqes+0x4461/0x85c0 [ 2219.226130] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2219.226858] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2219.227566] ? lock_downgrade+0x6d0/0x6d0 [ 2219.228156] ? find_held_lock+0x2c/0x110 [ 2219.228746] ? io_submit_sqes+0x85c0/0x85c0 [ 2219.229377] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2219.230078] ? wait_for_completion_io+0x270/0x270 [ 2219.230763] ? rcu_read_lock_any_held+0x75/0xa0 [ 2219.231437] ? vfs_write+0x354/0xa70 [ 2219.231982] ? fput_many+0x2f/0x1a0 [ 2219.232513] ? ksys_write+0x1a9/0x260 [ 2219.233068] ? __ia32_sys_read+0xb0/0xb0 [ 2219.233658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.234412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.235167] do_syscall_64+0x33/0x40 [ 2219.235709] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2219.236458] RIP: 0033:0x7fa6ace83b19 [ 2219.237001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.239618] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2219.240723] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2219.241746] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2219.242761] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.243795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2219.244840] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2219.245904] CPU: 0 PID: 13313 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2219.246935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.248134] Call Trace: [ 2219.248536] dump_stack+0x107/0x167 [ 2219.249071] should_fail.cold+0x5/0xa [ 2219.249636] __alloc_pages_nodemask+0x182/0x600 [ 2219.250310] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2219.251184] ? lock_downgrade+0x6d0/0x6d0 [ 2219.251787] ? lock_acquire+0x197/0x470 [ 2219.252396] alloc_pages_vma+0xbb/0x410 [ 2219.252988] shmem_alloc_page+0x10f/0x1e0 [ 2219.253593] ? shmem_init_inode+0x20/0x20 [ 2219.254224] ? percpu_counter_add_batch+0x8b/0x140 [ 2219.254935] ? __vm_enough_memory+0x184/0x360 [ 2219.255599] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2219.256407] ? shmem_unuse_inode+0xf60/0xf60 09:07:46 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 14) 09:07:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xd00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:07:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x5e, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r2, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x22, 0x7, 0x3ff) r3 = fork() setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r3, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r3) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2, 0x1f, 0x3f, 0x8, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40200, 0x7da3a5cd, 0x100, 0x6, 0x9, 0x8, 0x70f, 0x0, 0x33d2, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:07:46 executing program 2: shmget(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/222) [ 2219.257044] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2219.257983] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2219.258732] shmem_write_begin+0xf7/0x1d0 [ 2219.259332] generic_perform_write+0x20a/0x4f0 [ 2219.259992] ? page_cache_prev_miss+0x310/0x310 [ 2219.260676] ? evict_inodes+0x420/0x420 [ 2219.261245] ? generic_write_checks+0x2ad/0x390 [ 2219.261906] __generic_file_write_iter+0x39d/0x5d0 [ 2219.262628] generic_file_write_iter+0xdb/0x230 [ 2219.263276] ? iov_iter_init+0x3c/0x130 [ 2219.263853] new_sync_write+0x42c/0x660 [ 2219.264423] ? new_sync_read+0x6f0/0x6f0 [ 2219.265000] ? __x64_sys_pwrite64+0x201/0x260 [ 2219.265657] ? lock_release+0x680/0x680 [ 2219.266223] ? selinux_file_permission+0x92/0x520 [ 2219.266928] vfs_write+0x747/0xa70 [ 2219.267438] __x64_sys_pwrite64+0x201/0x260 [ 2219.268074] ? ksys_pwrite64+0x1b0/0x1b0 [ 2219.268668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.269426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.270179] do_syscall_64+0x33/0x40 [ 2219.270727] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2219.271443] RIP: 0033:0x7f643d425ab7 [ 2219.271988] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2219.274531] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2219.275613] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2219.276653] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2219.277676] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2219.278710] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2219.279748] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2219.287595] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2219.288773] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2219.289824] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2219.306524] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2219.314779] FAULT_INJECTION: forcing a failure. [ 2219.314779] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.316587] CPU: 1 PID: 13317 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2219.317549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.318698] Call Trace: [ 2219.319069] dump_stack+0x107/0x167 [ 2219.319592] should_fail.cold+0x5/0xa [ 2219.320121] ? create_object.isra.0+0x3a/0xa20 [ 2219.320770] should_failslab+0x5/0x20 [ 2219.321316] kmem_cache_alloc+0x5b/0x310 [ 2219.321893] ? lock_acquire+0x197/0x470 [ 2219.322461] create_object.isra.0+0x3a/0xa20 [ 2219.323085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2219.323815] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2219.324537] create_io_worker+0xe8/0x620 [ 2219.325132] io_wqe_enqueue+0x69e/0xbe0 [ 2219.325690] ? create_worker_cb+0x260/0x260 [ 2219.326306] ? io_wq_work_match_all+0x10/0x10 [ 2219.326923] ? io_prep_async_work+0x340/0x550 [ 2219.327572] io_queue_async_work+0x26b/0x4f0 [ 2219.328200] __io_queue_sqe+0x5cc/0x9d0 [ 2219.328780] ? io_issue_sqe+0x7700/0x7700 [ 2219.329368] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2219.330038] io_submit_sqes+0x4461/0x85c0 [ 2219.330648] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2219.331339] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2219.332025] ? lock_downgrade+0x6d0/0x6d0 [ 2219.332622] ? find_held_lock+0x2c/0x110 [ 2219.333193] ? io_submit_sqes+0x85c0/0x85c0 [ 2219.333808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2219.334489] ? wait_for_completion_io+0x270/0x270 [ 2219.335168] ? rcu_read_lock_any_held+0x75/0xa0 [ 2219.335821] ? vfs_write+0x354/0xa70 [ 2219.336356] ? fput_many+0x2f/0x1a0 [ 2219.336877] ? ksys_write+0x1a9/0x260 [ 2219.337415] ? __ia32_sys_read+0xb0/0xb0 [ 2219.338003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.338727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.339459] do_syscall_64+0x33/0x40 [ 2219.339980] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2219.340701] RIP: 0033:0x7f705a641b19 [ 2219.341228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2219.343762] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2219.344846] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2219.345827] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2219.346830] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2219.347829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2219.348830] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:07:46 executing program 2: shmget(0x3, 0x3000, 0x54000e14, &(0x7f0000ff5000/0x3000)=nil) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ff7000/0x2000)=nil) 09:07:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2219.391651] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2219.397432] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2219.434417] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 09:07:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x10000, 0x4, 0x20, 0x1, "a2ddd9a7e199a69d838f852620e091f71f3901034a3b8c53059845f44c5c01eeca56a7400fa9deaf42d0bf5fccd4dfa54f369042084373ed3e634b017896c590", "963f66308752719d9cf5b12303d954b95b485b15cdca66af65b2a597bd869cd2", [0xf52, 0x7fff]}) chmod(&(0x7f0000000040)='./file2\x00', 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:07:46 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = pidfd_getfd(r0, r1, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf8, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaf47}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf0b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44085}, 0x40811) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xbc, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x26a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x7b, 0xac, "bbf1e5c4c4b84d888169988fd0e84b54867004a805f22d6cafa21aea1d8d4eabfad0c2e5970fe05996a9451b2ba61f9d74ebb7d29e5931270f50ab5d6ca0d443060c7520febc2fca986646dcb7909e202414fe5b5ab7e7d226776c97122bdac97ad6e52300e0d59b03d498dc18114d1219d14105eae610"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:07:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xe00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:07:46 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86dc, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:07:46 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 15) [ 2219.560086] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2219.607665] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2219.632156] FAULT_INJECTION: forcing a failure. [ 2219.632156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2219.633930] CPU: 0 PID: 13351 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2219.634953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2219.636168] Call Trace: [ 2219.636573] dump_stack+0x107/0x167 [ 2219.637108] should_fail.cold+0x5/0xa [ 2219.637669] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2219.638437] ? shmem_write_begin+0xf7/0x1d0 [ 2219.639057] ? shmem_write_begin+0x100/0x1d0 [ 2219.639686] generic_perform_write+0x279/0x4f0 [ 2219.640353] ? page_cache_prev_miss+0x310/0x310 [ 2219.641015] ? evict_inodes+0x420/0x420 [ 2219.641598] ? generic_write_checks+0x2ad/0x390 [ 2219.642264] __generic_file_write_iter+0x39d/0x5d0 [ 2219.642970] generic_file_write_iter+0xdb/0x230 [ 2219.643543] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2219.643657] ? iov_iter_init+0x3c/0x130 [ 2219.643682] new_sync_write+0x42c/0x660 [ 2219.644675] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2219.645227] ? new_sync_read+0x6f0/0x6f0 [ 2219.645251] ? __x64_sys_pwrite64+0x201/0x260 [ 2219.645717] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2219.646706] ? lock_release+0x680/0x680 [ 2219.646728] ? selinux_file_permission+0x92/0x520 [ 2219.650177] vfs_write+0x747/0xa70 [ 2219.650708] __x64_sys_pwrite64+0x201/0x260 [ 2219.651337] ? ksys_pwrite64+0x1b0/0x1b0 [ 2219.651915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2219.652698] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2219.653428] do_syscall_64+0x33/0x40 [ 2219.653971] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2219.654683] RIP: 0033:0x7f643d425ab7 [ 2219.655226] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2219.657870] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2219.658966] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2219.659996] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2219.661008] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2219.662074] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2219.663096] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2219.709978] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2219.726405] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2219.727519] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2219.728644] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2219.740761] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:00 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 16) 09:08:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r2, r1, 0x0) pread64(r2, &(0x7f0000000200)=""/192, 0xc0, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040)=""/105) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 09:08:00 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86dd, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) 09:08:00 executing program 2: r0 = shmget(0x3, 0x1000, 0x2c000000, &(0x7f0000ffc000/0x1000)=nil) shmget(0x2, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r0, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 09:08:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xf00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:08:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) [ 2233.182577] FAULT_INJECTION: forcing a failure. [ 2233.182577] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.183900] CPU: 0 PID: 13375 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2233.184622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2233.185352] Call Trace: [ 2233.185593] dump_stack+0x107/0x167 [ 2233.185918] should_fail.cold+0x5/0xa [ 2233.186263] ? create_object.isra.0+0x3a/0xa20 [ 2233.186672] should_failslab+0x5/0x20 [ 2233.187009] kmem_cache_alloc+0x5b/0x310 [ 2233.187377] create_object.isra.0+0x3a/0xa20 [ 2233.187767] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2233.188222] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2233.188687] create_io_worker+0xe8/0x620 [ 2233.189053] io_wqe_enqueue+0x69e/0xbe0 [ 2233.189410] ? create_worker_cb+0x260/0x260 [ 2233.189791] ? io_wq_work_match_all+0x10/0x10 [ 2233.190190] ? io_prep_async_work+0x340/0x550 [ 2233.190548] FAULT_INJECTION: forcing a failure. [ 2233.190548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2233.190598] io_queue_async_work+0x26b/0x4f0 [ 2233.192678] __io_queue_sqe+0x5cc/0x9d0 [ 2233.193032] ? io_issue_sqe+0x7700/0x7700 [ 2233.193405] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2233.193827] io_submit_sqes+0x4461/0x85c0 [ 2233.194210] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2233.194645] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2233.195076] ? __mutex_unlock_slowpath+0x8d/0x600 [ 2233.195504] ? io_submit_sqes+0x85c0/0x85c0 [ 2233.195885] ? check_memory_region+0x198/0x1f0 [ 2233.196289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2233.196724] ? wait_for_completion_io+0x270/0x270 [ 2233.197153] ? rcu_read_lock_any_held+0x75/0xa0 [ 2233.197561] ? vfs_write+0x354/0xa70 [ 2233.197889] ? fput_many+0x2f/0x1a0 [ 2233.198214] ? ksys_write+0x1a9/0x260 [ 2233.198549] ? __ia32_sys_read+0xb0/0xb0 [ 2233.198912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2233.199375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2233.199837] do_syscall_64+0x33/0x40 [ 2233.200168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2233.200637] RIP: 0033:0x7fa6ace83b19 [ 2233.200975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2233.202573] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2233.203247] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2233.203872] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2233.204502] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2233.205128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2233.205753] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2233.206403] CPU: 1 PID: 13380 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2233.207441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2233.208660] Call Trace: [ 2233.209079] dump_stack+0x107/0x167 [ 2233.209614] should_fail.cold+0x5/0xa [ 2233.210186] __alloc_pages_nodemask+0x182/0x600 [ 2233.210421] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2233.210874] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2233.212400] ? lock_downgrade+0x6d0/0x6d0 [ 2233.213039] ? lock_acquire+0x197/0x470 [ 2233.213649] alloc_pages_vma+0xbb/0x410 [ 2233.214266] shmem_alloc_page+0x10f/0x1e0 [ 2233.214877] ? shmem_init_inode+0x20/0x20 [ 2233.215528] ? percpu_counter_add_batch+0x8b/0x140 [ 2233.216263] ? __vm_enough_memory+0x184/0x360 [ 2233.216937] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2233.217744] ? shmem_unuse_inode+0xf60/0xf60 [ 2233.218405] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2233.219162] shmem_write_begin+0xf7/0x1d0 [ 2233.219787] generic_perform_write+0x20a/0x4f0 [ 2233.220486] ? page_cache_prev_miss+0x310/0x310 [ 2233.221171] ? evict_inodes+0x420/0x420 [ 2233.221776] ? generic_write_checks+0x2ad/0x390 [ 2233.222481] __generic_file_write_iter+0x39d/0x5d0 [ 2233.223219] generic_file_write_iter+0xdb/0x230 [ 2233.223901] ? iov_iter_init+0x3c/0x130 [ 2233.224504] new_sync_write+0x42c/0x660 [ 2233.225095] ? new_sync_read+0x6f0/0x6f0 [ 2233.225696] ? __x64_sys_pwrite64+0x201/0x260 [ 2233.226357] ? lock_release+0x680/0x680 [ 2233.226936] ? selinux_file_permission+0x92/0x520 [ 2233.227665] vfs_write+0x747/0xa70 [ 2233.228198] __x64_sys_pwrite64+0x201/0x260 [ 2233.228839] ? ksys_pwrite64+0x1b0/0x1b0 [ 2233.229442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2233.230211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2233.230975] do_syscall_64+0x33/0x40 [ 2233.231525] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2233.232269] RIP: 0033:0x7f643d425ab7 [ 2233.232822] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2233.235496] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2233.236620] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2233.237671] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2233.238064] FAULT_INJECTION: forcing a failure. [ 2233.238064] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.238716] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2233.238727] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2233.238743] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2233.242943] CPU: 0 PID: 13379 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2233.243704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2233.244613] Call Trace: [ 2233.244905] dump_stack+0x107/0x167 [ 2233.245313] should_fail.cold+0x5/0xa [ 2233.245737] ? create_object.isra.0+0x3a/0xa20 [ 2233.246242] should_failslab+0x5/0x20 [ 2233.246656] kmem_cache_alloc+0x5b/0x310 [ 2233.247110] ? mark_held_locks+0x9e/0xe0 [ 2233.247554] create_object.isra.0+0x3a/0xa20 [ 2233.248038] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2233.248602] kmem_cache_alloc_bulk+0x168/0x320 [ 2233.249101] io_submit_sqes+0x6f76/0x85c0 [ 2233.249578] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2233.250120] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2233.250651] ? lock_downgrade+0x6d0/0x6d0 [ 2233.251102] ? find_held_lock+0x2c/0x110 [ 2233.251551] ? io_submit_sqes+0x85c0/0x85c0 [ 2233.252031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2233.252569] ? wait_for_completion_io+0x270/0x270 [ 2233.253100] ? rcu_read_lock_any_held+0x75/0xa0 [ 2233.253607] ? vfs_write+0x354/0xa70 [ 2233.254017] ? fput_many+0x2f/0x1a0 [ 2233.254414] ? ksys_write+0x1a9/0x260 [ 2233.254828] ? __ia32_sys_read+0xb0/0xb0 [ 2233.255272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2233.255843] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2233.256410] do_syscall_64+0x33/0x40 [ 2233.256767] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2233.257315] RIP: 0033:0x7f705a641b19 [ 2233.257722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2233.259688] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2233.260530] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2233.261305] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2233.262067] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2233.262838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2233.263607] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2233.269903] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2233.270778] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2233.271646] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2233.282806] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:08:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 09:08:00 executing program 2: r0 = shmget(0x3, 0x3000, 0x8, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/74) r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ff5000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/228) [ 2233.330487] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2233.331178] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2233.331800] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2233.358484] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2233.360673] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2233.384660] FAULT_INJECTION: forcing a failure. 09:08:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1020, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, &(0x7f0000000a00)=@caif=@util, &(0x7f0000000a80)=0x80, 0x80000) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) sendfile(r3, r2, &(0x7f0000000000)=0x4, 0x0) dup2(r1, r2) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2233.384660] name failslab, interval 1, probability 0, space 0, times 0 09:08:00 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 2233.386769] CPU: 1 PID: 13386 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2233.387784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 09:08:00 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 17) [ 2233.389004] Call Trace: [ 2233.389494] dump_stack+0x107/0x167 [ 2233.390037] should_fail.cold+0x5/0xa [ 2233.390611] ? create_object.isra.0+0x3a/0xa20 [ 2233.391291] should_failslab+0x5/0x20 [ 2233.391850] kmem_cache_alloc+0x5b/0x310 [ 2233.392465] ? lock_acquire+0x197/0x470 [ 2233.393056] create_object.isra.0+0x3a/0xa20 [ 2233.393702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2233.394455] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2233.395202] create_io_worker+0xe8/0x620 [ 2233.395809] io_wqe_enqueue+0x69e/0xbe0 [ 2233.396397] ? create_worker_cb+0x260/0x260 [ 2233.397041] ? io_wq_work_match_all+0x10/0x10 [ 2233.397697] ? io_prep_async_work+0x340/0x550 [ 2233.398363] io_queue_async_work+0x26b/0x4f0 [ 2233.399012] __io_queue_sqe+0x5cc/0x9d0 [ 2233.399612] ? io_issue_sqe+0x7700/0x7700 [ 2233.400228] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2233.400937] io_submit_sqes+0x4461/0x85c0 [ 2233.401574] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2233.402307] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2233.403015] ? lock_downgrade+0x6d0/0x6d0 [ 2233.403626] ? find_held_lock+0x2c/0x110 [ 2233.404224] ? io_submit_sqes+0x85c0/0x85c0 [ 2233.404879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2233.405588] ? wait_for_completion_io+0x270/0x270 [ 2233.406299] ? rcu_read_lock_any_held+0x75/0xa0 [ 2233.406979] ? vfs_write+0x354/0xa70 [ 2233.407529] ? fput_many+0x2f/0x1a0 [ 2233.408068] ? ksys_write+0x1a9/0x260 [ 2233.408635] ? __ia32_sys_read+0xb0/0xb0 [ 2233.409239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2233.410008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2233.410771] do_syscall_64+0x33/0x40 [ 2233.411320] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2233.412062] RIP: 0033:0x7fa6ace83b19 [ 2233.412621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2233.415273] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2233.416391] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2233.417428] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2233.418463] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2233.419492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2233.420531] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2233.446744] FAULT_INJECTION: forcing a failure. [ 2233.446744] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.447820] CPU: 0 PID: 13398 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2233.448436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2233.449249] Call Trace: [ 2233.449525] dump_stack+0x107/0x167 [ 2233.449904] should_fail.cold+0x5/0xa [ 2233.450284] ? xas_alloc+0x336/0x440 [ 2233.450668] should_failslab+0x5/0x20 [ 2233.451046] kmem_cache_alloc+0x5b/0x310 [ 2233.451468] ? trace_hardirqs_on+0x5b/0x180 [ 2233.451915] xas_alloc+0x336/0x440 [ 2233.452278] xas_create+0x60f/0x10d0 [ 2233.452680] xas_create_range+0x189/0x620 [ 2233.453111] shmem_add_to_page_cache+0x760/0x1130 [ 2233.453606] ? shmem_getattr+0x180/0x180 [ 2233.454029] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 2233.454580] ? shmem_unuse_inode+0xf60/0xf60 [ 2233.455031] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2233.455552] shmem_write_begin+0xf7/0x1d0 [ 2233.455975] generic_perform_write+0x20a/0x4f0 [ 2233.456444] ? page_cache_prev_miss+0x310/0x310 [ 2233.456909] ? evict_inodes+0x420/0x420 [ 2233.457310] ? generic_write_checks+0x2ad/0x390 [ 2233.457780] __generic_file_write_iter+0x39d/0x5d0 [ 2233.458280] generic_file_write_iter+0xdb/0x230 [ 2233.458742] ? iov_iter_init+0x3c/0x130 [ 2233.459139] new_sync_write+0x42c/0x660 [ 2233.459536] ? new_sync_read+0x6f0/0x6f0 [ 2233.459948] ? __x64_sys_pwrite64+0x201/0x260 [ 2233.460401] ? lock_release+0x680/0x680 [ 2233.460812] ? selinux_file_permission+0x92/0x520 [ 2233.461310] vfs_write+0x747/0xa70 [ 2233.461678] __x64_sys_pwrite64+0x201/0x260 [ 2233.462115] ? ksys_pwrite64+0x1b0/0x1b0 [ 2233.462535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2233.463062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2233.463585] do_syscall_64+0x33/0x40 [ 2233.463952] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2233.464470] RIP: 0033:0x7f643d425ab7 [ 2233.464842] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2233.466642] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2233.467410] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2233.468120] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2233.468839] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2233.469546] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2233.470260] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2233.513612] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2233.554594] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2233.577046] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2233.577832] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2233.578469] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2233.592791] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:13 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 18) 09:08:13 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86de, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1100, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x8, 0x0, 0x0, 0x0) 09:08:13 executing program 2: shmget(0x2, 0x2000, 0x40, &(0x7f0000ff5000/0x2000)=nil) 09:08:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 09:08:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 09:08:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2246.317652] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2246.319250] FAULT_INJECTION: forcing a failure. [ 2246.319250] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.320911] CPU: 0 PID: 13437 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2246.321893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.322415] FAULT_INJECTION: forcing a failure. [ 2246.322415] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.323067] Call Trace: [ 2246.324355] dump_stack+0x107/0x167 [ 2246.324884] should_fail.cold+0x5/0xa [ 2246.325446] ? create_object.isra.0+0x3a/0xa20 [ 2246.326095] should_failslab+0x5/0x20 [ 2246.326648] kmem_cache_alloc+0x5b/0x310 [ 2246.327238] create_object.isra.0+0x3a/0xa20 [ 2246.327864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.328615] kmem_cache_alloc+0x159/0x310 [ 2246.329206] ? trace_hardirqs_on+0x5b/0x180 [ 2246.329844] xas_alloc+0x336/0x440 [ 2246.330362] xas_create+0x60f/0x10d0 [ 2246.330916] xas_create_range+0x189/0x620 [ 2246.331534] shmem_add_to_page_cache+0x760/0x1130 [ 2246.332231] ? shmem_getattr+0x180/0x180 [ 2246.332844] shmem_getpage_gfp.constprop.0+0x64a/0x1920 [ 2246.333632] ? shmem_unuse_inode+0xf60/0xf60 [ 2246.334260] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2246.334988] shmem_write_begin+0xf7/0x1d0 [ 2246.335588] generic_perform_write+0x20a/0x4f0 [ 2246.336259] ? __mnt_drop_write_file+0x9/0x70 [ 2246.336916] ? page_cache_prev_miss+0x310/0x310 [ 2246.337591] ? evict_inodes+0x420/0x420 [ 2246.338168] __generic_file_write_iter+0x39d/0x5d0 [ 2246.338872] generic_file_write_iter+0xdb/0x230 [ 2246.339526] ? iov_iter_init+0x3c/0x130 [ 2246.340107] new_sync_write+0x42c/0x660 [ 2246.340701] ? new_sync_read+0x6f0/0x6f0 [ 2246.341287] ? __x64_sys_pwrite64+0x201/0x260 [ 2246.341927] ? lock_release+0x680/0x680 [ 2246.342496] ? selinux_file_permission+0x92/0x520 [ 2246.343202] vfs_write+0x747/0xa70 [ 2246.343718] __x64_sys_pwrite64+0x201/0x260 [ 2246.344336] ? ksys_pwrite64+0x1b0/0x1b0 [ 2246.344928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.345677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.346428] do_syscall_64+0x33/0x40 [ 2246.346962] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.347702] RIP: 0033:0x7f643d425ab7 [ 2246.348237] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2246.350817] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2246.351911] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2246.352936] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2246.353946] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2246.354951] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2246.355959] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2246.357010] CPU: 1 PID: 13426 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2246.357578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.358226] Call Trace: [ 2246.358445] dump_stack+0x107/0x167 [ 2246.358732] should_fail.cold+0x5/0xa [ 2246.359033] ? create_object.isra.0+0x3a/0xa20 [ 2246.359401] should_failslab+0x5/0x20 [ 2246.359713] kmem_cache_alloc+0x5b/0x310 [ 2246.360049] ? lock_acquire+0x197/0x470 [ 2246.360381] create_object.isra.0+0x3a/0xa20 [ 2246.360738] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.361142] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2246.361556] create_io_worker+0xe8/0x620 [ 2246.361875] io_wqe_enqueue+0x69e/0xbe0 [ 2246.362191] ? create_worker_cb+0x260/0x260 [ 2246.362536] ? io_wq_work_match_all+0x10/0x10 [ 2246.362891] ? io_prep_async_work+0x340/0x550 [ 2246.363255] io_queue_async_work+0x26b/0x4f0 [ 2246.363603] __io_queue_sqe+0x5cc/0x9d0 [ 2246.363924] ? io_issue_sqe+0x7700/0x7700 [ 2246.364257] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2246.364643] io_submit_sqes+0x4461/0x85c0 [ 2246.364991] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.365389] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.365774] ? lock_downgrade+0x6d0/0x6d0 [ 2246.366107] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2246.366544] ? io_submit_sqes+0x85c0/0x85c0 [ 2246.366892] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.367280] ? wait_for_completion_io+0x270/0x270 [ 2246.367666] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.368028] ? vfs_write+0x354/0xa70 [ 2246.368329] ? fput_many+0x2f/0x1a0 [ 2246.368622] ? ksys_write+0x1a9/0x260 [ 2246.368930] ? __ia32_sys_read+0xb0/0xb0 [ 2246.369252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.369673] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.370078] do_syscall_64+0x33/0x40 [ 2246.370381] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.370781] RIP: 0033:0x7f705a641b19 [ 2246.371080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.372504] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.373102] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2246.373662] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2246.374216] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.374770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.375341] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2246.391139] FAULT_INJECTION: forcing a failure. [ 2246.391139] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.392308] CPU: 1 PID: 13429 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2246.392870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2246.393524] Call Trace: [ 2246.393739] dump_stack+0x107/0x167 [ 2246.394028] should_fail.cold+0x5/0xa [ 2246.394342] ? create_object.isra.0+0x3a/0xa20 [ 2246.394717] should_failslab+0x5/0x20 [ 2246.395018] kmem_cache_alloc+0x5b/0x310 [ 2246.395356] create_object.isra.0+0x3a/0xa20 [ 2246.395718] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2246.396126] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2246.396548] create_io_worker+0xe8/0x620 [ 2246.396887] io_wqe_enqueue+0x69e/0xbe0 [ 2246.397208] ? create_worker_cb+0x260/0x260 [ 2246.397556] ? io_wq_work_match_all+0x10/0x10 [ 2246.397917] ? io_prep_async_work+0x340/0x550 [ 2246.398290] io_queue_async_work+0x26b/0x4f0 [ 2246.398651] __io_queue_sqe+0x5cc/0x9d0 [ 2246.398971] ? io_issue_sqe+0x7700/0x7700 [ 2246.399318] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2246.399694] io_submit_sqes+0x4461/0x85c0 [ 2246.400050] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.400457] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2246.400860] ? lock_downgrade+0x6d0/0x6d0 [ 2246.401189] ? find_held_lock+0x2c/0x110 [ 2246.401519] ? io_submit_sqes+0x85c0/0x85c0 [ 2246.401865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2246.402253] ? wait_for_completion_io+0x270/0x270 [ 2246.402635] ? rcu_read_lock_any_held+0x75/0xa0 [ 2246.403004] ? vfs_write+0x354/0xa70 [ 2246.403303] ? fput_many+0x2f/0x1a0 [ 2246.403608] ? ksys_write+0x1a9/0x260 [ 2246.403913] ? __ia32_sys_read+0xb0/0xb0 [ 2246.404249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2246.404687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2246.405105] do_syscall_64+0x33/0x40 [ 2246.405412] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2246.405830] RIP: 0033:0x7fa6ace83b19 [ 2246.406125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2246.407614] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2246.408217] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2246.408785] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2246.409369] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.409930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2246.410500] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:08:13 executing program 2: shmget(0x3, 0x2000, 0x2, &(0x7f0000ff5000/0x2000)=nil) r0 = shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ff5000/0x2000)=nil) shmat(r0, &(0x7f0000ff3000/0x4000)=nil, 0x6000) 09:08:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x8beb, 0x6, 0x6, &(0x7f0000000040)=""/6}) r1 = creat(&(0x7f00000000c0)='./file2\x00', 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x2, 0x1, 0xfffffff8, 0x0, 0x2}}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)=""/255) fcntl$getown(r2, 0x9) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2246.417056] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2246.418652] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2246.419736] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2246.453827] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2246.482658] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2246.568500] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2246.569265] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2246.569830] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2246.587572] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) 09:08:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 09:08:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 09:08:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1200, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:26 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x185) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000)=0x4, 0x0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000040)={{0x6, 0x6}, {0x9, 0xff}, 0x9}) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x2cf}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x0, 0x10}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}, 0x0, 0x8000000}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x185) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000f, 0x1010, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x353d, 0x65a4, 0x3, &(0x7f0000000240)={[0xb758]}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2000, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index, 0x5, 0x0, 0x1, 0x1}, 0xfffffffc) [ 2259.223610] FAULT_INJECTION: forcing a failure. [ 2259.223610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2259.224782] CPU: 1 PID: 13464 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2259.225425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.226187] Call Trace: [ 2259.226439] dump_stack+0x107/0x167 [ 2259.226787] should_fail.cold+0x5/0xa [ 2259.227149] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2259.227664] ? shmem_write_begin+0xf7/0x1d0 [ 2259.228069] ? shmem_write_begin+0x100/0x1d0 [ 2259.228487] generic_perform_write+0x279/0x4f0 [ 2259.228928] ? page_cache_prev_miss+0x310/0x310 [ 2259.229366] ? evict_inodes+0x420/0x420 [ 2259.229750] ? generic_write_checks+0x2ad/0x390 [ 2259.230192] __generic_file_write_iter+0x39d/0x5d0 [ 2259.230666] generic_file_write_iter+0xdb/0x230 [ 2259.231088] ? iov_iter_init+0x3c/0x130 [ 2259.231470] new_sync_write+0x42c/0x660 [ 2259.231844] ? new_sync_read+0x6f0/0x6f0 [ 2259.232231] ? __x64_sys_pwrite64+0x201/0x260 [ 2259.232664] ? lock_release+0x680/0x680 [ 2259.233036] ? selinux_file_permission+0x92/0x520 [ 2259.233508] vfs_write+0x747/0xa70 [ 2259.233852] __x64_sys_pwrite64+0x201/0x260 [ 2259.234253] ? ksys_pwrite64+0x1b0/0x1b0 [ 2259.234635] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.235138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.235637] do_syscall_64+0x33/0x40 [ 2259.235986] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.236455] RIP: 0033:0x7f643d425ab7 [ 2259.236817] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2259.238549] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2259.239244] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2259.239923] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2259.240569] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2259.241247] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2259.241893] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:08:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86df, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:26 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 19) 09:08:26 executing program 2: r0 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/38) [ 2259.267466] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2259.276612] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2259.277909] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2259.278373] FAULT_INJECTION: forcing a failure. [ 2259.278373] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.279004] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2259.280105] CPU: 1 PID: 13475 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2259.281727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.282496] Call Trace: [ 2259.282753] dump_stack+0x107/0x167 [ 2259.283085] should_fail.cold+0x5/0xa [ 2259.283442] should_failslab+0x5/0x20 [ 2259.283805] kmem_cache_alloc_bulk+0x4b/0x320 [ 2259.284223] io_submit_sqes+0x6f76/0x85c0 [ 2259.284637] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.285109] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.285548] ? lock_downgrade+0x6d0/0x6d0 [ 2259.285928] ? find_held_lock+0x2c/0x110 [ 2259.286319] ? io_submit_sqes+0x85c0/0x85c0 [ 2259.286736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2259.287184] ? wait_for_completion_io+0x270/0x270 [ 2259.287622] ? rcu_read_lock_any_held+0x75/0xa0 [ 2259.288052] ? vfs_write+0x354/0xa70 [ 2259.288389] ? fput_many+0x2f/0x1a0 [ 2259.288748] ? ksys_write+0x1a9/0x260 [ 2259.289106] ? __ia32_sys_read+0xb0/0xb0 [ 2259.289476] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.289962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.290432] do_syscall_64+0x33/0x40 [ 2259.290780] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.291242] RIP: 0033:0x7fa6ace83b19 [ 2259.291594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2259.293242] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2259.293953] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2259.294620] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2259.295296] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2259.295963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2259.296614] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2259.299701] FAULT_INJECTION: forcing a failure. [ 2259.299701] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.300805] CPU: 1 PID: 13469 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2259.301445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.302183] Call Trace: [ 2259.302427] dump_stack+0x107/0x167 [ 2259.302766] should_fail.cold+0x5/0xa [ 2259.303120] ? create_io_worker+0xe8/0x620 [ 2259.303509] should_failslab+0x5/0x20 [ 2259.303850] kmem_cache_alloc_node_trace+0x59/0x340 [ 2259.304296] create_io_worker+0xe8/0x620 [ 2259.304659] io_wqe_enqueue+0x69e/0xbe0 [ 2259.305020] ? create_worker_cb+0x260/0x260 [ 2259.305403] ? io_wq_work_match_all+0x10/0x10 [ 2259.305801] ? io_prep_async_work+0x340/0x550 [ 2259.306203] io_queue_async_work+0x26b/0x4f0 [ 2259.306598] __io_queue_sqe+0x5cc/0x9d0 [ 2259.306954] ? io_issue_sqe+0x7700/0x7700 [ 2259.307332] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2259.307753] io_submit_sqes+0x4461/0x85c0 [ 2259.308139] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.308581] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.309025] ? lock_downgrade+0x6d0/0x6d0 [ 2259.309393] ? find_held_lock+0x2c/0x110 [ 2259.309758] ? io_submit_sqes+0x85c0/0x85c0 [ 2259.310147] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2259.310580] ? wait_for_completion_io+0x270/0x270 [ 2259.311007] ? rcu_read_lock_any_held+0x75/0xa0 [ 2259.311421] ? vfs_write+0x354/0xa70 [ 2259.311756] ? fput_many+0x2f/0x1a0 [ 2259.312082] ? ksys_write+0x1a9/0x260 [ 2259.312425] ? __ia32_sys_read+0xb0/0xb0 [ 2259.312795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.313258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.313718] do_syscall_64+0x33/0x40 [ 2259.314057] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.314510] RIP: 0033:0x7f705a641b19 [ 2259.314842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2259.316462] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2259.317141] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2259.317769] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2259.318404] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2259.319033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2259.319656] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:08:26 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x7000, 0x800, &(0x7f0000ff8000/0x7000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 2259.341321] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2259.342537] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2259.343610] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2259.349362] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2259.354015] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2259.409881] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:26 executing program 2: r0 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ff5000/0x3000)=nil) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ff5000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) 09:08:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1300, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:26 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) syncfs(r0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000100)) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r4 = fork() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r4, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x5, 0x4, 0x7, 0x0, 0x56, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc8e6, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x47150, 0x7fffffff, 0x10001, 0x2, 0x8, 0x5, 0xfbff, 0x0, 0x7, 0x0, 0x5}, r4, 0xf, r1, 0x9) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x0) 09:08:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 09:08:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86e0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="d4010000170001000000000000000000fc0200000000000000000000000000010000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000ac000700640101020000000000000000000000000a0101010000000000000000000000004e2000004e24003f0a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000008000000000000000f8ffffffffffffff00000000000000000000000000000073d55792ffffffff05000000000000000900000000000000000000000000000000000080000000005d0b000000000000e70000000000000000020000000000000200010300000000"], 0x1d4}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = dup3(r1, r0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000040)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r6 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) lseek(r2, 0x6, 0x1) close(r6) sendfile(r6, r5, &(0x7f0000000000)=0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) 09:08:26 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 20) [ 2259.532527] FAULT_INJECTION: forcing a failure. [ 2259.532527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2259.533525] CPU: 1 PID: 13499 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2259.534098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.534774] Call Trace: [ 2259.535008] dump_stack+0x107/0x167 [ 2259.535316] should_fail.cold+0x5/0xa [ 2259.535639] __alloc_pages_nodemask+0x182/0x600 [ 2259.536029] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2259.536541] ? lock_downgrade+0x6d0/0x6d0 [ 2259.536881] ? lock_acquire+0x197/0x470 [ 2259.537230] alloc_pages_vma+0xbb/0x410 [ 2259.537575] shmem_alloc_page+0x10f/0x1e0 [ 2259.537913] ? shmem_init_inode+0x20/0x20 [ 2259.538274] ? percpu_counter_add_batch+0x8b/0x140 [ 2259.538682] ? __vm_enough_memory+0x184/0x360 [ 2259.539054] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2259.539493] ? shmem_unuse_inode+0xf60/0xf60 [ 2259.539852] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2259.540272] shmem_write_begin+0xf7/0x1d0 [ 2259.540616] generic_perform_write+0x20a/0x4f0 [ 2259.541002] ? page_cache_prev_miss+0x310/0x310 [ 2259.541383] ? evict_inodes+0x420/0x420 [ 2259.541715] ? generic_write_checks+0x2ad/0x390 [ 2259.542100] __generic_file_write_iter+0x39d/0x5d0 [ 2259.542507] generic_file_write_iter+0xdb/0x230 [ 2259.542882] ? iov_iter_init+0x3c/0x130 [ 2259.543210] new_sync_write+0x42c/0x660 [ 2259.543537] ? new_sync_read+0x6f0/0x6f0 [ 2259.543873] ? __x64_sys_pwrite64+0x201/0x260 [ 2259.544241] ? lock_release+0x680/0x680 [ 2259.544566] ? selinux_file_permission+0x92/0x520 [ 2259.544973] vfs_write+0x747/0xa70 [ 2259.545266] __x64_sys_pwrite64+0x201/0x260 [ 2259.545622] ? ksys_pwrite64+0x1b0/0x1b0 [ 2259.545951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.546382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.546809] do_syscall_64+0x33/0x40 [ 2259.547111] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.547528] RIP: 0033:0x7f643d425ab7 [ 2259.547828] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2259.549301] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2259.549908] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2259.550473] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2259.551039] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2259.551607] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2259.552177] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2259.588305] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2259.598001] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2259.598793] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2259.599510] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2259.625807] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 09:08:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) 09:08:26 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/31) 09:08:26 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 21) 09:08:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86e1, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:26 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86e2, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2259.736509] FAULT_INJECTION: forcing a failure. [ 2259.736509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2259.737689] CPU: 1 PID: 13518 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2259.738247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.739075] Call Trace: [ 2259.739311] dump_stack+0x107/0x167 [ 2259.739693] should_fail.cold+0x5/0xa [ 2259.740009] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2259.740565] ? shmem_write_begin+0xf7/0x1d0 [ 2259.740978] ? shmem_write_begin+0x100/0x1d0 [ 2259.741386] generic_perform_write+0x279/0x4f0 [ 2259.741762] ? page_cache_prev_miss+0x310/0x310 [ 2259.742230] ? evict_inodes+0x420/0x420 [ 2259.742644] ? generic_write_checks+0x2ad/0x390 [ 2259.743026] __generic_file_write_iter+0x39d/0x5d0 [ 2259.743417] generic_file_write_iter+0xdb/0x230 [ 2259.743785] ? iov_iter_init+0x3c/0x130 [ 2259.744101] new_sync_write+0x42c/0x660 [ 2259.744414] ? new_sync_read+0x6f0/0x6f0 [ 2259.744745] ? __x64_sys_pwrite64+0x201/0x260 [ 2259.745102] ? lock_release+0x680/0x680 [ 2259.745420] ? selinux_file_permission+0x92/0x520 [ 2259.745806] vfs_write+0x747/0xa70 [ 2259.746093] __x64_sys_pwrite64+0x201/0x260 [ 2259.746438] ? ksys_pwrite64+0x1b0/0x1b0 [ 2259.746760] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.747173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.747578] do_syscall_64+0x33/0x40 [ 2259.747877] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.748288] RIP: 0033:0x7f643d425ab7 [ 2259.748581] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2259.750033] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2259.750628] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2259.751183] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2259.751734] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2259.752293] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2259.752848] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2259.787639] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2259.788894] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2259.790209] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2259.808851] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2259.811647] FAULT_INJECTION: forcing a failure. [ 2259.811647] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.812617] CPU: 1 PID: 13517 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2259.813163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.813802] Call Trace: [ 2259.814011] dump_stack+0x107/0x167 [ 2259.814312] should_fail.cold+0x5/0xa [ 2259.814609] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2259.815041] should_failslab+0x5/0x20 [ 2259.815342] __kmalloc_node+0x76/0x420 [ 2259.815662] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2259.816060] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2259.816469] kmem_cache_alloc_bulk+0x182/0x320 [ 2259.816838] io_submit_sqes+0x6f76/0x85c0 [ 2259.817187] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.817594] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.817985] ? lock_downgrade+0x6d0/0x6d0 [ 2259.818321] ? find_held_lock+0x2c/0x110 [ 2259.818656] ? io_submit_sqes+0x85c0/0x85c0 [ 2259.819013] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2259.819401] ? wait_for_completion_io+0x270/0x270 [ 2259.819800] ? rcu_read_lock_any_held+0x75/0xa0 [ 2259.820174] ? vfs_write+0x354/0xa70 [ 2259.820478] ? fput_many+0x2f/0x1a0 [ 2259.820776] ? ksys_write+0x1a9/0x260 [ 2259.821091] ? __ia32_sys_read+0xb0/0xb0 [ 2259.821423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.821844] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.822253] do_syscall_64+0x33/0x40 [ 2259.822557] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.822954] RIP: 0033:0x7f705a641b19 [ 2259.823251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2259.824673] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2259.825271] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2259.825823] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2259.826373] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2259.826933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2259.827487] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:08:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1500, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2259.858433] FAULT_INJECTION: forcing a failure. [ 2259.858433] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.859434] CPU: 1 PID: 13526 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2259.859970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2259.860611] Call Trace: [ 2259.860825] dump_stack+0x107/0x167 [ 2259.861109] should_fail.cold+0x5/0xa [ 2259.861410] ? create_io_worker+0xe8/0x620 [ 2259.861738] should_failslab+0x5/0x20 [ 2259.862038] kmem_cache_alloc_node_trace+0x59/0x340 [ 2259.862432] create_io_worker+0xe8/0x620 [ 2259.862748] io_wqe_enqueue+0x69e/0xbe0 [ 2259.863059] ? create_worker_cb+0x260/0x260 [ 2259.863394] ? io_wq_work_match_all+0x10/0x10 [ 2259.863747] ? io_prep_async_work+0x340/0x550 [ 2259.864110] io_queue_async_work+0x26b/0x4f0 [ 2259.864458] __io_queue_sqe+0x5cc/0x9d0 [ 2259.864787] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2259.865218] ? trace_hardirqs_on+0x5b/0x180 [ 2259.865557] ? io_issue_sqe+0x7700/0x7700 [ 2259.865887] io_submit_sqes+0x4461/0x85c0 [ 2259.866224] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.866615] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2259.866991] ? lock_downgrade+0x6d0/0x6d0 [ 2259.867316] ? find_held_lock+0x2c/0x110 [ 2259.867634] ? io_submit_sqes+0x85c0/0x85c0 [ 2259.867978] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2259.868359] ? wait_for_completion_io+0x270/0x270 [ 2259.868741] ? rcu_read_lock_any_held+0x75/0xa0 [ 2259.869112] ? vfs_write+0x354/0xa70 [ 2259.869408] ? fput_many+0x2f/0x1a0 [ 2259.869692] ? ksys_write+0x1a9/0x260 09:08:27 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmget(0x3, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) [ 2259.869992] ? __ia32_sys_read+0xb0/0xb0 [ 2259.870447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2259.870854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2259.871278] do_syscall_64+0x33/0x40 [ 2259.871571] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2259.871983] RIP: 0033:0x7fa6ace83b19 [ 2259.872292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2259.873785] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2259.874396] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2259.874970] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2259.875544] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2259.876115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2259.876686] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:08:27 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86e3, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2259.922853] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:08:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) [ 2259.958732] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:08:40 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86e4, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:40 executing program 2: fchdir(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xe, 0x97, {0x97, 0xe, "fc297be0856b4db1d5b81094fd2b46f595342797cc0087a489937f953407040899359abbd4df8c3dc099865c5818a2d7ec76b0ccf111967eeae5444851804e7bca958695f262b8674741cd1b62cd8adda45ca85fded9223a460accebc733c277f1dc018847b8dcca2401a72aaccc3d05643ce173b4bb3dcff5cd6093c111c771c8cd0c8867c69d2910d587de2e1b444497e6b6528b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0xd, 0xa8, "f1b7d45d349256cb33219f3b74579baa3cb1e41d08ea79351aea5ac0dd8c75accd1a5de2d0794454d277d7099e1593ae5c84389f5427cca3236407dbcbb7edf459c6ac0ef426476d0c50d86b830070032d6ec731f820ec5dcb223fe56540fac0e12dc59c042d020e73e2ac5db0cc73940de2ad5d7177bc30ea25055e6b3b35780759eb7951622d5e1f9654dfb075183d34df12f9039aeaedf0e55d8e83929c54640c9f04b73a27b2"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7f}}) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:08:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 09:08:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 09:08:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) io_uring_enter(r0, 0x1ea7, 0x22a7, 0x0, &(0x7f0000000040)={[0x80000001]}, 0x8) 09:08:40 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 22) 09:08:40 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1600, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) [ 2273.675543] FAULT_INJECTION: forcing a failure. [ 2273.675543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2273.677669] CPU: 0 PID: 13558 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2273.678881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.680338] Call Trace: [ 2273.680813] dump_stack+0x107/0x167 [ 2273.681469] should_fail.cold+0x5/0xa [ 2273.682149] __alloc_pages_nodemask+0x182/0x600 [ 2273.682973] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2273.684020] ? lock_downgrade+0x6d0/0x6d0 [ 2273.684747] ? lock_acquire+0x197/0x470 [ 2273.685470] alloc_pages_vma+0xbb/0x410 [ 2273.686180] shmem_alloc_page+0x10f/0x1e0 [ 2273.686908] ? shmem_init_inode+0x20/0x20 [ 2273.687668] ? percpu_counter_add_batch+0x8b/0x140 [ 2273.688534] ? __vm_enough_memory+0x184/0x360 [ 2273.689351] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2273.690305] ? shmem_unuse_inode+0xf60/0xf60 [ 2273.691083] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2273.691981] shmem_write_begin+0xf7/0x1d0 [ 2273.692718] generic_perform_write+0x20a/0x4f0 [ 2273.693536] ? page_cache_prev_miss+0x310/0x310 [ 2273.694360] ? evict_inodes+0x420/0x420 [ 2273.695060] ? generic_write_checks+0x2ad/0x390 [ 2273.695889] __generic_file_write_iter+0x39d/0x5d0 [ 2273.696757] generic_file_write_iter+0xdb/0x230 [ 2273.697582] ? iov_iter_init+0x3c/0x130 [ 2273.698297] new_sync_write+0x42c/0x660 [ 2273.699022] ? new_sync_read+0x6f0/0x6f0 [ 2273.699754] ? __x64_sys_pwrite64+0x201/0x260 [ 2273.700560] ? lock_release+0x680/0x680 [ 2273.701269] ? selinux_file_permission+0x92/0x520 [ 2273.702137] vfs_write+0x747/0xa70 [ 2273.702673] __x64_sys_pwrite64+0x201/0x260 [ 2273.703308] ? ksys_pwrite64+0x1b0/0x1b0 [ 2273.703908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2273.704683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2273.705449] do_syscall_64+0x33/0x40 [ 2273.705997] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2273.706744] RIP: 0033:0x7f643d425ab7 [ 2273.707297] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2273.709983] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2273.711124] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2273.712186] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2273.713245] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2273.714299] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2273.715342] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2273.732840] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2273.734806] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2273.736103] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2273.737180] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2273.747657] FAULT_INJECTION: forcing a failure. [ 2273.747657] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.749685] CPU: 0 PID: 13565 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2273.750702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.751961] Call Trace: [ 2273.752368] dump_stack+0x107/0x167 [ 2273.752934] should_fail.cold+0x5/0xa [ 2273.753516] ? create_io_worker+0xe8/0x620 [ 2273.754174] should_failslab+0x5/0x20 [ 2273.754752] kmem_cache_alloc_node_trace+0x59/0x340 [ 2273.755533] create_io_worker+0xe8/0x620 [ 2273.756165] io_wqe_enqueue+0x69e/0xbe0 [ 2273.756783] ? create_worker_cb+0x260/0x260 [ 2273.757450] ? io_wq_work_match_all+0x10/0x10 [ 2273.757817] FAULT_INJECTION: forcing a failure. [ 2273.757817] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.758127] ? io_prep_async_work+0x340/0x550 [ 2273.758152] io_queue_async_work+0x26b/0x4f0 [ 2273.758177] __io_queue_sqe+0x5cc/0x9d0 [ 2273.758203] ? io_issue_sqe+0x7700/0x7700 [ 2273.762355] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2273.763081] io_submit_sqes+0x4461/0x85c0 [ 2273.763745] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2273.764512] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2273.765261] ? lock_downgrade+0x6d0/0x6d0 [ 2273.765886] ? find_held_lock+0x2c/0x110 [ 2273.766524] ? io_submit_sqes+0x85c0/0x85c0 [ 2273.767185] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2273.767892] ? wait_for_completion_io+0x270/0x270 [ 2273.768642] ? rcu_read_lock_any_held+0x75/0xa0 [ 2273.769358] ? vfs_write+0x354/0xa70 [ 2273.769925] ? fput_many+0x2f/0x1a0 [ 2273.770489] ? ksys_write+0x1a9/0x260 [ 2273.771076] ? __ia32_sys_read+0xb0/0xb0 [ 2273.771708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2273.772517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2273.773323] do_syscall_64+0x33/0x40 [ 2273.773892] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2273.774670] RIP: 0033:0x7f705a641b19 [ 2273.775243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2273.778044] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2273.779197] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2273.780283] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2273.781373] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2273.782454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2273.783529] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2273.784651] CPU: 1 PID: 13557 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2273.785633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.786764] Call Trace: [ 2273.787135] dump_stack+0x107/0x167 [ 2273.787641] should_fail.cold+0x5/0xa [ 2273.788170] ? create_object.isra.0+0x3a/0xa20 [ 2273.788801] should_failslab+0x5/0x20 [ 2273.789340] kmem_cache_alloc+0x5b/0x310 [ 2273.789895] ? lock_acquire+0x197/0x470 [ 2273.790450] create_object.isra.0+0x3a/0xa20 [ 2273.791050] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2273.791751] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2273.792457] create_io_worker+0xe8/0x620 [ 2273.793027] io_wqe_enqueue+0x69e/0xbe0 [ 2273.793578] ? create_worker_cb+0x260/0x260 [ 2273.794172] ? io_wq_work_match_all+0x10/0x10 [ 2273.794785] ? io_prep_async_work+0x340/0x550 [ 2273.795408] io_queue_async_work+0x26b/0x4f0 [ 2273.796011] __io_queue_sqe+0x5cc/0x9d0 [ 2273.796561] ? io_issue_sqe+0x7700/0x7700 [ 2273.797145] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2273.797800] io_submit_sqes+0x4461/0x85c0 [ 2273.798392] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2273.799080] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2273.799736] ? lock_downgrade+0x6d0/0x6d0 [ 2273.800302] ? find_held_lock+0x2c/0x110 [ 2273.800861] ? io_submit_sqes+0x85c0/0x85c0 [ 2273.801473] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2273.802134] ? wait_for_completion_io+0x270/0x270 [ 2273.802799] ? rcu_read_lock_any_held+0x75/0xa0 [ 2273.803427] ? vfs_write+0x354/0xa70 [ 2273.803940] ? fput_many+0x2f/0x1a0 [ 2273.804440] ? ksys_write+0x1a9/0x260 [ 2273.804969] ? __ia32_sys_read+0xb0/0xb0 [ 2273.805525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2273.806241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2273.806948] do_syscall_64+0x33/0x40 [ 2273.807459] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2273.808148] RIP: 0033:0x7fa6ace83b19 [ 2273.808651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2273.811070] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2273.812081] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2273.813042] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2273.813987] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2273.814933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2273.815875] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:08:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) r3 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r3, 0xffffffffffffffff}}, './file2\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffff81}}, './file1\x00'}) [ 2273.831916] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2273.882794] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:08:41 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(r1, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000640)=0x80, 0x80800) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000680)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x306, @remote}, 0x5c, {0x2, 0x4e22, @empty}, 'gretap0\x00'}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000040)={0x0, 0xffffffff, 0x2, 0x0, 0x12}) [ 2274.016192] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2274.017376] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2274.018595] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2274.060205] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1700, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:08:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x86e5, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:53 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 23) 09:08:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000, 0x8001) 09:08:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) 09:08:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 09:08:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x8, 0x0, 0x0) 09:08:53 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/11) [ 2286.346893] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2286.375049] FAULT_INJECTION: forcing a failure. [ 2286.375049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2286.376918] CPU: 1 PID: 13603 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2286.377926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.379122] Call Trace: [ 2286.379512] dump_stack+0x107/0x167 [ 2286.380045] should_fail.cold+0x5/0xa [ 2286.380604] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2286.381396] ? shmem_write_begin+0xf7/0x1d0 [ 2286.382022] ? shmem_write_begin+0x100/0x1d0 [ 2286.382665] generic_perform_write+0x279/0x4f0 [ 2286.383345] ? page_cache_prev_miss+0x310/0x310 [ 2286.384026] ? evict_inodes+0x420/0x420 [ 2286.384622] ? generic_write_checks+0x2ad/0x390 [ 2286.385326] __generic_file_write_iter+0x39d/0x5d0 [ 2286.386053] generic_file_write_iter+0xdb/0x230 [ 2286.386751] ? iov_iter_init+0x3c/0x130 [ 2286.387350] new_sync_write+0x42c/0x660 [ 2286.387938] ? new_sync_read+0x6f0/0x6f0 [ 2286.388546] ? __x64_sys_pwrite64+0x201/0x260 [ 2286.389228] ? lock_release+0x680/0x680 [ 2286.389814] ? selinux_file_permission+0x92/0x520 [ 2286.390550] vfs_write+0x747/0xa70 [ 2286.391092] __x64_sys_pwrite64+0x201/0x260 [ 2286.391732] ? ksys_pwrite64+0x1b0/0x1b0 [ 2286.392352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2286.393142] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.393901] do_syscall_64+0x33/0x40 [ 2286.394456] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.395201] RIP: 0033:0x7f643d425ab7 [ 2286.395746] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2286.398416] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2286.399528] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2286.400576] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2286.400941] FAULT_INJECTION: forcing a failure. [ 2286.400941] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.401625] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2286.401637] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2286.401654] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2286.405747] CPU: 0 PID: 13596 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2286.406349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.407044] Call Trace: [ 2286.407280] dump_stack+0x107/0x167 [ 2286.407586] should_fail.cold+0x5/0xa [ 2286.407911] ? create_object.isra.0+0x3a/0xa20 [ 2286.408302] should_failslab+0x5/0x20 [ 2286.408621] kmem_cache_alloc+0x5b/0x310 [ 2286.408965] ? lock_acquire+0x197/0x470 [ 2286.409330] create_object.isra.0+0x3a/0xa20 [ 2286.409699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2286.410127] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2286.410558] create_io_worker+0xe8/0x620 [ 2286.410907] io_wqe_enqueue+0x69e/0xbe0 [ 2286.411265] ? create_worker_cb+0x260/0x260 [ 2286.411633] ? io_wq_work_match_all+0x10/0x10 [ 2286.412013] ? io_prep_async_work+0x340/0x550 [ 2286.412395] io_queue_async_work+0x26b/0x4f0 [ 2286.412766] __io_queue_sqe+0x5cc/0x9d0 [ 2286.413109] ? io_issue_sqe+0x7700/0x7700 [ 2286.413462] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2286.413861] io_submit_sqes+0x4461/0x85c0 [ 2286.414224] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2286.414648] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2286.415049] ? lock_downgrade+0x6d0/0x6d0 [ 2286.415401] ? find_held_lock+0x2c/0x110 [ 2286.415742] ? io_submit_sqes+0x85c0/0x85c0 [ 2286.416108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2286.416509] ? wait_for_completion_io+0x270/0x270 [ 2286.416917] ? rcu_read_lock_any_held+0x75/0xa0 [ 2286.417305] ? vfs_write+0x354/0xa70 [ 2286.417623] ? fput_many+0x2f/0x1a0 [ 2286.417927] ? ksys_write+0x1a9/0x260 [ 2286.418254] ? __ia32_sys_read+0xb0/0xb0 [ 2286.418595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2286.419032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.419473] do_syscall_64+0x33/0x40 [ 2286.419786] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.420210] RIP: 0033:0x7f705a641b19 [ 2286.420525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.422024] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2286.422663] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2286.423249] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2286.423832] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.424419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2286.425007] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:08:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) sendfile(r3, r2, &(0x7f0000000000)=0x4, 0x0) r4 = open(&(0x7f0000000280)='./file2\x00', 0x8c080, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000200)='\x00', &(0x7f0000000240)='./file2\x00', r4) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2286.441676] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2286.442911] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2286.444021] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2286.467845] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2286.468562] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2286.469244] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2286.478528] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2286.493593] FAULT_INJECTION: forcing a failure. [ 2286.493593] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.495456] CPU: 1 PID: 13607 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2286.496472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.497684] Call Trace: [ 2286.498079] dump_stack+0x107/0x167 [ 2286.498616] should_fail.cold+0x5/0xa [ 2286.498875] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2286.499173] ? create_object.isra.0+0x3a/0xa20 [ 2286.499198] should_failslab+0x5/0x20 [ 2286.501135] kmem_cache_alloc+0x5b/0x310 [ 2286.501725] ? mark_held_locks+0x9e/0xe0 [ 2286.502319] create_object.isra.0+0x3a/0xa20 [ 2286.502956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2286.503700] kmem_cache_alloc_bulk+0x168/0x320 [ 2286.504364] ? __sanitizer_cov_trace_switch+0x37/0x80 [ 2286.505128] io_submit_sqes+0x6f76/0x85c0 [ 2286.505759] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2286.506486] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2286.507190] ? lock_downgrade+0x6d0/0x6d0 [ 2286.507791] ? find_held_lock+0x2c/0x110 [ 2286.508387] ? io_submit_sqes+0x85c0/0x85c0 [ 2286.509031] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2286.509747] ? wait_for_completion_io+0x270/0x270 [ 2286.510458] ? rcu_read_lock_any_held+0x75/0xa0 [ 2286.511134] ? vfs_write+0x354/0xa70 [ 2286.511684] ? fput_many+0x2f/0x1a0 [ 2286.512220] ? ksys_write+0x1a9/0x260 [ 2286.512778] ? __ia32_sys_read+0xb0/0xb0 [ 2286.513382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2286.514145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.514904] do_syscall_64+0x33/0x40 [ 2286.515449] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.516188] RIP: 0033:0x7fa6ace83b19 [ 2286.516736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.519383] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2286.520496] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2286.521534] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2286.522558] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.523587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2286.524611] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2286.527384] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:08:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x9103, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:08:53 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 24) 09:08:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) 09:08:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0x0, 0x71, 0x20, 0x7b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x80, 0xb475, 0x100}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2286.600699] FAULT_INJECTION: forcing a failure. [ 2286.600699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2286.602550] CPU: 1 PID: 13626 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2286.603555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.604749] Call Trace: [ 2286.605146] dump_stack+0x107/0x167 [ 2286.605682] should_fail.cold+0x5/0xa [ 2286.606246] __alloc_pages_nodemask+0x182/0x600 [ 2286.606933] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2286.607796] ? lock_downgrade+0x6d0/0x6d0 [ 2286.608400] ? lock_acquire+0x197/0x470 [ 2286.609001] alloc_pages_vma+0xbb/0x410 [ 2286.609600] shmem_alloc_page+0x10f/0x1e0 [ 2286.610205] ? shmem_init_inode+0x20/0x20 [ 2286.610835] ? percpu_counter_add_batch+0x8b/0x140 [ 2286.611553] ? __vm_enough_memory+0x184/0x360 [ 2286.612211] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2286.613000] ? shmem_unuse_inode+0xf60/0xf60 [ 2286.613658] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2286.614397] shmem_write_begin+0xf7/0x1d0 [ 2286.614999] generic_perform_write+0x20a/0x4f0 [ 2286.615673] ? page_cache_prev_miss+0x310/0x310 [ 2286.616350] ? evict_inodes+0x420/0x420 [ 2286.616941] ? generic_write_checks+0x2ad/0x390 [ 2286.617633] __generic_file_write_iter+0x39d/0x5d0 [ 2286.618353] generic_file_write_iter+0xdb/0x230 [ 2286.619024] ? iov_iter_init+0x3c/0x130 [ 2286.619609] new_sync_write+0x42c/0x660 [ 2286.620188] ? new_sync_read+0x6f0/0x6f0 [ 2286.620781] ? __x64_sys_pwrite64+0x201/0x260 [ 2286.621445] ? lock_release+0x680/0x680 [ 2286.622029] ? selinux_file_permission+0x92/0x520 [ 2286.622748] vfs_write+0x747/0xa70 [ 2286.623278] __x64_sys_pwrite64+0x201/0x260 [ 2286.623906] ? ksys_pwrite64+0x1b0/0x1b0 [ 2286.624511] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2286.625284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.626051] do_syscall_64+0x33/0x40 [ 2286.626599] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.627345] RIP: 0033:0x7f643d425ab7 [ 2286.627889] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2286.630562] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2286.631665] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2286.632707] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2286.633748] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2286.634791] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2286.635825] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2286.658929] FAULT_INJECTION: forcing a failure. [ 2286.658929] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.660678] CPU: 1 PID: 13623 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2286.661687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.662883] Call Trace: [ 2286.663269] dump_stack+0x107/0x167 [ 2286.663801] should_fail.cold+0x5/0xa [ 2286.664362] ? create_io_worker+0xe8/0x620 [ 2286.664981] should_failslab+0x5/0x20 [ 2286.665553] kmem_cache_alloc_node_trace+0x59/0x340 [ 2286.666283] create_io_worker+0xe8/0x620 [ 2286.666882] io_wqe_enqueue+0x69e/0xbe0 [ 2286.667469] ? create_worker_cb+0x260/0x260 [ 2286.668100] ? io_wq_work_match_all+0x10/0x10 [ 2286.668755] ? io_prep_async_work+0x340/0x550 [ 2286.669414] io_queue_async_work+0x26b/0x4f0 [ 2286.670062] __io_queue_sqe+0x5cc/0x9d0 [ 2286.670652] ? io_issue_sqe+0x7700/0x7700 [ 2286.671264] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2286.671955] io_submit_sqes+0x4461/0x85c0 [ 2286.672585] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2286.673325] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2286.674026] ? lock_downgrade+0x6d0/0x6d0 [ 2286.674624] ? find_held_lock+0x2c/0x110 [ 2286.675222] ? io_submit_sqes+0x85c0/0x85c0 [ 2286.675862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2286.676567] ? wait_for_completion_io+0x270/0x270 [ 2286.677283] ? rcu_read_lock_any_held+0x75/0xa0 [ 2286.677957] ? vfs_write+0x354/0xa70 [ 2286.678501] ? fput_many+0x2f/0x1a0 [ 2286.679034] ? ksys_write+0x1a9/0x260 [ 2286.679594] ? __ia32_sys_read+0xb0/0xb0 [ 2286.680191] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2286.680953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2286.681719] do_syscall_64+0x33/0x40 [ 2286.682267] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2286.683013] RIP: 0033:0x7f705a641b19 [ 2286.683563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.686219] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2286.687321] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2286.688348] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2286.689387] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.690417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2286.691448] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2286.702246] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2286.703394] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2286.704530] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2286.730830] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2286.792207] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2286.793425] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2286.794565] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2286.805759] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:06 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 25) 09:09:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) 09:09:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 09:09:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1800, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2299.218821] FAULT_INJECTION: forcing a failure. [ 2299.218821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2299.220594] CPU: 1 PID: 13640 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2299.221604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.222788] Call Trace: [ 2299.223178] dump_stack+0x107/0x167 [ 2299.223710] should_fail.cold+0x5/0xa [ 2299.224275] iov_iter_copy_from_user_atomic+0x49b/0xdb0 09:09:06 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) 09:09:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 09:09:06 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x9902, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2299.225061] ? shmem_write_begin+0xf7/0x1d0 [ 2299.225864] ? shmem_write_begin+0x100/0x1d0 [ 2299.226510] generic_perform_write+0x279/0x4f0 [ 2299.227182] ? page_cache_prev_miss+0x310/0x310 [ 2299.227853] ? evict_inodes+0x420/0x420 [ 2299.228438] ? generic_write_checks+0x2ad/0x390 [ 2299.229121] __generic_file_write_iter+0x39d/0x5d0 [ 2299.229846] generic_file_write_iter+0xdb/0x230 09:09:06 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xc2]}, 0x8, 0x800) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0xd8499488957a772f}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000a0000000c00060000000000001b000008000300", @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1b18786105bda1a1440e70f86233964cc818f75b", @ANYRES16=r7, @ANYBLOB="010000000000000000000a0000000c000600000000000000000008000300", @ANYRES32=r8, @ANYBLOB="60124814568db6884d3f823a580364eb3a425c8eb5f40dcd777f89c6b9cffb70ea631863db80b440b0be929b90468a5e2e8543e5f5972d7ed518212d3529bf7a0255ca5045766cac7603e212cf1376238429f0136a2a76af54265f48af518cfc9abc6d0b858908ba9bac1a62cf75cae473a7c6689c56f0"], 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xa1}, 0x1, 0x0, 0x0, 0x4000054}, 0x20060041) r9 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r9}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2299.230517] ? iov_iter_init+0x3c/0x130 [ 2299.231197] new_sync_write+0x42c/0x660 [ 2299.231807] ? new_sync_read+0x6f0/0x6f0 [ 2299.232399] ? __x64_sys_pwrite64+0x201/0x260 [ 2299.233053] ? lock_release+0x680/0x680 [ 2299.233643] ? selinux_file_permission+0x92/0x520 [ 2299.233916] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2299.234359] vfs_write+0x747/0xa70 [ 2299.234387] __x64_sys_pwrite64+0x201/0x260 [ 2299.236128] ? ksys_pwrite64+0x1b0/0x1b0 [ 2299.236720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.237493] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.238249] do_syscall_64+0x33/0x40 [ 2299.238787] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2299.239529] RIP: 0033:0x7f643d425ab7 [ 2299.240067] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2299.242702] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2299.243807] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2299.244830] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2299.245854] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2299.246879] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2299.247908] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:09:06 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x2, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) shmget(0x2, 0x4000, 0x400, &(0x7f0000ff7000/0x4000)=nil) [ 2299.292671] FAULT_INJECTION: forcing a failure. [ 2299.292671] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.293918] CPU: 0 PID: 13658 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2299.294349] FAULT_INJECTION: forcing a failure. [ 2299.294349] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.294517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.294530] Call Trace: [ 2299.297073] dump_stack+0x107/0x167 [ 2299.297401] should_fail.cold+0x5/0xa [ 2299.297730] ? create_object.isra.0+0x3a/0xa20 [ 2299.298119] should_failslab+0x5/0x20 [ 2299.298449] kmem_cache_alloc+0x5b/0x310 [ 2299.298800] create_object.isra.0+0x3a/0xa20 [ 2299.299177] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.299613] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2299.300043] create_io_worker+0xe8/0x620 [ 2299.300407] io_wqe_enqueue+0x69e/0xbe0 [ 2299.300745] ? create_worker_cb+0x260/0x260 [ 2299.301109] ? io_wq_work_match_all+0x10/0x10 [ 2299.301504] ? io_prep_async_work+0x340/0x550 [ 2299.301887] io_queue_async_work+0x26b/0x4f0 [ 2299.302267] __io_queue_sqe+0x5cc/0x9d0 [ 2299.302606] ? io_issue_sqe+0x7700/0x7700 [ 2299.302965] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2299.303382] io_submit_sqes+0x4461/0x85c0 [ 2299.303741] ? __mutex_lock+0x4fe/0x10b0 [ 2299.304084] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2299.304513] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2299.304923] ? io_submit_sqes+0x85c0/0x85c0 [ 2299.305306] ? recalibrate_cpu_khz+0x10/0x10 [ 2299.305681] ? ktime_get+0x158/0x1f0 [ 2299.306000] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2299.306370] ? clockevents_program_event+0x131/0x360 [ 2299.306797] ? tick_program_event+0xa8/0x140 [ 2299.307173] ? hrtimer_interrupt+0x771/0x9b0 [ 2299.307551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.307985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.308428] do_syscall_64+0x33/0x40 [ 2299.308742] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2299.309173] RIP: 0033:0x7f705a641b19 [ 2299.309495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.311030] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2299.311679] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2299.312287] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2299.312882] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.313504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.314102] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2299.314729] CPU: 1 PID: 13650 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2299.315761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.316955] Call Trace: [ 2299.317357] dump_stack+0x107/0x167 [ 2299.317889] should_fail.cold+0x5/0xa [ 2299.318448] ? create_object.isra.0+0x3a/0xa20 [ 2299.319118] should_failslab+0x5/0x20 [ 2299.319677] kmem_cache_alloc+0x5b/0x310 [ 2299.320272] ? mark_held_locks+0x9e/0xe0 [ 2299.320866] create_object.isra.0+0x3a/0xa20 [ 2299.321516] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.322262] kmem_cache_alloc_bulk+0x168/0x320 [ 2299.322933] io_submit_sqes+0x6f76/0x85c0 [ 2299.323564] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2299.324284] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2299.324988] ? lock_downgrade+0x6d0/0x6d0 [ 2299.325604] ? find_held_lock+0x2c/0x110 [ 2299.326200] ? io_submit_sqes+0x85c0/0x85c0 [ 2299.326842] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.327550] ? wait_for_completion_io+0x270/0x270 [ 2299.328276] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.328955] ? vfs_write+0x354/0xa70 [ 2299.329518] ? fput_many+0x2f/0x1a0 [ 2299.330057] ? ksys_write+0x1a9/0x260 [ 2299.330624] ? __ia32_sys_read+0xb0/0xb0 [ 2299.331224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.331993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.332761] do_syscall_64+0x33/0x40 [ 2299.333311] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2299.334069] RIP: 0033:0x7fa6ace83b19 [ 2299.334622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.337305] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2299.338414] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2299.339444] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2299.340495] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.341556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.342586] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2299.355569] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2299.356841] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2299.357931] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2299.362543] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2299.371703] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2299.372358] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2299.372970] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:09:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x5008}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:09:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 2299.423031] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2299.423783] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:06 executing program 2: sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x1) shmget(0x3, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) 09:09:06 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1900, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:06 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xb800, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 09:09:06 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 26) [ 2299.549666] FAULT_INJECTION: forcing a failure. [ 2299.549666] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.550686] CPU: 0 PID: 13683 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2299.551268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.551961] Call Trace: [ 2299.552201] dump_stack+0x107/0x167 [ 2299.552519] should_fail.cold+0x5/0xa [ 2299.552854] ? create_io_worker+0xe8/0x620 [ 2299.553223] should_failslab+0x5/0x20 [ 2299.553533] kmem_cache_alloc_node_trace+0x59/0x340 [ 2299.553943] create_io_worker+0xe8/0x620 [ 2299.554279] io_wqe_enqueue+0x69e/0xbe0 [ 2299.554606] ? create_worker_cb+0x260/0x260 [ 2299.554958] ? io_wq_work_match_all+0x10/0x10 [ 2299.555270] FAULT_INJECTION: forcing a failure. [ 2299.555270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2299.555330] ? io_prep_async_work+0x340/0x550 [ 2299.557413] io_queue_async_work+0x26b/0x4f0 [ 2299.557772] __io_queue_sqe+0x5cc/0x9d0 [ 2299.558100] ? io_issue_sqe+0x7700/0x7700 [ 2299.558441] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2299.558825] io_submit_sqes+0x4461/0x85c0 [ 2299.559176] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2299.559578] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2299.559973] ? lock_downgrade+0x6d0/0x6d0 [ 2299.560309] ? find_held_lock+0x2c/0x110 [ 2299.560643] ? io_submit_sqes+0x85c0/0x85c0 [ 2299.560999] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.561394] ? wait_for_completion_io+0x270/0x270 [ 2299.561790] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.562164] ? vfs_write+0x354/0xa70 [ 2299.562468] ? fput_many+0x2f/0x1a0 [ 2299.562765] ? ksys_write+0x1a9/0x260 [ 2299.563076] ? __ia32_sys_read+0xb0/0xb0 [ 2299.563411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.563836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.564254] do_syscall_64+0x33/0x40 [ 2299.564557] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2299.564969] RIP: 0033:0x7f705a641b19 [ 2299.565276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.566753] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2299.567367] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2299.567944] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2299.568518] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.569096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2299.569680] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2299.570279] CPU: 1 PID: 13688 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2299.571303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.572519] Call Trace: [ 2299.572920] dump_stack+0x107/0x167 [ 2299.573470] should_fail.cold+0x5/0xa [ 2299.574042] __alloc_pages_nodemask+0x182/0x600 [ 2299.574734] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2299.575622] ? lock_downgrade+0x6d0/0x6d0 [ 2299.576241] ? lock_acquire+0x197/0x470 [ 2299.576840] alloc_pages_vma+0xbb/0x410 [ 2299.577446] shmem_alloc_page+0x10f/0x1e0 [ 2299.578046] ? shmem_init_inode+0x20/0x20 [ 2299.578685] ? percpu_counter_add_batch+0x8b/0x140 [ 2299.579417] ? __vm_enough_memory+0x184/0x360 [ 2299.580080] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2299.580893] ? shmem_unuse_inode+0xf60/0xf60 [ 2299.581554] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2299.582318] shmem_write_begin+0xf7/0x1d0 [ 2299.582937] generic_perform_write+0x20a/0x4f0 [ 2299.583631] ? page_cache_prev_miss+0x310/0x310 [ 2299.584308] ? evict_inodes+0x420/0x420 [ 2299.584892] ? generic_write_checks+0x2ad/0x390 [ 2299.585577] __generic_file_write_iter+0x39d/0x5d0 [ 2299.586296] generic_file_write_iter+0xdb/0x230 [ 2299.586965] ? iov_iter_init+0x3c/0x130 [ 2299.587552] new_sync_write+0x42c/0x660 [ 2299.588133] ? new_sync_read+0x6f0/0x6f0 [ 2299.588724] ? __x64_sys_pwrite64+0x201/0x260 [ 2299.589383] ? lock_release+0x680/0x680 [ 2299.589962] ? selinux_file_permission+0x92/0x520 [ 2299.590680] vfs_write+0x747/0xa70 [ 2299.591208] __x64_sys_pwrite64+0x201/0x260 [ 2299.591838] ? ksys_pwrite64+0x1b0/0x1b0 [ 2299.592437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.593208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.593967] do_syscall_64+0x33/0x40 [ 2299.594511] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2299.595255] RIP: 0033:0x7f643d425ab7 [ 2299.595796] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2299.598444] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2299.599547] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2299.600573] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2299.601610] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2299.602639] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2299.603671] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2299.619485] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2299.620165] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2299.620740] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2299.630160] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2299.632189] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2299.633358] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2299.634413] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2299.663769] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:19 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 27) 09:09:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', &(0x7f0000000100)=[&(0x7f0000000080)='/dev/snd/timer\x00', &(0x7f00000000c0)='/dev/snd/timer\x00'], &(0x7f0000000340)=[&(0x7f0000000140)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='*\\-\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='/dev/snd/timer\x00', &(0x7f0000000300)='/dev/snd/timer\x00'], 0x1000) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) openat(r2, &(0x7f0000000380)='./file2\x00', 0x80, 0x38) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:09:19 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xbc03, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:19 executing program 2: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00') socket$inet6_udp(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)="afef0f8e2900672b7d9195d3ec1e64d68f5a9e2f9f53259f3617544c627f5c9c320af866373683b292703eb5e2c6962ecbd738c5e7dfc8c162a0c1b1b38e91e69c3d9bf4f40bb574b57eb59650da9fe5191ba8ee32020240ba407c49153aa64378a2cb1d533b3fdcc8b4f94a7f1162e346321bb9f2f6a180ffcbe345ab67a926625635c15c9dd95c67dd4827de31ae156eb0c690459c5a355dc93f29371ab992b4c0de413d4f", 0xa6}, {&(0x7f0000000100)="29fb9605bee8eb3dde63c9bb19bb2337183e7e248026b13207dc814284dddd71e7ac3595302c57469a30c729acde4e02551e99074e5b9b802de08c5f05a4ecbd8ce735bac431d5385c3d09bffa4b94509ca2383e468b43080265e3c70bb4a15715f7561512730c7da7e24c1a1590acfca6af14dba1003d0a5719757051209a6e2c500a00691e3796720caba5909f5e510aa92a2aa5210283ee1e6ae40555d7227c426b4b9aba50242f65eaad938abeb47a2eb3065e66f659c126361b253d92994f7c381be022d65eb92af94312eaaa5f3b102f05412ad691d47063b5623c1f8e919007cabf2f8a3dea3ccf68", 0xec}, {&(0x7f0000000200)="931485f01fa25a48fab875cce0990cab6811b890516d8156bb1eeabb3e2b97877a4deb275dac4fd753a9bcd5e69be2eb513a48ee4b1c3197876d4c675696023578a0419a668174f006e2a89a7fd5bcb1682b774addf55412c582cf949aac0775d15ebb5395409e59c8d00cf23fb9066c69d7da0a0e2f8ed9c3e20e782d14dc361a35a80ab9fd240d1a6f5689198e8644441a5abc03a58c4c38cc9b64cbbd00265307de3a2c66618e5ffdb4dc065ff2", 0xaf}, {&(0x7f00000002c0)="57c65dbe212997c22097369c72b74d8fbc07eaec406a4034be8feb15be084f494e1ad16b34f650f7f1c58a41c473a9ed9cdfb8777d55e1571f612fc6c47c1b9ef0f2f59b70f5adca9957427d249ebf4f4244965ba5ccc7d8df31db1ea6952d49aad5cbbf887463a3a7a8cfe3dac6ece55acecbf7b1faf8873b3df77e075f3b74976b39c09096096f63aecc881ce2b6347ff356f44394", 0x96}, {&(0x7f0000000380)="a90430f36912c1c71fcb1596e2a0cc73ee36da0a1a7aa754ae65968808d2a3c30ce3e5bcf49fccf4c0127d2cdb372c", 0x2f}], 0x5) shmget(0x1, 0x1000, 0x40, &(0x7f0000ff5000/0x1000)=nil) 09:09:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) 09:09:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) 09:09:19 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1a00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) [ 2312.293557] FAULT_INJECTION: forcing a failure. [ 2312.293557] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.294843] CPU: 0 PID: 13706 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2312.295459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.296195] Call Trace: [ 2312.296438] dump_stack+0x107/0x167 [ 2312.296762] should_fail.cold+0x5/0xa [ 2312.297103] ? create_object.isra.0+0x3a/0xa20 [ 2312.297521] should_failslab+0x5/0x20 [ 2312.297864] kmem_cache_alloc+0x5b/0x310 [ 2312.298225] create_object.isra.0+0x3a/0xa20 [ 2312.298623] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2312.299070] kmem_cache_alloc_bulk+0x168/0x320 [ 2312.299490] io_submit_sqes+0x6f76/0x85c0 [ 2312.299876] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2312.300320] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2312.300750] ? lock_downgrade+0x6d0/0x6d0 [ 2312.301119] ? find_held_lock+0x2c/0x110 [ 2312.301499] ? io_submit_sqes+0x85c0/0x85c0 [ 2312.301899] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2312.302333] ? wait_for_completion_io+0x270/0x270 [ 2312.302767] ? rcu_read_lock_any_held+0x75/0xa0 [ 2312.303195] ? vfs_write+0x354/0xa70 [ 2312.303547] ? fput_many+0x2f/0x1a0 [ 2312.303879] ? ksys_write+0x1a9/0x260 [ 2312.304228] ? __ia32_sys_read+0xb0/0xb0 [ 2312.304600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.305072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.305542] do_syscall_64+0x33/0x40 [ 2312.305875] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.306333] RIP: 0033:0x7fa6ace83b19 [ 2312.306663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.308304] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2312.308973] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2312.309618] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2312.310242] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.310869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.311496] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2312.314996] FAULT_INJECTION: forcing a failure. [ 2312.314996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2312.316166] CPU: 0 PID: 13712 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2312.316786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.317535] Call Trace: [ 2312.317765] dump_stack+0x107/0x167 [ 2312.318090] should_fail.cold+0x5/0xa [ 2312.318438] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2312.318921] ? shmem_write_begin+0xf7/0x1d0 [ 2312.319307] ? shmem_write_begin+0x100/0x1d0 [ 2312.319711] generic_perform_write+0x279/0x4f0 [ 2312.320119] ? page_cache_prev_miss+0x310/0x310 [ 2312.320533] ? evict_inodes+0x420/0x420 [ 2312.320893] ? generic_write_checks+0x2ad/0x390 [ 2312.321312] __generic_file_write_iter+0x39d/0x5d0 [ 2312.321762] generic_file_write_iter+0xdb/0x230 [ 2312.322171] ? iov_iter_init+0x3c/0x130 [ 2312.322600] new_sync_write+0x42c/0x660 [ 2312.323057] ? new_sync_read+0x6f0/0x6f0 [ 2312.323425] ? __x64_sys_pwrite64+0x201/0x260 [ 2312.323835] ? lock_release+0x680/0x680 [ 2312.324189] ? selinux_file_permission+0x92/0x520 [ 2312.324622] vfs_write+0x747/0xa70 [ 2312.324948] __x64_sys_pwrite64+0x201/0x260 [ 2312.325336] ? ksys_pwrite64+0x1b0/0x1b0 [ 2312.325718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.326194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.326662] do_syscall_64+0x33/0x40 [ 2312.326996] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.327462] RIP: 0033:0x7f643d425ab7 [ 2312.327800] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2312.329429] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2312.330105] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2312.330730] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2312.331375] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2312.332005] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2312.332650] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2312.341327] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2312.342022] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2312.342691] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2312.347017] FAULT_INJECTION: forcing a failure. [ 2312.347017] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.348312] CPU: 0 PID: 13717 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2312.348946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.349696] Call Trace: [ 2312.349951] dump_stack+0x107/0x167 [ 2312.350297] should_fail.cold+0x5/0xa [ 2312.350648] ? create_object.isra.0+0x3a/0xa20 [ 2312.351059] should_failslab+0x5/0x20 [ 2312.351405] kmem_cache_alloc+0x5b/0x310 [ 2312.351769] ? lock_acquire+0x197/0x470 [ 2312.352130] create_object.isra.0+0x3a/0xa20 [ 2312.352528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2312.352984] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2312.353451] create_io_worker+0xe8/0x620 [ 2312.353819] io_wqe_enqueue+0x69e/0xbe0 [ 2312.354177] ? create_worker_cb+0x260/0x260 [ 2312.354568] ? io_wq_work_match_all+0x10/0x10 [ 2312.354966] ? io_prep_async_work+0x340/0x550 [ 2312.355371] io_queue_async_work+0x26b/0x4f0 [ 2312.355762] __io_queue_sqe+0x5cc/0x9d0 [ 2312.356120] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2312.356601] ? trace_hardirqs_on+0x5b/0x180 [ 2312.356993] ? io_issue_sqe+0x7700/0x7700 [ 2312.357387] io_submit_sqes+0x4461/0x85c0 [ 2312.357773] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2312.358225] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2312.358650] ? lock_downgrade+0x6d0/0x6d0 [ 2312.359025] ? find_held_lock+0x2c/0x110 [ 2312.359390] ? io_submit_sqes+0x85c0/0x85c0 [ 2312.359775] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2312.360209] ? wait_for_completion_io+0x270/0x270 [ 2312.360635] ? rcu_read_lock_any_held+0x75/0xa0 [ 2312.361047] ? vfs_write+0x354/0xa70 [ 2312.361380] ? fput_many+0x2f/0x1a0 [ 2312.361698] ? ksys_write+0x1a9/0x260 [ 2312.362045] ? __ia32_sys_read+0xb0/0xb0 [ 2312.362405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.362870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.363324] do_syscall_64+0x33/0x40 [ 2312.363651] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.364103] RIP: 0033:0x7f705a641b19 [ 2312.364428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.366004] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2312.366656] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2312.367264] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2312.367663] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2312.367885] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.367902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.370203] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:09:19 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ff5000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 2312.404775] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2312.418440] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setsig(r0, 0xa, 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2312.426781] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2312.427518] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2312.428166] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:09:19 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xbc86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2312.461102] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 09:09:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 09:09:19 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1b00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:19 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 28) [ 2312.567215] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2312.572961] FAULT_INJECTION: forcing a failure. [ 2312.572961] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.574821] CPU: 1 PID: 13741 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2312.575834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.577034] Call Trace: [ 2312.577449] dump_stack+0x107/0x167 [ 2312.577984] should_fail.cold+0x5/0xa [ 2312.578569] should_failslab+0x5/0x20 [ 2312.579109] kmem_cache_alloc_bulk+0x4b/0x320 [ 2312.579764] io_submit_sqes+0x6f76/0x85c0 [ 2312.580399] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2312.581103] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2312.581806] ? lock_downgrade+0x6d0/0x6d0 [ 2312.582388] ? find_held_lock+0x2c/0x110 [ 2312.582990] ? io_submit_sqes+0x85c0/0x85c0 [ 2312.583605] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2312.584320] ? wait_for_completion_io+0x270/0x270 [ 2312.585004] ? rcu_read_lock_any_held+0x75/0xa0 [ 2312.585680] ? vfs_write+0x354/0xa70 [ 2312.586230] ? fput_many+0x2f/0x1a0 [ 2312.586764] ? ksys_write+0x1a9/0x260 [ 2312.587296] ? __ia32_sys_read+0xb0/0xb0 [ 2312.587900] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.588637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.589410] do_syscall_64+0x33/0x40 [ 2312.589939] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.590693] RIP: 0033:0x7fa6ace83b19 [ 2312.591227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2312.593919] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2312.595018] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2312.596062] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2312.597110] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.598170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.599191] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2312.630984] FAULT_INJECTION: forcing a failure. [ 2312.630984] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2312.632031] CPU: 0 PID: 13747 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2312.632591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2312.633255] Call Trace: [ 2312.633485] dump_stack+0x107/0x167 [ 2312.633788] should_fail.cold+0x5/0xa [ 2312.634106] __alloc_pages_nodemask+0x182/0x600 [ 2312.634485] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2312.634977] ? lock_downgrade+0x6d0/0x6d0 [ 2312.635316] ? lock_acquire+0x197/0x470 [ 2312.635659] alloc_pages_vma+0xbb/0x410 [ 2312.635985] shmem_alloc_page+0x10f/0x1e0 [ 2312.636335] ? shmem_init_inode+0x20/0x20 [ 2312.636694] ? percpu_counter_add_batch+0x8b/0x140 [ 2312.637101] ? __vm_enough_memory+0x184/0x360 [ 2312.637483] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2312.637919] ? shmem_unuse_inode+0xf60/0xf60 [ 2312.638289] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2312.638716] shmem_write_begin+0xf7/0x1d0 [ 2312.639057] generic_perform_write+0x20a/0x4f0 [ 2312.639447] ? page_cache_prev_miss+0x310/0x310 [ 2312.639832] ? evict_inodes+0x420/0x420 [ 2312.640170] ? generic_write_checks+0x2ad/0x390 [ 2312.640554] __generic_file_write_iter+0x39d/0x5d0 [ 2312.640963] generic_file_write_iter+0xdb/0x230 [ 2312.641352] ? iov_iter_init+0x3c/0x130 [ 2312.641685] new_sync_write+0x42c/0x660 [ 2312.642019] ? new_sync_read+0x6f0/0x6f0 [ 2312.642362] ? __x64_sys_pwrite64+0x201/0x260 [ 2312.642727] ? lock_release+0x680/0x680 [ 2312.643058] ? selinux_file_permission+0x92/0x520 [ 2312.643466] vfs_write+0x747/0xa70 [ 2312.643761] __x64_sys_pwrite64+0x201/0x260 [ 2312.644114] ? ksys_pwrite64+0x1b0/0x1b0 [ 2312.644447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2312.644876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2312.645300] do_syscall_64+0x33/0x40 [ 2312.645610] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2312.646030] RIP: 0033:0x7f643d425ab7 [ 2312.646334] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2312.647826] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2312.648453] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2312.649032] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2312.649632] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2312.650213] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2312.650802] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2312.655466] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2312.676670] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2312.677873] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2312.678957] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2312.689820] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 09:09:31 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 29) 09:09:31 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xbd03, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 09:09:31 executing program 2: shmget(0x3, 0x3000, 0x400, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/217) 09:09:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 09:09:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1c00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2324.735826] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:09:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x111200) io_uring_enter(r0, 0x14d9, 0xed5c, 0x2, &(0x7f0000000080)={[0x1ff]}, 0x8) dup3(0xffffffffffffffff, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0xffff, 0x2, 0x5}}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2324.749655] FAULT_INJECTION: forcing a failure. [ 2324.749655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.750658] CPU: 0 PID: 13760 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2324.751204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.751854] Call Trace: [ 2324.752070] dump_stack+0x107/0x167 [ 2324.752357] should_fail.cold+0x5/0xa [ 2324.752663] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2324.753085] ? shmem_write_begin+0xf7/0x1d0 [ 2324.753441] ? shmem_write_begin+0x100/0x1d0 [ 2324.753801] generic_perform_write+0x279/0x4f0 [ 2324.754175] ? page_cache_prev_miss+0x310/0x310 [ 2324.754552] ? evict_inodes+0x420/0x420 [ 2324.754879] ? generic_write_checks+0x2ad/0x390 [ 2324.755257] __generic_file_write_iter+0x39d/0x5d0 [ 2324.755655] generic_file_write_iter+0xdb/0x230 [ 2324.756027] ? iov_iter_init+0x3c/0x130 [ 2324.756355] new_sync_write+0x42c/0x660 [ 2324.756676] ? new_sync_read+0x6f0/0x6f0 [ 2324.757011] ? __x64_sys_pwrite64+0x201/0x260 [ 2324.757377] ? lock_release+0x680/0x680 [ 2324.757708] ? selinux_file_permission+0x92/0x520 [ 2324.758109] vfs_write+0x747/0xa70 [ 2324.758405] __x64_sys_pwrite64+0x201/0x260 [ 2324.758755] ? ksys_pwrite64+0x1b0/0x1b0 [ 2324.759087] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.759526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.759948] do_syscall_64+0x33/0x40 [ 2324.760248] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2324.760663] RIP: 0033:0x7f643d425ab7 [ 2324.760967] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2324.762450] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2324.763062] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2324.763639] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2324.764209] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2324.764782] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2324.765362] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2324.782734] FAULT_INJECTION: forcing a failure. [ 2324.782734] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.783725] CPU: 0 PID: 13765 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2324.784282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.784946] Call Trace: [ 2324.785165] dump_stack+0x107/0x167 [ 2324.785468] should_fail.cold+0x5/0xa [ 2324.785787] ? create_io_worker+0xe8/0x620 [ 2324.786136] should_failslab+0x5/0x20 [ 2324.786445] kmem_cache_alloc_node_trace+0x59/0x340 [ 2324.786853] create_io_worker+0xe8/0x620 [ 2324.787183] io_wqe_enqueue+0x69e/0xbe0 [ 2324.787512] ? create_worker_cb+0x260/0x260 [ 2324.787863] ? io_wq_work_match_all+0x10/0x10 [ 2324.788224] ? io_prep_async_work+0x340/0x550 [ 2324.788589] io_queue_async_work+0x26b/0x4f0 [ 2324.788946] __io_queue_sqe+0x5cc/0x9d0 [ 2324.789273] ? io_issue_sqe+0x7700/0x7700 [ 2324.789616] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2324.790000] io_submit_sqes+0x4461/0x85c0 [ 2324.790356] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2324.790760] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2324.791155] ? lock_downgrade+0x6d0/0x6d0 [ 2324.791491] ? find_held_lock+0x2c/0x110 [ 2324.791824] ? io_submit_sqes+0x85c0/0x85c0 [ 2324.792176] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2324.792569] ? wait_for_completion_io+0x270/0x270 [ 2324.792959] ? rcu_read_lock_any_held+0x75/0xa0 [ 2324.793336] ? vfs_write+0x354/0xa70 [ 2324.793643] ? fput_many+0x2f/0x1a0 [ 2324.793944] ? ksys_write+0x1a9/0x260 [ 2324.794250] ? __ia32_sys_read+0xb0/0xb0 [ 2324.794578] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.795001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.795422] do_syscall_64+0x33/0x40 [ 2324.795722] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2324.796141] RIP: 0033:0x7f705a641b19 [ 2324.796441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.797924] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2324.798538] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2324.799116] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2324.799691] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.800262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.800833] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2324.806391] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2324.807373] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2324.807965] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:09:32 executing program 2: shmget(0x3, 0x4000, 0x0, &(0x7f0000ff3000/0x4000)=nil) [ 2324.824762] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2324.831265] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2324.832423] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2324.833467] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2324.840357] FAULT_INJECTION: forcing a failure. [ 2324.840357] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.841323] CPU: 0 PID: 13768 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2324.841886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.842554] Call Trace: [ 2324.842771] dump_stack+0x107/0x167 [ 2324.843069] should_fail.cold+0x5/0xa [ 2324.843379] ? create_object.isra.0+0x3a/0xa20 [ 2324.843749] should_failslab+0x5/0x20 [ 2324.844059] kmem_cache_alloc+0x5b/0x310 [ 2324.844388] ? mark_held_locks+0x9e/0xe0 [ 2324.844716] create_object.isra.0+0x3a/0xa20 [ 2324.845073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2324.845483] kmem_cache_alloc_bulk+0x168/0x320 [ 2324.845863] io_submit_sqes+0x6f76/0x85c0 [ 2324.846213] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2324.846613] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2324.846998] ? lock_downgrade+0x6d0/0x6d0 [ 2324.847332] ? find_held_lock+0x2c/0x110 [ 2324.847669] ? io_submit_sqes+0x85c0/0x85c0 [ 2324.848028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2324.848426] ? wait_for_completion_io+0x270/0x270 [ 2324.848821] ? rcu_read_lock_any_held+0x75/0xa0 [ 2324.849210] ? vfs_write+0x354/0xa70 [ 2324.849519] ? fput_many+0x2f/0x1a0 [ 2324.849817] ? ksys_write+0x1a9/0x260 [ 2324.850131] ? __ia32_sys_read+0xb0/0xb0 [ 2324.850465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2324.850889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2324.851319] do_syscall_64+0x33/0x40 [ 2324.851625] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2324.852037] RIP: 0033:0x7fa6ace83b19 09:09:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1d00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2324.852344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2324.854079] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2324.854835] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2324.855539] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2324.856241] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2324.856946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2324.857660] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:09:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r6, 0x38, 0x0, 0x13, 0x0, 0x0, {0x0, r7}}, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r9 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) close(r9) sendfile(r9, r8, &(0x7f0000000000)=0x4, 0x0) dup3(0xffffffffffffffff, r8, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2324.887754] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2324.890772] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:32 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 30) 09:09:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 09:09:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1e00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:32 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xbd86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2324.987676] FAULT_INJECTION: forcing a failure. [ 2324.987676] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.988921] CPU: 0 PID: 13793 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2324.989621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2324.990459] Call Trace: [ 2324.990737] dump_stack+0x107/0x167 [ 2324.991106] should_fail.cold+0x5/0xa [ 2324.991497] ? create_io_worker+0xe8/0x620 [ 2324.991938] should_failslab+0x5/0x20 [ 2324.992328] kmem_cache_alloc_node_trace+0x59/0x340 [ 2324.992839] create_io_worker+0xe8/0x620 [ 2324.993256] io_wqe_enqueue+0x69e/0xbe0 [ 2324.993679] ? create_worker_cb+0x260/0x260 [ 2324.994110] ? io_wq_work_match_all+0x10/0x10 [ 2324.994562] ? io_prep_async_work+0x340/0x550 [ 2324.995018] io_queue_async_work+0x26b/0x4f0 [ 2324.995463] __io_queue_sqe+0x5cc/0x9d0 [ 2324.995862] ? io_issue_sqe+0x7700/0x7700 [ 2324.996295] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2324.996776] io_submit_sqes+0x4461/0x85c0 [ 2324.997218] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2324.997738] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2324.998223] ? lock_downgrade+0x6d0/0x6d0 [ 2324.998639] ? find_held_lock+0x2c/0x110 [ 2324.999056] ? io_submit_sqes+0x85c0/0x85c0 [ 2324.999498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2324.999985] ? wait_for_completion_io+0x270/0x270 [ 2325.000467] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.000944] ? vfs_write+0x354/0xa70 [ 2325.001328] ? fput_many+0x2f/0x1a0 [ 2325.001708] ? ksys_write+0x1a9/0x260 [ 2325.002102] ? __ia32_sys_read+0xb0/0xb0 [ 2325.002514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.003041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.003563] do_syscall_64+0x33/0x40 [ 2325.003939] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2325.004458] RIP: 0033:0x7f705a641b19 [ 2325.004828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.006670] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2325.007432] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2325.008152] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2325.008865] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.009579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.010287] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2325.016865] FAULT_INJECTION: forcing a failure. [ 2325.016865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2325.017986] CPU: 0 PID: 13797 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2325.018668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.019474] Call Trace: [ 2325.019742] dump_stack+0x107/0x167 [ 2325.020101] should_fail.cold+0x5/0xa [ 2325.020488] __alloc_pages_nodemask+0x182/0x600 [ 2325.020953] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2325.021555] ? lock_downgrade+0x6d0/0x6d0 [ 2325.021971] ? lock_acquire+0x197/0x470 [ 2325.022379] alloc_pages_vma+0xbb/0x410 [ 2325.022776] shmem_alloc_page+0x10f/0x1e0 [ 2325.023192] ? shmem_init_inode+0x20/0x20 [ 2325.023619] ? percpu_counter_add_batch+0x8b/0x140 [ 2325.024109] ? __vm_enough_memory+0x184/0x360 [ 2325.024559] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2325.025102] ? shmem_unuse_inode+0xf60/0xf60 [ 2325.025548] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2325.026062] shmem_write_begin+0xf7/0x1d0 [ 2325.026483] generic_perform_write+0x20a/0x4f0 [ 2325.026943] ? page_cache_prev_miss+0x310/0x310 [ 2325.027403] ? evict_inodes+0x420/0x420 [ 2325.027807] ? generic_write_checks+0x2ad/0x390 [ 2325.028273] __generic_file_write_iter+0x39d/0x5d0 [ 2325.028764] generic_file_write_iter+0xdb/0x230 [ 2325.029225] ? iov_iter_init+0x3c/0x130 [ 2325.029628] new_sync_write+0x42c/0x660 [ 2325.030021] ? new_sync_read+0x6f0/0x6f0 [ 2325.030428] ? __x64_sys_pwrite64+0x201/0x260 [ 2325.030874] ? lock_release+0x680/0x680 [ 2325.031271] ? selinux_file_permission+0x92/0x520 [ 2325.031764] vfs_write+0x747/0xa70 [ 2325.032125] __x64_sys_pwrite64+0x201/0x260 [ 2325.032552] ? ksys_pwrite64+0x1b0/0x1b0 [ 2325.032962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.033481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.033997] do_syscall_64+0x33/0x40 [ 2325.034363] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2325.034869] RIP: 0033:0x7f643d425ab7 [ 2325.035237] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2325.037027] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2325.037779] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2325.038480] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2325.039175] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2325.039873] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2325.040562] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:09:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1f00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) [ 2325.053421] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2325.054742] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2325.055871] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2325.070633] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2325.100022] FAULT_INJECTION: forcing a failure. [ 2325.100022] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.101290] CPU: 0 PID: 13802 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2325.101993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2325.102815] Call Trace: [ 2325.103083] dump_stack+0x107/0x167 [ 2325.103451] should_fail.cold+0x5/0xa [ 2325.103833] ? create_object.isra.0+0x3a/0xa20 [ 2325.104310] should_failslab+0x5/0x20 [ 2325.104704] kmem_cache_alloc+0x5b/0x310 [ 2325.105119] ? mark_held_locks+0x9e/0xe0 [ 2325.105543] create_object.isra.0+0x3a/0xa20 [ 2325.105984] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2325.106509] kmem_cache_alloc_bulk+0x168/0x320 [ 2325.106973] io_submit_sqes+0x6f76/0x85c0 [ 2325.107424] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2325.107930] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2325.108412] ? lock_downgrade+0x6d0/0x6d0 [ 2325.108824] ? find_held_lock+0x2c/0x110 [ 2325.109238] ? io_submit_sqes+0x85c0/0x85c0 [ 2325.109693] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2325.110181] ? wait_for_completion_io+0x270/0x270 [ 2325.110667] ? rcu_read_lock_any_held+0x75/0xa0 [ 2325.111133] ? vfs_write+0x354/0xa70 [ 2325.111505] ? fput_many+0x2f/0x1a0 [ 2325.111876] ? ksys_write+0x1a9/0x260 [ 2325.112267] ? __ia32_sys_read+0xb0/0xb0 [ 2325.112682] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2325.113206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2325.113746] do_syscall_64+0x33/0x40 [ 2325.114128] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2325.114640] RIP: 0033:0x7fa6ace83b19 [ 2325.115020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2325.116805] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2325.117551] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2325.118258] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2325.118955] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2325.119657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2325.120348] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2325.128469] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2325.138694] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2325.173871] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2325.174784] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2325.175520] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2325.193816] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:44 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0xf000) 09:09:44 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xc0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:09:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 09:09:44 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xbe86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 09:09:44 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 31) 09:09:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) [ 2337.006869] FAULT_INJECTION: forcing a failure. [ 2337.006869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2337.008627] CPU: 1 PID: 13830 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2337.009603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2337.010779] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2337.010787] Call Trace: [ 2337.010818] dump_stack+0x107/0x167 [ 2337.012979] should_fail.cold+0x5/0xa [ 2337.013525] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2337.014290] ? shmem_write_begin+0xf7/0x1d0 [ 2337.014899] ? shmem_write_begin+0x100/0x1d0 [ 2337.015540] generic_perform_write+0x279/0x4f0 [ 2337.016204] ? page_cache_prev_miss+0x310/0x310 [ 2337.016862] ? evict_inodes+0x420/0x420 [ 2337.017438] ? generic_write_checks+0x2ad/0x390 [ 2337.018114] __generic_file_write_iter+0x39d/0x5d0 [ 2337.018832] generic_file_write_iter+0xdb/0x230 [ 2337.019485] ? iov_iter_init+0x3c/0x130 [ 2337.020059] new_sync_write+0x42c/0x660 [ 2337.020627] ? new_sync_read+0x6f0/0x6f0 [ 2337.021214] ? __x64_sys_pwrite64+0x201/0x260 [ 2337.021861] ? lock_release+0x680/0x680 [ 2337.022434] ? selinux_file_permission+0x92/0x520 [ 2337.023129] vfs_write+0x747/0xa70 [ 2337.023655] __x64_sys_pwrite64+0x201/0x260 [ 2337.024270] ? ksys_pwrite64+0x1b0/0x1b0 [ 2337.024864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2337.025600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2337.026355] do_syscall_64+0x33/0x40 [ 2337.026883] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2337.027614] RIP: 0033:0x7f643d425ab7 [ 2337.028149] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2337.030902] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2337.032125] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2337.033267] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2337.034400] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2337.035520] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2337.036639] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2337.037980] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2337.039224] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2337.040337] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2337.049845] FAULT_INJECTION: forcing a failure. [ 2337.049845] name failslab, interval 1, probability 0, space 0, times 0 [ 2337.052372] CPU: 1 PID: 13822 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2337.053480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2337.054793] Call Trace: [ 2337.055226] dump_stack+0x107/0x167 [ 2337.055820] should_fail.cold+0x5/0xa [ 2337.056430] ? create_io_worker+0xe8/0x620 [ 2337.057105] should_failslab+0x5/0x20 [ 2337.057721] kmem_cache_alloc_node_trace+0x59/0x340 [ 2337.058510] create_io_worker+0xe8/0x620 [ 2337.059159] io_wqe_enqueue+0x69e/0xbe0 [ 2337.059790] ? create_worker_cb+0x260/0x260 [ 2337.060476] ? io_prep_async_work+0x340/0x550 [ 2337.061189] io_queue_async_work+0x26b/0x4f0 [ 2337.061900] __io_queue_sqe+0x5cc/0x9d0 [ 2337.062537] ? io_issue_sqe+0x7700/0x7700 [ 2337.063198] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2337.063949] io_submit_sqes+0x4461/0x85c0 [ 2337.064634] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2337.065417] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2337.066189] ? lock_downgrade+0x6d0/0x6d0 [ 2337.066840] ? find_held_lock+0x2c/0x110 [ 2337.067486] ? io_submit_sqes+0x85c0/0x85c0 [ 2337.068177] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2337.068942] ? wait_for_completion_io+0x270/0x270 [ 2337.069714] ? rcu_read_lock_any_held+0x75/0xa0 [ 2337.070446] ? vfs_write+0x354/0xa70 [ 2337.071033] ? fput_many+0x2f/0x1a0 [ 2337.071609] ? ksys_write+0x1a9/0x260 [ 2337.072210] ? __ia32_sys_read+0xb0/0xb0 [ 2337.072857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2337.073705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2337.074527] do_syscall_64+0x33/0x40 [ 2337.075112] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2337.075910] RIP: 0033:0x7fa6ace83b19 [ 2337.076494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2337.079341] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2337.080530] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2337.081642] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2337.082769] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2337.083881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2337.084990] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:09:44 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff5000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 2337.102973] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2337.104357] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2337.105482] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2337.129594] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2337.152923] FAULT_INJECTION: forcing a failure. [ 2337.152923] name failslab, interval 1, probability 0, space 0, times 0 [ 2337.154852] CPU: 0 PID: 13832 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2337.155909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2337.157168] Call Trace: [ 2337.157582] dump_stack+0x107/0x167 [ 2337.158162] should_fail.cold+0x5/0xa [ 2337.158761] ? create_io_worker+0xe8/0x620 [ 2337.159407] should_failslab+0x5/0x20 [ 2337.159993] kmem_cache_alloc_node_trace+0x59/0x340 [ 2337.160765] create_io_worker+0xe8/0x620 [ 2337.161385] io_wqe_enqueue+0x69e/0xbe0 [ 2337.162003] ? create_worker_cb+0x260/0x260 [ 2337.162667] ? io_wq_work_match_all+0x10/0x10 [ 2337.163353] ? io_prep_async_work+0x340/0x550 [ 2337.164042] io_queue_async_work+0x26b/0x4f0 [ 2337.164717] __io_queue_sqe+0x5cc/0x9d0 [ 2337.165334] ? io_issue_sqe+0x7700/0x7700 [ 2337.165988] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2337.166712] io_submit_sqes+0x4461/0x85c0 [ 2337.167376] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2337.168138] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2337.168875] ? lock_downgrade+0x6d0/0x6d0 [ 2337.169505] ? find_held_lock+0x2c/0x110 [ 2337.170140] ? io_submit_sqes+0x85c0/0x85c0 [ 2337.170809] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2337.171547] ? wait_for_completion_io+0x270/0x270 [ 2337.172283] ? rcu_read_lock_any_held+0x75/0xa0 [ 2337.172996] ? vfs_write+0x354/0xa70 [ 2337.173568] ? fput_many+0x2f/0x1a0 [ 2337.174131] ? ksys_write+0x1a9/0x260 [ 2337.174716] ? __ia32_sys_read+0xb0/0xb0 [ 2337.175344] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2337.176146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2337.176941] do_syscall_64+0x33/0x40 [ 2337.177510] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2337.178299] RIP: 0033:0x7f705a641b19 [ 2337.178862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2337.181649] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2337.182829] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2337.183919] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2337.185015] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2337.186111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2337.187203] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2337.191345] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2337.195517] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2010, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:44 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43f4, &(0x7f0000000080)={0x0, 0x8d4, 0x4, 0x2, 0x1e7, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r3, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r6 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) close(r6) sendfile(r6, r5, &(0x7f0000000000)=0x4, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r4, 0x3ff, {0x0, r1}, 0xa3b, 0x4, 0x1, {0x0, 0x0, r6}}, 0x8) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file2\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) 09:09:44 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x1, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) 09:09:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 09:09:44 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xbf86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:44 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 32) 09:09:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2100, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2337.371444] FAULT_INJECTION: forcing a failure. [ 2337.371444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2337.373282] CPU: 1 PID: 13859 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2337.374270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2337.375462] Call Trace: [ 2337.375849] dump_stack+0x107/0x167 [ 2337.376378] should_fail.cold+0x5/0xa [ 2337.376930] __alloc_pages_nodemask+0x182/0x600 [ 2337.377600] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2337.378462] ? lock_downgrade+0x6d0/0x6d0 [ 2337.379059] ? lock_acquire+0x197/0x470 [ 2337.379643] alloc_pages_vma+0xbb/0x410 [ 2337.380226] shmem_alloc_page+0x10f/0x1e0 [ 2337.380824] ? shmem_init_inode+0x20/0x20 [ 2337.381446] ? percpu_counter_add_batch+0x8b/0x140 [ 2337.382161] ? __vm_enough_memory+0x184/0x360 [ 2337.382816] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2337.383596] ? shmem_unuse_inode+0xf60/0xf60 [ 2337.384233] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2337.384988] shmem_write_begin+0xf7/0x1d0 [ 2337.385591] generic_perform_write+0x20a/0x4f0 [ 2337.386268] ? page_cache_prev_miss+0x310/0x310 [ 2337.386939] ? evict_inodes+0x420/0x420 [ 2337.387516] ? generic_write_checks+0x2ad/0x390 [ 2337.388193] __generic_file_write_iter+0x39d/0x5d0 [ 2337.388903] generic_file_write_iter+0xdb/0x230 [ 2337.389564] ? iov_iter_init+0x3c/0x130 [ 2337.390144] new_sync_write+0x42c/0x660 [ 2337.390716] ? new_sync_read+0x6f0/0x6f0 [ 2337.391304] ? __x64_sys_pwrite64+0x201/0x260 [ 2337.391976] ? lock_release+0x680/0x680 [ 2337.392545] ? selinux_file_permission+0x92/0x520 [ 2337.393259] vfs_write+0x747/0xa70 [ 2337.393785] __x64_sys_pwrite64+0x201/0x260 [ 2337.394411] ? ksys_pwrite64+0x1b0/0x1b0 [ 2337.394996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2337.395749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2337.396499] do_syscall_64+0x33/0x40 [ 2337.397036] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2337.397773] RIP: 0033:0x7f643d425ab7 [ 2337.398311] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2337.400924] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2337.402022] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2337.403037] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2337.404056] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2337.405084] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2337.406106] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2337.530208] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2337.531542] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2337.532640] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2337.553785] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2349.783722] FAULT_INJECTION: forcing a failure. [ 2349.783722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2349.785519] CPU: 1 PID: 13875 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2349.786547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2349.787759] Call Trace: [ 2349.788159] dump_stack+0x107/0x167 [ 2349.788695] should_fail.cold+0x5/0xa [ 2349.789271] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2349.790079] ? shmem_write_begin+0xf7/0x1d0 [ 2349.790712] ? shmem_write_begin+0x100/0x1d0 [ 2349.791371] generic_perform_write+0x279/0x4f0 [ 2349.792055] ? page_cache_prev_miss+0x310/0x310 [ 2349.792737] ? evict_inodes+0x420/0x420 [ 2349.793329] ? generic_write_checks+0x2ad/0x390 [ 2349.794034] __generic_file_write_iter+0x39d/0x5d0 [ 2349.794761] generic_file_write_iter+0xdb/0x230 [ 2349.795445] ? iov_iter_init+0x3c/0x130 [ 2349.796032] new_sync_write+0x42c/0x660 [ 2349.796626] ? new_sync_read+0x6f0/0x6f0 [ 2349.797225] ? __x64_sys_pwrite64+0x201/0x260 [ 2349.797901] ? lock_release+0x680/0x680 [ 2349.798486] ? selinux_file_permission+0x92/0x520 [ 2349.799214] vfs_write+0x747/0xa70 [ 2349.799746] __x64_sys_pwrite64+0x201/0x260 [ 2349.800386] ? ksys_pwrite64+0x1b0/0x1b0 [ 2349.800987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2349.801752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2349.802531] do_syscall_64+0x33/0x40 [ 2349.803081] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2349.803833] RIP: 0033:0x7f643d425ab7 [ 2349.804383] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2349.807072] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2349.808191] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2349.809226] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2349.810274] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2349.811321] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2349.812364] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:09:56 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 33) 09:09:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 09:09:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0505405, &(0x7f00000000c0)) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:09:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2200, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:57 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0xa0042, 0x10e) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:09:57 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc086, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 09:09:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) [ 2349.843371] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2349.858788] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2349.860176] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2349.861292] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2349.876956] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2349.878432] FAULT_INJECTION: forcing a failure. [ 2349.878432] name failslab, interval 1, probability 0, space 0, times 0 [ 2349.880392] CPU: 1 PID: 13881 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2349.881424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2349.882656] Call Trace: [ 2349.883062] dump_stack+0x107/0x167 [ 2349.883615] should_fail.cold+0x5/0xa [ 2349.884183] ? create_object.isra.0+0x3a/0xa20 [ 2349.884852] ? create_object.isra.0+0x3a/0xa20 [ 2349.885526] should_failslab+0x5/0x20 [ 2349.886097] kmem_cache_alloc+0x5b/0x310 [ 2349.886698] create_object.isra.0+0x3a/0xa20 [ 2349.887341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2349.888097] kmem_cache_alloc_bulk+0x168/0x320 [ 2349.888772] io_submit_sqes+0x6f76/0x85c0 [ 2349.889411] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2349.890148] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2349.890868] ? io_submit_sqes+0x85c0/0x85c0 [ 2349.891514] ? recalibrate_cpu_khz+0x10/0x10 [ 2349.892163] ? ktime_get+0x158/0x1f0 [ 2349.892719] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2349.893358] ? clockevents_program_event+0x131/0x360 [ 2349.893881] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2349.894107] ? tick_program_event+0xa8/0x140 [ 2349.894128] ? hrtimer_interrupt+0x771/0x9b0 [ 2349.894163] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2349.895356] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2349.895946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2349.895972] do_syscall_64+0x33/0x40 [ 2349.896685] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2349.897360] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2349.897374] RIP: 0033:0x7f705a641b19 [ 2349.897399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2349.904656] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2349.905762] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2349.906820] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2349.907860] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2349.908901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2349.909955] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2349.919472] FAULT_INJECTION: forcing a failure. [ 2349.919472] name failslab, interval 1, probability 0, space 0, times 0 [ 2349.921439] CPU: 1 PID: 13892 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2349.922472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2349.923687] Call Trace: [ 2349.924083] dump_stack+0x107/0x167 [ 2349.924621] should_fail.cold+0x5/0xa [ 2349.925184] ? create_object.isra.0+0x3a/0xa20 [ 2349.925861] should_failslab+0x5/0x20 [ 2349.926424] kmem_cache_alloc+0x5b/0x310 [ 2349.927027] ? lock_acquire+0x197/0x470 [ 2349.927617] create_object.isra.0+0x3a/0xa20 [ 2349.928259] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2349.929005] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2349.929765] create_io_worker+0xe8/0x620 [ 2349.930390] io_wqe_enqueue+0x69e/0xbe0 [ 2349.930974] ? create_worker_cb+0x260/0x260 [ 2349.931626] ? io_prep_async_work+0x340/0x550 [ 2349.932298] io_queue_async_work+0x26b/0x4f0 [ 2349.932974] __io_queue_sqe+0x5cc/0x9d0 [ 2349.933580] ? io_issue_sqe+0x7700/0x7700 [ 2349.934228] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2349.934934] io_submit_sqes+0x4461/0x85c0 [ 2349.935572] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2349.936323] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2349.937039] ? lock_downgrade+0x6d0/0x6d0 [ 2349.937644] ? find_held_lock+0x2c/0x110 [ 2349.938257] ? io_submit_sqes+0x85c0/0x85c0 [ 2349.938910] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2349.939638] ? wait_for_completion_io+0x270/0x270 [ 2349.940358] ? rcu_read_lock_any_held+0x75/0xa0 [ 2349.941038] ? vfs_write+0x354/0xa70 [ 2349.941588] ? fput_many+0x2f/0x1a0 [ 2349.942147] ? ksys_write+0x1a9/0x260 [ 2349.942718] ? __ia32_sys_read+0xb0/0xb0 [ 2349.943319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2349.944085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2349.944854] do_syscall_64+0x33/0x40 [ 2349.945410] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2349.946187] RIP: 0033:0x7fa6ace83b19 [ 2349.946744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2349.949444] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2349.950578] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2349.951612] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2349.952664] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2349.953727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2349.954787] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:09:57 executing program 2: shmget(0x3, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x2000) [ 2349.980825] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:57 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc186, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:09:57 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0xc) creat(&(0x7f0000000040)='./file2\x00', 0x6) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r2}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r2}}, 0x4) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) clone3(&(0x7f00000004c0)={0x200, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340), {0x2e}, &(0x7f0000000380)=""/30, 0x1e, &(0x7f00000003c0)=""/76, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) sendfile(r4, r5, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000080)=""/200) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2350.076940] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2300, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:57 executing program 2: shmget(0x3, 0x3000, 0x200, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmget(0x2, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff5000/0x2000)=nil, 0x4000) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@local, @broadcast, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "940f7c09e52a02d3"}}}}, 0x0) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff9000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 09:09:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) [ 2350.169532] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:09:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x8) [ 2350.201923] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2350.203197] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2350.204272] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:09:57 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 34) [ 2350.249307] FAULT_INJECTION: forcing a failure. [ 2350.249307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2350.251101] CPU: 0 PID: 13922 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2350.252114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.253360] Call Trace: [ 2350.253770] dump_stack+0x107/0x167 [ 2350.254338] should_fail.cold+0x5/0xa [ 2350.254910] __alloc_pages_nodemask+0x182/0x600 [ 2350.255613] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2350.256501] ? lock_downgrade+0x6d0/0x6d0 [ 2350.257112] ? lock_acquire+0x197/0x470 [ 2350.257718] alloc_pages_vma+0xbb/0x410 [ 2350.258337] shmem_alloc_page+0x10f/0x1e0 [ 2350.258956] ? shmem_init_inode+0x20/0x20 [ 2350.259620] ? percpu_counter_add_batch+0x8b/0x140 [ 2350.260369] ? __vm_enough_memory+0x184/0x360 [ 2350.261048] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2350.261898] ? shmem_unuse_inode+0xf60/0xf60 [ 2350.262557] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2350.263315] shmem_write_begin+0xf7/0x1d0 [ 2350.263931] generic_perform_write+0x20a/0x4f0 [ 2350.264644] ? page_cache_prev_miss+0x310/0x310 [ 2350.265341] ? evict_inodes+0x420/0x420 [ 2350.265958] ? generic_write_checks+0x2ad/0x390 [ 2350.266673] __generic_file_write_iter+0x39d/0x5d0 [ 2350.267417] generic_file_write_iter+0xdb/0x230 [ 2350.268105] ? iov_iter_init+0x3c/0x130 [ 2350.268696] new_sync_write+0x42c/0x660 [ 2350.269309] ? new_sync_read+0x6f0/0x6f0 [ 2350.269935] ? __x64_sys_pwrite64+0x201/0x260 [ 2350.270615] ? lock_release+0x680/0x680 09:09:57 executing program 2: shmget(0x0, 0x4000, 0x78000000, &(0x7f0000ff4000/0x4000)=nil) r0 = shmget(0x0, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/155) [ 2350.271208] ? selinux_file_permission+0x92/0x520 [ 2350.272098] vfs_write+0x747/0xa70 [ 2350.272652] __x64_sys_pwrite64+0x201/0x260 [ 2350.273301] ? ksys_pwrite64+0x1b0/0x1b0 [ 2350.273924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.274706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.275480] do_syscall_64+0x33/0x40 [ 2350.276035] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.276782] RIP: 0033:0x7f643d425ab7 [ 2350.277339] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2350.280051] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2350.281155] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2350.282221] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2350.283282] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2350.284350] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2350.285402] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2350.286344] FAULT_INJECTION: forcing a failure. [ 2350.286344] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.288603] CPU: 1 PID: 13923 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2350.289581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.290757] Call Trace: [ 2350.291140] dump_stack+0x107/0x167 [ 2350.291661] should_fail.cold+0x5/0xa [ 2350.292207] ? create_object.isra.0+0x3a/0xa20 [ 2350.292855] should_failslab+0x5/0x20 [ 2350.293399] kmem_cache_alloc+0x5b/0x310 [ 2350.293992] ? mark_held_locks+0x9e/0xe0 [ 2350.294583] create_object.isra.0+0x3a/0xa20 [ 2350.295209] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2350.295934] kmem_cache_alloc_bulk+0x168/0x320 [ 2350.296589] io_submit_sqes+0x6f76/0x85c0 [ 2350.297208] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2350.297914] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2350.298602] ? lock_downgrade+0x6d0/0x6d0 [ 2350.299188] ? find_held_lock+0x2c/0x110 [ 2350.299772] ? io_submit_sqes+0x85c0/0x85c0 [ 2350.300393] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2350.301083] ? wait_for_completion_io+0x270/0x270 [ 2350.301910] ? rcu_read_lock_any_held+0x75/0xa0 [ 2350.302590] ? vfs_write+0x354/0xa70 [ 2350.303132] ? fput_many+0x2f/0x1a0 [ 2350.303670] ? ksys_write+0x1a9/0x260 [ 2350.304226] ? __ia32_sys_read+0xb0/0xb0 [ 2350.304822] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.305578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.306352] do_syscall_64+0x33/0x40 [ 2350.306890] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.307628] RIP: 0033:0x7fa6ace83b19 [ 2350.308169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.310752] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2350.311863] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2350.312850] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2350.313839] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.314827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2350.315830] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2350.322297] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:09:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:09:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) [ 2350.399548] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2350.400790] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2350.401868] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2350.424303] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2350.437554] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2350.469460] FAULT_INJECTION: forcing a failure. [ 2350.469460] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.471297] CPU: 0 PID: 13934 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2350.472323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2350.473543] Call Trace: [ 2350.473974] dump_stack+0x107/0x167 [ 2350.474529] should_fail.cold+0x5/0xa [ 2350.475103] ? create_io_worker+0xe8/0x620 [ 2350.475739] should_failslab+0x5/0x20 [ 2350.476311] kmem_cache_alloc_node_trace+0x59/0x340 [ 2350.477037] create_io_worker+0xe8/0x620 [ 2350.477278] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2350.477645] io_wqe_enqueue+0x69e/0xbe0 [ 2350.479258] ? create_worker_cb+0x260/0x260 [ 2350.479886] ? io_wq_work_match_all+0x10/0x10 [ 2350.480563] ? io_prep_async_work+0x340/0x550 [ 2350.481226] io_queue_async_work+0x26b/0x4f0 [ 2350.481884] __io_queue_sqe+0x5cc/0x9d0 [ 2350.482479] ? io_issue_sqe+0x7700/0x7700 [ 2350.483095] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2350.483788] io_submit_sqes+0x4461/0x85c0 [ 2350.484425] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2350.485150] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2350.485883] ? lock_downgrade+0x6d0/0x6d0 [ 2350.486490] ? find_held_lock+0x2c/0x110 [ 2350.487107] ? io_submit_sqes+0x85c0/0x85c0 [ 2350.487748] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2350.488463] ? wait_for_completion_io+0x270/0x270 [ 2350.489173] ? rcu_read_lock_any_held+0x75/0xa0 [ 2350.489876] ? vfs_write+0x354/0xa70 [ 2350.490425] ? fput_many+0x2f/0x1a0 [ 2350.490958] ? ksys_write+0x1a9/0x260 [ 2350.491521] ? __ia32_sys_read+0xb0/0xb0 [ 2350.492122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2350.492887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2350.493642] do_syscall_64+0x33/0x40 [ 2350.494213] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2350.494974] RIP: 0033:0x7f705a641b19 [ 2350.495518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2350.498117] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2350.499221] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2350.500264] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2350.501294] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2350.502347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2350.503394] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:10:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 09:10:10 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc286, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:10:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 09:10:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 09:10:10 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/151) 09:10:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/65, 0x41}], 0x4, 0x8, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0\x00') close(r0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000080)={0x2, 0x9, 0x5, 0x0, 0x3a}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000400)) r6 = syz_open_dev$hiddev(&(0x7f0000000180), 0x31ae, 0x200000) write$binfmt_elf64(r6, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x2, 0x7c, 0x101, 0x3, 0x6, 0x8, 0x3b5, 0x40, 0x45, 0x3, 0x800, 0x38, 0x1, 0x9, 0x2, 0xedd0}, [{0x2, 0x5, 0xfffffffffffffff9, 0x4, 0x1, 0x3, 0x3, 0x6}], "733060bbfbb7324e485f850d481cf473e86c4dad94446cf921746b6d0d1c5dcc2804feb7c91a556afa131d4cab259e4800c3232ee4a2b7a7101bd7bc04271c3c2ee5a907088bd9c91ca187cf0b86577e14565d6295b0064635a230d8648ba4488f3e5ef8bd4de6d07db6657fe4f86952958045acd18f4fbd38144b66fba10ad3a5e3b355635b8c7f9f77df49a64ef35bb28b0c46dbe2a78c77206c8b0a"}, 0x115) dup2(r5, r2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) 09:10:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2500, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:10:10 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 35) [ 2363.314912] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2363.350877] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2363.359212] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2363.359972] FAULT_INJECTION: forcing a failure. [ 2363.359972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2363.360525] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2363.360586] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2363.362411] CPU: 0 PID: 13963 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2363.362433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.367249] Call Trace: [ 2363.367682] dump_stack+0x107/0x167 [ 2363.368276] should_fail.cold+0x5/0xa [ 2363.368905] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2363.369782] ? shmem_write_begin+0xf7/0x1d0 [ 2363.370491] ? shmem_write_begin+0x100/0x1d0 [ 2363.371208] generic_perform_write+0x279/0x4f0 [ 2363.371950] ? page_cache_prev_miss+0x310/0x310 [ 2363.372712] ? evict_inodes+0x420/0x420 [ 2363.373362] ? generic_write_checks+0x2ad/0x390 [ 2363.374128] __generic_file_write_iter+0x39d/0x5d0 [ 2363.374931] generic_file_write_iter+0xdb/0x230 [ 2363.375677] ? iov_iter_init+0x3c/0x130 [ 2363.376327] new_sync_write+0x42c/0x660 [ 2363.376976] ? new_sync_read+0x6f0/0x6f0 [ 2363.377638] ? __x64_sys_pwrite64+0x201/0x260 [ 2363.378370] ? lock_release+0x680/0x680 [ 2363.379006] ? selinux_file_permission+0x92/0x520 [ 2363.379806] vfs_write+0x747/0xa70 [ 2363.380388] __x64_sys_pwrite64+0x201/0x260 [ 2363.381084] ? ksys_pwrite64+0x1b0/0x1b0 [ 2363.381745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.382568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.383405] do_syscall_64+0x33/0x40 [ 2363.384005] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.384831] RIP: 0033:0x7f643d425ab7 [ 2363.385438] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2363.388334] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2363.389548] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2363.390688] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2363.391825] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2363.392960] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2363.394108] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2363.445495] FAULT_INJECTION: forcing a failure. [ 2363.445495] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.447592] CPU: 0 PID: 13965 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2363.448666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.449946] Call Trace: [ 2363.450370] dump_stack+0x107/0x167 [ 2363.450936] should_fail.cold+0x5/0xa [ 2363.451533] ? create_object.isra.0+0x3a/0xa20 [ 2363.452248] should_failslab+0x5/0x20 [ 2363.452841] kmem_cache_alloc+0x5b/0x310 [ 2363.453479] ? mark_held_locks+0x9e/0xe0 [ 2363.454119] create_object.isra.0+0x3a/0xa20 [ 2363.454803] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2363.455593] kmem_cache_alloc_bulk+0x168/0x320 [ 2363.456313] io_submit_sqes+0x6f76/0x85c0 [ 2363.456976] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2363.457748] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2363.458495] ? lock_downgrade+0x6d0/0x6d0 [ 2363.459136] ? find_held_lock+0x2c/0x110 [ 2363.459760] ? io_submit_sqes+0x85c0/0x85c0 [ 2363.460434] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2363.461179] ? wait_for_completion_io+0x270/0x270 [ 2363.461927] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.462652] ? vfs_write+0x354/0xa70 [ 2363.463223] ? fput_many+0x2f/0x1a0 [ 2363.463786] ? ksys_write+0x1a9/0x260 [ 2363.464377] ? __ia32_sys_read+0xb0/0xb0 [ 2363.465011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.465814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.466620] do_syscall_64+0x33/0x40 [ 2363.467192] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.467978] RIP: 0033:0x7f705a641b19 [ 2363.468559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.471366] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2363.472531] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2363.473610] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2363.474699] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.475786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.476868] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2363.494769] FAULT_INJECTION: forcing a failure. [ 2363.494769] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.496656] CPU: 0 PID: 13961 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2363.497682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.498950] Call Trace: [ 2363.499356] dump_stack+0x107/0x167 [ 2363.499923] should_fail.cold+0x5/0xa [ 2363.500504] ? create_object.isra.0+0x3a/0xa20 [ 2363.501210] should_failslab+0x5/0x20 [ 2363.501798] kmem_cache_alloc+0x5b/0x310 [ 2363.502432] ? mark_held_locks+0x9e/0xe0 [ 2363.503055] create_object.isra.0+0x3a/0xa20 [ 2363.503730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2363.504519] kmem_cache_alloc_bulk+0x168/0x320 [ 2363.505208] io_submit_sqes+0x6f76/0x85c0 [ 2363.505866] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2363.506635] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2363.507378] ? lock_downgrade+0x6d0/0x6d0 [ 2363.508013] ? find_held_lock+0x2c/0x110 [ 2363.508643] ? io_submit_sqes+0x85c0/0x85c0 [ 2363.509309] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2363.510060] ? wait_for_completion_io+0x270/0x270 [ 2363.510804] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.511520] ? vfs_write+0x354/0xa70 [ 2363.512074] ? fput_many+0x2f/0x1a0 [ 2363.512636] ? ksys_write+0x1a9/0x260 [ 2363.513224] ? __ia32_sys_read+0xb0/0xb0 [ 2363.513855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.514677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.515482] do_syscall_64+0x33/0x40 [ 2363.516060] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.516852] RIP: 0033:0x7fa6ace83b19 [ 2363.517432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.520256] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2363.521435] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2363.522549] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2363.523656] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.524771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.525888] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2363.538456] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2363.577229] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2363.578796] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2363.580082] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2363.616588] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:10:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2600, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:10:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 09:10:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) 09:10:23 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc386, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:10:23 executing program 2: sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000854}, 0x8800) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4090) 09:10:23 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000026c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000002480)=""/2, 0x2}, {&(0x7f00000024c0)=""/255, 0xff}], 0x9, &(0x7f0000002680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000100) 09:10:23 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 36) 09:10:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) [ 2375.998478] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2376.014926] FAULT_INJECTION: forcing a failure. [ 2376.014926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2376.016062] CPU: 0 PID: 13993 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2376.016673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.017409] Call Trace: [ 2376.017654] dump_stack+0x107/0x167 [ 2376.017988] should_fail.cold+0x5/0xa [ 2376.018349] __alloc_pages_nodemask+0x182/0x600 [ 2376.018772] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2376.019312] ? lock_downgrade+0x6d0/0x6d0 [ 2376.019684] ? lock_acquire+0x197/0x470 [ 2376.020061] alloc_pages_vma+0xbb/0x410 [ 2376.020428] shmem_alloc_page+0x10f/0x1e0 [ 2376.020796] ? shmem_init_inode+0x20/0x20 [ 2376.021193] ? percpu_counter_add_batch+0x8b/0x140 [ 2376.021632] ? __vm_enough_memory+0x184/0x360 [ 2376.022037] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2376.022533] ? shmem_unuse_inode+0xf60/0xf60 [ 2376.022927] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2376.023380] shmem_write_begin+0xf7/0x1d0 [ 2376.023755] generic_perform_write+0x20a/0x4f0 [ 2376.024177] ? page_cache_prev_miss+0x310/0x310 [ 2376.024597] ? evict_inodes+0x420/0x420 [ 2376.024956] ? generic_write_checks+0x2ad/0x390 [ 2376.025384] __generic_file_write_iter+0x39d/0x5d0 [ 2376.025829] generic_file_write_iter+0xdb/0x230 [ 2376.026251] ? iov_iter_init+0x3c/0x130 [ 2376.026608] new_sync_write+0x42c/0x660 [ 2376.026966] ? new_sync_read+0x6f0/0x6f0 [ 2376.027330] ? __x64_sys_pwrite64+0x201/0x260 [ 2376.027699] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2376.027739] ? lock_release+0x680/0x680 [ 2376.028940] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2376.029255] ? selinux_file_permission+0x92/0x520 [ 2376.029278] vfs_write+0x747/0xa70 [ 2376.029296] __x64_sys_pwrite64+0x201/0x260 [ 2376.030375] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2376.030763] ? ksys_pwrite64+0x1b0/0x1b0 [ 2376.032634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.033097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.033557] do_syscall_64+0x33/0x40 [ 2376.033887] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2376.034343] RIP: 0033:0x7f643d425ab7 [ 2376.034673] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2376.036276] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2376.036947] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2376.037574] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2376.038212] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2376.038837] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2376.039459] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2376.058105] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2376.073991] FAULT_INJECTION: forcing a failure. [ 2376.073991] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.074666] FAULT_INJECTION: forcing a failure. [ 2376.074666] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.075063] CPU: 0 PID: 13992 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2376.077345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.078058] Call Trace: [ 2376.078307] dump_stack+0x107/0x167 [ 2376.078626] should_fail.cold+0x5/0xa [ 2376.078960] ? create_object.isra.0+0x3a/0xa20 [ 2376.079369] should_failslab+0x5/0x20 [ 2376.079705] kmem_cache_alloc+0x5b/0x310 [ 2376.080059] ? mark_held_locks+0x9e/0xe0 [ 2376.080424] create_object.isra.0+0x3a/0xa20 [ 2376.080806] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2376.081258] kmem_cache_alloc_bulk+0x168/0x320 [ 2376.081655] io_submit_sqes+0x6f76/0x85c0 [ 2376.082032] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.082487] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.082907] ? lock_downgrade+0x6d0/0x6d0 [ 2376.083274] ? find_held_lock+0x2c/0x110 [ 2376.083634] ? io_submit_sqes+0x85c0/0x85c0 [ 2376.084016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2376.084446] ? wait_for_completion_io+0x270/0x270 [ 2376.084869] ? rcu_read_lock_any_held+0x75/0xa0 [ 2376.085283] ? vfs_write+0x354/0xa70 [ 2376.085610] ? fput_many+0x2f/0x1a0 [ 2376.085927] ? ksys_write+0x1a9/0x260 [ 2376.086276] ? __ia32_sys_read+0xb0/0xb0 [ 2376.086631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.087089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.087548] do_syscall_64+0x33/0x40 [ 2376.087874] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2376.088332] RIP: 0033:0x7fa6ace83b19 [ 2376.088657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.090249] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2376.090909] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2376.091529] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2376.092146] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.092762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.093385] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2376.094029] CPU: 1 PID: 13999 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2376.095135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.096420] Call Trace: [ 2376.096842] dump_stack+0x107/0x167 [ 2376.097415] should_fail.cold+0x5/0xa [ 2376.098016] ? create_io_worker+0xe8/0x620 [ 2376.098690] should_failslab+0x5/0x20 [ 2376.099309] kmem_cache_alloc_node_trace+0x59/0x340 [ 2376.100096] create_io_worker+0xe8/0x620 [ 2376.100725] io_wqe_enqueue+0x69e/0xbe0 [ 2376.101356] ? create_worker_cb+0x260/0x260 [ 2376.102002] ? io_wq_work_match_all+0x10/0x10 [ 2376.102720] ? io_prep_async_work+0x340/0x550 [ 2376.103435] io_queue_async_work+0x26b/0x4f0 [ 2376.104165] __io_queue_sqe+0x5cc/0x9d0 [ 2376.104831] ? io_issue_sqe+0x7700/0x7700 [ 2376.105525] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2376.106329] io_submit_sqes+0x4461/0x85c0 [ 2376.107056] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.107878] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.108691] ? lock_downgrade+0x6d0/0x6d0 [ 2376.109383] ? find_held_lock+0x2c/0x110 [ 2376.110018] ? io_submit_sqes+0x85c0/0x85c0 [ 2376.110763] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2376.111562] ? wait_for_completion_io+0x270/0x270 [ 2376.112360] ? rcu_read_lock_any_held+0x75/0xa0 [ 2376.113075] ? vfs_write+0x354/0xa70 [ 2376.113698] ? fput_many+0x2f/0x1a0 [ 2376.114325] ? ksys_write+0x1a9/0x260 [ 2376.114962] ? __ia32_sys_read+0xb0/0xb0 [ 2376.115639] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.116498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.117360] do_syscall_64+0x33/0x40 [ 2376.117938] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2376.118812] RIP: 0033:0x7f705a641b19 [ 2376.119446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.122464] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2376.123731] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2376.124920] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2376.126100] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.127294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.128482] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:10:23 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ppoll(&(0x7f0000000180), 0x36, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = shmget$private(0x0, 0xa000, 0x1, &(0x7f0000ff6000/0xa000)=nil) shmat(r3, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800009}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x8800) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000240)=""/130) [ 2376.145695] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:10:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2700, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2376.147814] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2376.149272] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2376.150522] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2376.199457] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:10:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0xf, 0x29, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdb5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48005}, 0x0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) sendfile(r3, r2, &(0x7f0000000000)=0x4, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5db, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xe1b, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xc9, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0xc014) 09:10:23 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc486, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:10:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2800, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:10:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) [ 2376.250827] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:10:23 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open_tree(r2, &(0x7f0000000040)='./file2\x00', 0x800) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) close(r5) sendfile(r5, r4, &(0x7f0000000000)=0x7fffffff, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x1, 0x6, 0x0, 0x5}}) execveat(r5, &(0x7f0000000080)='./file2\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='&\'\x00', &(0x7f0000000100)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000200)='/dev/snd/timer\x00', &(0x7f0000000240)='/%\x00', &(0x7f0000000280)='(\x00'], 0x800) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x3) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x40010, r3, 0x8) 09:10:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 09:10:23 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 37) 09:10:23 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2900, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2376.364606] FAULT_INJECTION: forcing a failure. [ 2376.364606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.366501] CPU: 1 PID: 14031 Comm: syz-executor.6 Not tainted 5.10.214 #1 09:10:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) [ 2376.367620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.369154] Call Trace: [ 2376.369572] dump_stack+0x107/0x167 [ 2376.370172] should_fail.cold+0x5/0xa [ 2376.370771] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2376.371595] ? shmem_write_begin+0xf7/0x1d0 [ 2376.372260] ? shmem_write_begin+0x100/0x1d0 [ 2376.372941] generic_perform_write+0x279/0x4f0 [ 2376.373650] ? page_cache_prev_miss+0x310/0x310 [ 2376.374370] ? evict_inodes+0x420/0x420 [ 2376.374990] ? generic_write_checks+0x2ad/0x390 [ 2376.375711] __generic_file_write_iter+0x39d/0x5d0 [ 2376.376484] generic_file_write_iter+0xdb/0x230 [ 2376.377192] ? iov_iter_init+0x3c/0x130 [ 2376.377805] new_sync_write+0x42c/0x660 [ 2376.378420] ? new_sync_read+0x6f0/0x6f0 [ 2376.379041] ? __x64_sys_pwrite64+0x201/0x260 [ 2376.379732] ? lock_release+0x680/0x680 [ 2376.380348] ? selinux_file_permission+0x92/0x520 [ 2376.381099] vfs_write+0x747/0xa70 [ 2376.381650] __x64_sys_pwrite64+0x201/0x260 [ 2376.382320] ? ksys_pwrite64+0x1b0/0x1b0 [ 2376.382952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.383755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.384542] do_syscall_64+0x33/0x40 [ 2376.385108] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2376.385881] RIP: 0033:0x7f643d425ab7 [ 2376.386454] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2376.389208] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2376.390360] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2376.391435] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2376.392504] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2376.393575] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2376.394653] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2376.397497] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2376.398213] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2376.398809] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2376.416510] FAULT_INJECTION: forcing a failure. [ 2376.416510] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.417705] CPU: 0 PID: 14029 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2376.418294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.418961] Call Trace: [ 2376.419178] dump_stack+0x107/0x167 [ 2376.419474] should_fail.cold+0x5/0xa [ 2376.419792] ? create_object.isra.0+0x3a/0xa20 [ 2376.420177] should_failslab+0x5/0x20 [ 2376.420494] kmem_cache_alloc+0x5b/0x310 [ 2376.420839] ? mark_held_locks+0x9e/0xe0 [ 2376.421179] create_object.isra.0+0x3a/0xa20 [ 2376.421543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2376.421975] kmem_cache_alloc_bulk+0x168/0x320 [ 2376.422366] io_submit_sqes+0x6f76/0x85c0 [ 2376.422728] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.423148] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.423548] ? lock_downgrade+0x6d0/0x6d0 [ 2376.423895] ? find_held_lock+0x2c/0x110 [ 2376.424239] ? io_submit_sqes+0x85c0/0x85c0 [ 2376.424601] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2376.425006] ? wait_for_completion_io+0x270/0x270 [ 2376.425415] ? rcu_read_lock_any_held+0x75/0xa0 [ 2376.425806] ? vfs_write+0x354/0xa70 [ 2376.426119] ? fput_many+0x2f/0x1a0 [ 2376.426432] ? ksys_write+0x1a9/0x260 [ 2376.426756] ? __ia32_sys_read+0xb0/0xb0 [ 2376.427099] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.427532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.427960] do_syscall_64+0x33/0x40 [ 2376.428272] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2376.428695] RIP: 0033:0x7fa6ace83b19 [ 2376.429005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.430519] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2376.431151] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2376.431739] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2376.432327] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.432916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.433506] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2376.447406] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2376.454544] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2376.455811] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2376.457020] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2376.509825] FAULT_INJECTION: forcing a failure. [ 2376.509825] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.511984] CPU: 1 PID: 14040 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2376.513079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.514394] Call Trace: [ 2376.514822] dump_stack+0x107/0x167 [ 2376.515409] should_fail.cold+0x5/0xa [ 2376.516020] ? create_object.isra.0+0x3a/0xa20 [ 2376.516748] should_failslab+0x5/0x20 [ 2376.517354] kmem_cache_alloc+0x5b/0x310 [ 2376.518002] create_object.isra.0+0x3a/0xa20 [ 2376.518708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2376.519514] kmem_cache_alloc_bulk+0x168/0x320 [ 2376.520242] io_submit_sqes+0x6f76/0x85c0 [ 2376.520921] ? __mutex_lock+0x4fe/0x10b0 [ 2376.521574] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.522365] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2376.523133] ? lock_downgrade+0x6d0/0x6d0 [ 2376.523786] ? find_held_lock+0x2c/0x110 [ 2376.524433] ? io_submit_sqes+0x85c0/0x85c0 [ 2376.525125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2376.525890] ? wait_for_completion_io+0x270/0x270 [ 2376.526664] ? rcu_read_lock_any_held+0x75/0xa0 [ 2376.527398] ? vfs_write+0x354/0xa70 [ 2376.527988] ? fput_many+0x2f/0x1a0 [ 2376.528567] ? ksys_write+0x1a9/0x260 [ 2376.529172] ? __ia32_sys_read+0xb0/0xb0 [ 2376.529819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.530653] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.531475] do_syscall_64+0x33/0x40 [ 2376.532065] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2376.532869] RIP: 0033:0x7f705a641b19 [ 2376.533460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.536336] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2376.537540] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2376.538666] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2376.539784] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.540903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.542022] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2376.554407] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2376.638243] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2376.655825] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:10:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2a00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:10:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) [ 2388.651950] FAULT_INJECTION: forcing a failure. [ 2388.651950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2388.653178] CPU: 1 PID: 14061 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2388.653827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.654616] Call Trace: [ 2388.654876] dump_stack+0x107/0x167 [ 2388.655223] should_fail.cold+0x5/0xa [ 2388.655589] __alloc_pages_nodemask+0x182/0x600 [ 2388.656031] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2388.656593] ? lock_downgrade+0x6d0/0x6d0 [ 2388.656982] ? lock_acquire+0x197/0x470 [ 2388.657371] alloc_pages_vma+0xbb/0x410 [ 2388.657752] shmem_alloc_page+0x10f/0x1e0 [ 2388.658149] ? shmem_init_inode+0x20/0x20 [ 2388.658559] ? percpu_counter_add_batch+0x8b/0x140 [ 2388.659024] ? __vm_enough_memory+0x184/0x360 [ 2388.659450] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2388.659963] ? shmem_unuse_inode+0xf60/0xf60 [ 2388.660380] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2388.660857] shmem_write_begin+0xf7/0x1d0 [ 2388.661257] generic_perform_write+0x20a/0x4f0 [ 2388.661693] ? page_cache_prev_miss+0x310/0x310 [ 2388.662140] ? evict_inodes+0x420/0x420 [ 2388.662526] ? generic_write_checks+0x2ad/0x390 [ 2388.662966] __generic_file_write_iter+0x39d/0x5d0 [ 2388.663431] generic_file_write_iter+0xdb/0x230 [ 2388.663871] ? iov_iter_init+0x3c/0x130 [ 2388.664245] new_sync_write+0x42c/0x660 [ 2388.664616] ? new_sync_read+0x6f0/0x6f0 [ 2388.664997] ? __x64_sys_pwrite64+0x201/0x260 [ 2388.665423] ? lock_release+0x680/0x680 [ 2388.665793] ? selinux_file_permission+0x92/0x520 [ 2388.666259] vfs_write+0x747/0xa70 [ 2388.666605] __x64_sys_pwrite64+0x201/0x260 [ 2388.667008] ? ksys_pwrite64+0x1b0/0x1b0 [ 2388.667396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.667885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.668371] do_syscall_64+0x33/0x40 [ 2388.668720] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2388.669198] RIP: 0033:0x7f643d425ab7 [ 2388.669545] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2388.671262] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2388.671975] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2388.672632] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2388.673294] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2388.673958] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2388.674639] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:10:35 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 38) 09:10:35 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc586, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:10:35 executing program 2: shmget(0x3, 0x3000, 0x100, &(0x7f0000ff5000/0x3000)=nil) 09:10:35 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x3, 0x5, 0x1, 0x4}}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/176) 09:10:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 09:10:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) [ 2388.694390] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2388.707961] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2388.708712] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2388.709426] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2388.720626] FAULT_INJECTION: forcing a failure. [ 2388.720626] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.722880] CPU: 0 PID: 14059 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2388.724007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.725338] Call Trace: [ 2388.725778] dump_stack+0x107/0x167 [ 2388.726373] should_fail.cold+0x5/0xa [ 2388.726983] ? create_io_worker+0xe8/0x620 [ 2388.727676] should_failslab+0x5/0x20 [ 2388.728286] kmem_cache_alloc_node_trace+0x59/0x340 [ 2388.729124] create_io_worker+0xe8/0x620 [ 2388.729799] io_wqe_enqueue+0x69e/0xbe0 [ 2388.730452] ? create_worker_cb+0x260/0x260 [ 2388.731146] ? io_wq_work_match_all+0x10/0x10 [ 2388.731894] ? io_prep_async_work+0x340/0x550 [ 2388.732643] io_queue_async_work+0x26b/0x4f0 [ 2388.733352] __io_queue_sqe+0x5cc/0x9d0 [ 2388.734001] ? io_issue_sqe+0x7700/0x7700 [ 2388.734697] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2388.735436] io_submit_sqes+0x4461/0x85c0 [ 2388.736148] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2388.736951] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2388.737729] ? lock_downgrade+0x6d0/0x6d0 [ 2388.738386] ? find_held_lock+0x2c/0x110 [ 2388.739046] ? io_submit_sqes+0x85c0/0x85c0 [ 2388.739758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2388.740541] ? wait_for_completion_io+0x270/0x270 [ 2388.741312] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.742043] ? vfs_write+0x354/0xa70 [ 2388.742661] ? fput_many+0x2f/0x1a0 [ 2388.743239] ? ksys_write+0x1a9/0x260 [ 2388.743872] ? __ia32_sys_read+0xb0/0xb0 [ 2388.744547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.745377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.746195] do_syscall_64+0x33/0x40 [ 2388.746817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2388.747665] RIP: 0033:0x7fa6ace83b19 [ 2388.748261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.751169] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 09:10:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2e00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2388.752388] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2388.753658] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2388.754789] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.755921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2388.757049] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:10:35 executing program 0: llistxattr(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)=""/164, 0xa4) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000200)='./file2\x00', 0x8001, 0x2, &(0x7f0000000400)=[{&(0x7f0000000240)="0175aad6dcff3f6e214948f8225105d3f598f933ede0cae3cbc697fc437eacb90f29828a4c7e7fb33206f5441e1c26fdde05693e919b878b734018663a41f0e4a51634f7c1dd0586f74e9069aba192f69a46a61f5b1808c6151513f1b551ac0db55db9fa409b243423f18058fd031b06a501514dc790fe2fa975bb2f509d1c9304f33031e5ce4f7c558bd032f34d", 0x8e, 0x4}, {&(0x7f0000000300)="db251713023fe4eab440bda6bde11bbdc4adcfeba3b0a1cbc763a2aafcf78598507a5ce551115b487b95b358bd1265e2c7e57137913875e2a871f625f2fc0d181169336763e852938d8794ae01f37250ffe27ec46f585c5f2fffab37c3241b7813179d4f52bd4735934fe636d05851fb63bf8f8725da220da62a76d87b536d24fe39c83fbb92ee9e8c4bc38e97b0f61d7237f553e4d7f9f8cd0c7e202b19046db097ab9b4996ee04368802e870391bb62a9a757722a6e49d4c66dc1ba3005d9e06b0de579ecc25faa4947d4a20387e40f6625dff42d456b5973214afa3b7890ba93b4c2cd31347725ddb2eb52b97818b0bdfb5269c659571", 0xf8, 0x7}], 0x8000, &(0x7f0000000480)={[{@resuid}, {@nombcache}, {@grpquota}, {@acl}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}], [{@permit_directio}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2388.778356] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2388.779667] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2388.780882] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2388.790416] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2388.797719] FAULT_INJECTION: forcing a failure. [ 2388.797719] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.799614] CPU: 0 PID: 14073 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2388.800722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.802027] Call Trace: [ 2388.802467] dump_stack+0x107/0x167 [ 2388.803063] should_fail.cold+0x5/0xa [ 2388.803700] ? create_object.isra.0+0x3a/0xa20 [ 2388.804419] should_failslab+0x5/0x20 [ 2388.805042] kmem_cache_alloc+0x5b/0x310 [ 2388.805705] ? mark_held_locks+0x9e/0xe0 [ 2388.806375] create_object.isra.0+0x3a/0xa20 [ 2388.807087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.807919] kmem_cache_alloc_bulk+0x168/0x320 [ 2388.808673] io_submit_sqes+0x6f76/0x85c0 [ 2388.809543] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2388.810585] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2388.811556] ? lock_downgrade+0x6d0/0x6d0 [ 2388.812383] ? find_held_lock+0x2c/0x110 [ 2388.813215] ? io_submit_sqes+0x85c0/0x85c0 [ 2388.814086] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2388.815088] ? wait_for_completion_io+0x270/0x270 [ 2388.815869] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.816605] ? vfs_write+0x354/0xa70 [ 2388.817195] ? fput_many+0x2f/0x1a0 [ 2388.817797] ? ksys_write+0x1a9/0x260 [ 2388.818402] ? __ia32_sys_read+0xb0/0xb0 [ 2388.819065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.819891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.820708] do_syscall_64+0x33/0x40 [ 2388.821290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2388.822083] RIP: 0033:0x7f705a641b19 09:10:36 executing program 2: shmget(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2388.822699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.825693] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2388.826925] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2388.828047] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2388.829164] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.830295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2388.831442] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2388.842331] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:10:36 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 39) 09:10:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3600, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:10:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 09:10:36 executing program 2: shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ff5000/0x1000)=nil) 09:10:36 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc686, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2388.974818] FAULT_INJECTION: forcing a failure. [ 2388.974818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.976697] CPU: 0 PID: 14095 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2388.977757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.979027] Call Trace: [ 2388.979439] dump_stack+0x107/0x167 [ 2388.980009] should_fail.cold+0x5/0xa [ 2388.980611] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2388.981419] ? shmem_write_begin+0xf7/0x1d0 [ 2388.982084] ? shmem_write_begin+0x100/0x1d0 [ 2388.982789] generic_perform_write+0x279/0x4f0 [ 2388.983494] ? page_cache_prev_miss+0x310/0x310 [ 2388.984209] ? evict_inodes+0x420/0x420 [ 2388.984841] ? generic_write_checks+0x2ad/0x390 [ 2388.985567] __generic_file_write_iter+0x39d/0x5d0 [ 2388.986364] generic_file_write_iter+0xdb/0x230 [ 2388.987079] ? iov_iter_init+0x3c/0x130 [ 2388.987724] new_sync_write+0x42c/0x660 [ 2388.988328] ? new_sync_read+0x6f0/0x6f0 [ 2388.988961] ? __x64_sys_pwrite64+0x201/0x260 [ 2388.989657] ? lock_release+0x680/0x680 [ 2388.990263] ? selinux_file_permission+0x92/0x520 [ 2388.991045] vfs_write+0x747/0xa70 [ 2388.991635] __x64_sys_pwrite64+0x201/0x260 [ 2388.992310] ? ksys_pwrite64+0x1b0/0x1b0 [ 2388.992975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2388.993799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2388.994629] do_syscall_64+0x33/0x40 [ 2388.995208] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2388.996024] RIP: 0033:0x7f643d425ab7 [ 2388.996621] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2388.999472] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2389.000686] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2389.000804] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2389.001795] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2389.001808] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2389.001826] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2389.002528] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2389.003639] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2389.006092] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:10:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3800, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2389.016872] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:10:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 09:10:36 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) close(r1) 09:10:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 09:10:36 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc786, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:10:36 executing program 2: shmget(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) [ 2389.059888] FAULT_INJECTION: forcing a failure. [ 2389.059888] name failslab, interval 1, probability 0, space 0, times 0 [ 2389.062321] CPU: 0 PID: 14094 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2389.063413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.064728] Call Trace: [ 2389.065148] dump_stack+0x107/0x167 [ 2389.065730] should_fail.cold+0x5/0xa [ 2389.066340] ? create_object.isra.0+0x3a/0xa20 [ 2389.067070] should_failslab+0x5/0x20 [ 2389.067690] kmem_cache_alloc+0x5b/0x310 [ 2389.068323] ? mark_held_locks+0x9e/0xe0 [ 2389.068975] create_object.isra.0+0x3a/0xa20 [ 2389.069677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2389.070489] kmem_cache_alloc_bulk+0x168/0x320 [ 2389.071223] io_submit_sqes+0x6f76/0x85c0 [ 2389.071925] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2389.072714] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2389.073471] ? lock_downgrade+0x6d0/0x6d0 [ 2389.074129] ? find_held_lock+0x2c/0x110 [ 2389.074805] ? io_submit_sqes+0x85c0/0x85c0 [ 2389.075487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2389.076259] ? wait_for_completion_io+0x270/0x270 [ 2389.077024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2389.077757] ? vfs_write+0x354/0xa70 [ 2389.078348] ? fput_many+0x2f/0x1a0 [ 2389.078931] ? ksys_write+0x1a9/0x260 [ 2389.079540] ? __ia32_sys_read+0xb0/0xb0 [ 2389.080199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2389.081023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2389.081838] do_syscall_64+0x33/0x40 [ 2389.082429] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2389.083240] RIP: 0033:0x7f705a641b19 [ 2389.083846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.086722] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2389.087921] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2389.089027] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2389.090133] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2389.091253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2389.092368] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2389.126365] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2389.127044] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2389.127631] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:10:36 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) [ 2389.136985] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:10:36 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2, 0x2, 0x4, 0x2, 0x5}}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2389.170183] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2389.210485] FAULT_INJECTION: forcing a failure. [ 2389.210485] name failslab, interval 1, probability 0, space 0, times 0 [ 2389.211756] CPU: 1 PID: 14115 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2389.212347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.213034] Call Trace: [ 2389.213276] dump_stack+0x107/0x167 [ 2389.213586] should_fail.cold+0x5/0xa [ 2389.213895] ? create_object.isra.0+0x3a/0xa20 [ 2389.214284] should_failslab+0x5/0x20 [ 2389.214594] kmem_cache_alloc+0x5b/0x310 [ 2389.214928] ? lock_acquire+0x197/0x470 [ 2389.215263] create_object.isra.0+0x3a/0xa20 [ 2389.215624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2389.216034] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2389.216463] create_io_worker+0xe8/0x620 [ 2389.216798] io_wqe_enqueue+0x69e/0xbe0 [ 2389.217125] ? create_worker_cb+0x260/0x260 [ 2389.217482] ? io_wq_work_match_all+0x10/0x10 [ 2389.217850] ? io_prep_async_work+0x340/0x550 [ 2389.218218] io_queue_async_work+0x26b/0x4f0 [ 2389.218583] __io_queue_sqe+0x5cc/0x9d0 [ 2389.218918] ? io_issue_sqe+0x7700/0x7700 [ 2389.219266] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2389.219655] io_submit_sqes+0x4461/0x85c0 [ 2389.220016] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2389.220420] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2389.220809] ? lock_downgrade+0x6d0/0x6d0 [ 2389.221145] ? find_held_lock+0x2c/0x110 [ 2389.221487] ? io_submit_sqes+0x85c0/0x85c0 [ 2389.221837] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2389.222232] ? wait_for_completion_io+0x270/0x270 [ 2389.222644] ? rcu_read_lock_any_held+0x75/0xa0 [ 2389.223015] ? vfs_write+0x354/0xa70 [ 2389.223326] ? fput_many+0x2f/0x1a0 [ 2389.223623] ? ksys_write+0x1a9/0x260 [ 2389.223929] ? __ia32_sys_read+0xb0/0xb0 [ 2389.224266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2389.224693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2389.225113] do_syscall_64+0x33/0x40 [ 2389.225420] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2389.225841] RIP: 0033:0x7fa6ace83b19 [ 2389.226148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.227652] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2389.228274] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2389.228838] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2389.229420] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2389.229980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2389.230575] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2389.239073] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2389.239729] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2389.240337] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2389.258779] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2389.267887] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2402.613527] FAULT_INJECTION: forcing a failure. [ 2402.613527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2402.615378] CPU: 0 PID: 14140 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2402.616410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.617634] Call Trace: [ 2402.618033] dump_stack+0x107/0x167 [ 2402.618573] should_fail.cold+0x5/0xa [ 2402.619138] __alloc_pages_nodemask+0x182/0x600 [ 2402.619816] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2402.620689] ? lock_downgrade+0x6d0/0x6d0 [ 2402.621292] ? lock_acquire+0x197/0x470 [ 2402.622087] alloc_pages_vma+0xbb/0x410 [ 2402.622677] shmem_alloc_page+0x10f/0x1e0 [ 2402.623273] ? shmem_init_inode+0x20/0x20 [ 2402.623889] ? percpu_counter_add_batch+0x8b/0x140 [ 2402.624598] ? __vm_enough_memory+0x184/0x360 [ 2402.625254] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2402.626031] ? shmem_unuse_inode+0xf60/0xf60 [ 2402.626674] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2402.627423] shmem_write_begin+0xf7/0x1d0 [ 2402.628046] generic_perform_write+0x20a/0x4f0 [ 2402.628732] ? page_cache_prev_miss+0x310/0x310 [ 2402.629422] ? evict_inodes+0x420/0x420 [ 2402.630010] ? generic_write_checks+0x2ad/0x390 [ 2402.630724] __generic_file_write_iter+0x39d/0x5d0 [ 2402.631448] generic_file_write_iter+0xdb/0x230 [ 2402.632143] ? iov_iter_init+0x3c/0x130 [ 2402.632727] new_sync_write+0x42c/0x660 [ 2402.633323] ? new_sync_read+0x6f0/0x6f0 [ 2402.633918] ? __x64_sys_pwrite64+0x201/0x260 [ 2402.634599] ? lock_release+0x680/0x680 [ 2402.635178] ? selinux_file_permission+0x92/0x520 [ 2402.635905] vfs_write+0x747/0xa70 [ 2402.636434] __x64_sys_pwrite64+0x201/0x260 [ 2402.637083] ? ksys_pwrite64+0x1b0/0x1b0 [ 2402.637676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.638460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.639216] do_syscall_64+0x33/0x40 [ 2402.639766] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2402.640510] RIP: 0033:0x7f643d425ab7 [ 2402.641066] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2402.643710] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2402.644834] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2402.645882] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2402.646940] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2402.647988] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2402.649035] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:10:49 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 40) 09:10:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x6, 0x0, 0x6}}) r3 = dup(r1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x4, 0x7}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r4 = creat(&(0x7f0000000100)='./file2\x00', 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0x3, 0x1, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000240)={0x0, 0x3, 0x69, 0xc4046ee97599b75d, 0x401}) 09:10:49 executing program 2: shmget(0x3, 0x3000, 0x2, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x3800) 09:10:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 09:10:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 09:10:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3a00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:10:49 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc886, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:10:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) [ 2402.671192] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2402.675540] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2402.676685] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2402.677730] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2402.693483] FAULT_INJECTION: forcing a failure. [ 2402.693483] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.695503] CPU: 0 PID: 14152 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2402.696523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.697733] Call Trace: [ 2402.698139] dump_stack+0x107/0x167 [ 2402.698697] should_fail.cold+0x5/0xa [ 2402.699264] ? create_object.isra.0+0x3a/0xa20 [ 2402.699940] ? create_object.isra.0+0x3a/0xa20 [ 2402.700620] should_failslab+0x5/0x20 [ 2402.701176] kmem_cache_alloc+0x5b/0x310 [ 2402.701770] ? mark_held_locks+0x9e/0xe0 [ 2402.702365] create_object.isra.0+0x3a/0xa20 [ 2402.703012] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2402.703760] kmem_cache_alloc_bulk+0x168/0x320 [ 2402.704446] io_submit_sqes+0x6f76/0x85c0 [ 2402.705076] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2402.705804] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2402.706517] ? lock_downgrade+0x6d0/0x6d0 [ 2402.707117] ? find_held_lock+0x2c/0x110 [ 2402.707711] ? io_submit_sqes+0x85c0/0x85c0 [ 2402.708351] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2402.709057] ? wait_for_completion_io+0x270/0x270 [ 2402.709767] ? rcu_read_lock_any_held+0x75/0xa0 [ 2402.709791] FAULT_INJECTION: forcing a failure. [ 2402.709791] name failslab, interval 1, probability 0, space 0, times 0 [ 2402.712057] ? vfs_write+0x354/0xa70 [ 2402.712616] ? fput_many+0x2f/0x1a0 [ 2402.713152] ? ksys_write+0x1a9/0x260 [ 2402.713719] ? __ia32_sys_read+0xb0/0xb0 [ 2402.714323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.715114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.715869] do_syscall_64+0x33/0x40 [ 2402.716428] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2402.717170] RIP: 0033:0x7f705a641b19 [ 2402.717728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2402.720388] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2402.721491] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2402.722526] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2402.723553] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.724581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.725612] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2402.726680] CPU: 1 PID: 14137 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2402.727728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2402.728933] Call Trace: [ 2402.729337] dump_stack+0x107/0x167 [ 2402.729884] should_fail.cold+0x5/0xa [ 2402.730460] ? create_io_worker+0xe8/0x620 [ 2402.731098] should_failslab+0x5/0x20 [ 2402.731669] kmem_cache_alloc_node_trace+0x59/0x340 [ 2402.732418] create_io_worker+0xe8/0x620 [ 2402.733018] io_wqe_enqueue+0x69e/0xbe0 [ 2402.733605] ? create_worker_cb+0x260/0x260 [ 2402.734236] ? io_wq_work_match_all+0x10/0x10 [ 2402.734905] ? io_prep_async_work+0x340/0x550 [ 2402.735595] io_queue_async_work+0x26b/0x4f0 [ 2402.736258] __io_queue_sqe+0x5cc/0x9d0 [ 2402.736843] ? io_issue_sqe+0x7700/0x7700 [ 2402.737461] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2402.738158] io_submit_sqes+0x4461/0x85c0 [ 2402.738805] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2402.739531] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2402.740246] ? lock_downgrade+0x6d0/0x6d0 [ 2402.740853] ? find_held_lock+0x2c/0x110 [ 2402.741460] ? io_submit_sqes+0x85c0/0x85c0 [ 2402.742105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2402.742832] ? wait_for_completion_io+0x270/0x270 [ 2402.743552] ? rcu_read_lock_any_held+0x75/0xa0 [ 2402.744242] ? vfs_write+0x354/0xa70 [ 2402.744793] ? fput_many+0x2f/0x1a0 [ 2402.745329] ? ksys_write+0x1a9/0x260 [ 2402.745891] ? __ia32_sys_read+0xb0/0xb0 [ 2402.746510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2402.747283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2402.748046] do_syscall_64+0x33/0x40 [ 2402.748599] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2402.749353] RIP: 0033:0x7fa6ace83b19 [ 2402.749912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2402.752599] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2402.753723] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2402.754772] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2402.755821] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2402.756866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2402.757916] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2402.763024] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2402.777990] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:10:49 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x0, 0x1000, 0x400, &(0x7f0000ff5000/0x1000)=nil) [ 2402.816345] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2402.817538] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2402.818629] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:10:50 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ff7000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) shmctl$SHM_LOCK(r0, 0xb) [ 2402.876703] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2416.681712] FAULT_INJECTION: forcing a failure. [ 2416.681712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2416.683545] CPU: 0 PID: 14189 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2416.684133] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2416.684583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.684590] Call Trace: [ 2416.684618] dump_stack+0x107/0x167 [ 2416.685757] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2416.686983] should_fail.cold+0x5/0xa [ 2416.687011] __alloc_pages_nodemask+0x182/0x600 [ 2416.687034] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2416.687442] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2416.687946] ? lock_downgrade+0x6d0/0x6d0 [ 2416.687967] ? lock_acquire+0x197/0x470 [ 2416.693373] alloc_pages_vma+0xbb/0x410 [ 2416.693977] shmem_alloc_page+0x10f/0x1e0 [ 2416.694604] ? shmem_init_inode+0x20/0x20 [ 2416.695266] ? percpu_counter_add_batch+0x8b/0x140 [ 2416.696003] ? __vm_enough_memory+0x184/0x360 [ 2416.696686] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2416.697510] ? shmem_unuse_inode+0xf60/0xf60 [ 2416.698170] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2416.698949] shmem_write_begin+0xf7/0x1d0 [ 2416.699574] generic_perform_write+0x20a/0x4f0 [ 2416.700271] ? page_cache_prev_miss+0x310/0x310 [ 2416.700974] ? evict_inodes+0x420/0x420 [ 2416.701583] ? generic_write_checks+0x2ad/0x390 [ 2416.702278] __generic_file_write_iter+0x39d/0x5d0 [ 2416.703036] generic_file_write_iter+0xdb/0x230 [ 2416.703728] ? iov_iter_init+0x3c/0x130 [ 2416.704331] new_sync_write+0x42c/0x660 [ 2416.704938] ? new_sync_read+0x6f0/0x6f0 [ 2416.705550] ? __x64_sys_pwrite64+0x201/0x260 [ 2416.706230] ? lock_release+0x680/0x680 [ 2416.706838] ? selinux_file_permission+0x92/0x520 [ 2416.707593] vfs_write+0x747/0xa70 [ 2416.708136] __x64_sys_pwrite64+0x201/0x260 [ 2416.708792] ? ksys_pwrite64+0x1b0/0x1b0 [ 2416.709410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.710201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.710993] do_syscall_64+0x33/0x40 [ 2416.711555] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2416.712325] RIP: 0033:0x7f643d425ab7 [ 2416.712884] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2416.715517] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2416.716608] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2416.717632] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2416.718662] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2416.719686] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2416.720705] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:11:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) 09:11:03 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3c00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:11:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) 09:11:03 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 41) 09:11:03 executing program 0: r0 = creat(&(0x7f0000000300)='./file2\x00', 0x10) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000580)=ANY=[@ANYBLOB="016e2afcd1f47dc6fb04ebda703841c8fe7c955ce2ecebdb9c9b2e1123db25583cdc1f1665e08b65ef439037a1a2413c26841c7b2828d66c4195ed34b79d78edcc97ec2fc0e6fe3ee45360567b55488b0d41d8dad15bfbdbe47dc9aed27d1a0b12189962", @ANYRES32=r1, @ANYBLOB="80000000000000002e2f66696c653000d08565ace708ba028901df67f21889deec3094b3b2493f47afae35175258c9cb7c04fad365064bce6d7435efebca6046299ce02a01b4545f98c931d466d8c3229b1ae48638240909acd12ac66b769bb9d9459bdf879c97"]) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="d4010000170001000000000000000000fc0200000000000000000000000000010000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000ac000700640101020000000000000000000000000a0101010000000000000000000000004e2000004e24003f0a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d4}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r5 = signalfd(r4, &(0x7f0000000240)={[0xffffffff]}, 0x8) pidfd_getfd(0xffffffffffffffff, r5, 0x0) dup3(r4, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080), 0x8000, &(0x7f00000000c0)=ANY=[@ANYBLOB="74726100003d66642c7266646e6f01", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669643d3078303030303030303030303030303030322c7375626a5f747970653d2d9c5c2c5d242c6673757569643d65326434520130312d323763642d626637352d653062342d35630032373b63642c00"]) 09:11:03 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc986, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:11:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 09:11:03 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/249) shmget(0x0, 0x1000, 0x40, &(0x7f0000ff7000/0x1000)=nil) 09:11:03 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r1 = shmget(0x2, 0x4000, 0x80, &(0x7f0000ff7000/0x4000)=nil) shmat(r1, &(0x7f0000ff6000/0x3000)=nil, 0x1000) r2 = shmget(0x0, 0x3000, 0x100, &(0x7f0000ff7000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) shmget(0x0, 0x4000, 0x1, &(0x7f0000ff4000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff6000/0x2000)=nil) shmat(r2, &(0x7f0000ff8000/0x2000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) [ 2416.758514] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2416.767518] FAULT_INJECTION: forcing a failure. [ 2416.767518] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.769275] CPU: 0 PID: 14187 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2416.770272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.771470] Call Trace: [ 2416.771858] dump_stack+0x107/0x167 [ 2416.772390] should_fail.cold+0x5/0xa [ 2416.772944] ? create_object.isra.0+0x3a/0xa20 [ 2416.773603] should_failslab+0x5/0x20 [ 2416.774155] kmem_cache_alloc+0x5b/0x310 [ 2416.774757] ? lock_acquire+0x197/0x470 [ 2416.775338] create_object.isra.0+0x3a/0xa20 [ 2416.775986] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2416.776725] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2416.777460] create_io_worker+0xe8/0x620 [ 2416.778052] io_wqe_enqueue+0x69e/0xbe0 [ 2416.778631] ? create_worker_cb+0x260/0x260 [ 2416.779262] ? io_wq_work_match_all+0x10/0x10 [ 2416.779915] ? io_prep_async_work+0x340/0x550 [ 2416.780568] io_queue_async_work+0x26b/0x4f0 [ 2416.781202] __io_queue_sqe+0x5cc/0x9d0 [ 2416.781786] ? io_issue_sqe+0x7700/0x7700 [ 2416.782389] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2416.783086] io_submit_sqes+0x4461/0x85c0 [ 2416.783714] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2416.784434] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2416.785137] ? lock_downgrade+0x6d0/0x6d0 [ 2416.785191] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2416.785728] ? find_held_lock+0x2c/0x110 [ 2416.785759] ? io_submit_sqes+0x85c0/0x85c0 [ 2416.786876] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2416.787433] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2416.787457] ? wait_for_completion_io+0x270/0x270 [ 2416.788098] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2416.789056] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.789077] ? vfs_write+0x354/0xa70 [ 2416.792626] ? fput_many+0x2f/0x1a0 [ 2416.793162] ? ksys_write+0x1a9/0x260 [ 2416.793714] ? __ia32_sys_read+0xb0/0xb0 [ 2416.794310] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.795071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.795818] do_syscall_64+0x33/0x40 [ 2416.796355] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2416.797095] RIP: 0033:0x7fa6ace83b19 [ 2416.797634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.800246] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2416.801334] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2416.802346] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2416.803375] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.804395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.805431] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2416.808195] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2416.822366] FAULT_INJECTION: forcing a failure. [ 2416.822366] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.824362] CPU: 0 PID: 14195 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2416.825372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.826569] Call Trace: [ 2416.826969] dump_stack+0x107/0x167 [ 2416.827497] should_fail.cold+0x5/0xa [ 2416.828046] ? create_object.isra.0+0x3a/0xa20 [ 2416.828710] ? create_object.isra.0+0x3a/0xa20 [ 2416.829376] should_failslab+0x5/0x20 [ 2416.829931] kmem_cache_alloc+0x5b/0x310 [ 2416.830531] ? mark_held_locks+0x9e/0xe0 [ 2416.831140] create_object.isra.0+0x3a/0xa20 [ 2416.831782] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2416.832530] kmem_cache_alloc_bulk+0x168/0x320 [ 2416.833193] io_submit_sqes+0x6f76/0x85c0 [ 2416.833832] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2416.834556] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2416.835263] ? lock_downgrade+0x6d0/0x6d0 [ 2416.835854] ? find_held_lock+0x2c/0x110 [ 2416.836442] ? io_submit_sqes+0x85c0/0x85c0 [ 2416.837074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2416.837789] ? wait_for_completion_io+0x270/0x270 09:11:04 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) sendfile(r0, r0, 0x0, 0x10001) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2416.838485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2416.839305] ? vfs_write+0x354/0xa70 [ 2416.839856] ? fput_many+0x2f/0x1a0 [ 2416.840388] ? ksys_write+0x1a9/0x260 [ 2416.840938] ? __ia32_sys_read+0xb0/0xb0 [ 2416.841535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2416.842284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2416.843059] do_syscall_64+0x33/0x40 [ 2416.843603] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2416.844343] RIP: 0033:0x7f705a641b19 [ 2416.844887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.847556] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2416.848648] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2416.849668] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2416.850693] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2416.851719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.852772] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2416.886458] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2416.908854] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:11:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 09:11:16 executing program 0: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(0xffffffffffffffff, r1, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000040)=0x5a1c, 0x4) 09:11:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) [ 2429.507838] FAULT_INJECTION: forcing a failure. [ 2429.507838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2429.509036] CPU: 0 PID: 14225 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2429.509663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.510414] Call Trace: [ 2429.510657] dump_stack+0x107/0x167 [ 2429.510991] should_fail.cold+0x5/0xa 09:11:16 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xca86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:11:16 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 42) [ 2429.511341] __alloc_pages_nodemask+0x182/0x600 [ 2429.511865] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 09:11:16 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/30) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/2) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 09:11:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3e00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:11:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 2429.512397] ? lock_downgrade+0x6d0/0x6d0 [ 2429.512821] ? lock_acquire+0x197/0x470 [ 2429.513182] alloc_pages_vma+0xbb/0x410 [ 2429.513541] shmem_alloc_page+0x10f/0x1e0 [ 2429.513904] ? shmem_init_inode+0x20/0x20 [ 2429.514284] ? percpu_counter_add_batch+0x8b/0x140 [ 2429.514717] ? __vm_enough_memory+0x184/0x360 [ 2429.515120] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2429.515598] ? shmem_unuse_inode+0xf60/0xf60 [ 2429.515988] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2429.516439] shmem_write_begin+0xf7/0x1d0 [ 2429.516809] generic_perform_write+0x20a/0x4f0 [ 2429.517220] ? page_cache_prev_miss+0x310/0x310 [ 2429.517629] ? evict_inodes+0x420/0x420 [ 2429.517984] ? generic_write_checks+0x2ad/0x390 [ 2429.518398] __generic_file_write_iter+0x39d/0x5d0 [ 2429.518841] generic_file_write_iter+0xdb/0x230 [ 2429.519246] ? iov_iter_init+0x3c/0x130 [ 2429.519599] new_sync_write+0x42c/0x660 [ 2429.519950] ? new_sync_read+0x6f0/0x6f0 [ 2429.520307] ? __x64_sys_pwrite64+0x201/0x260 [ 2429.520703] ? lock_release+0x680/0x680 [ 2429.521053] ? selinux_file_permission+0x92/0x520 [ 2429.521488] vfs_write+0x747/0xa70 [ 2429.521803] __x64_sys_pwrite64+0x201/0x260 [ 2429.522183] ? ksys_pwrite64+0x1b0/0x1b0 [ 2429.522544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.523015] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.523476] do_syscall_64+0x33/0x40 [ 2429.523807] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2429.524257] RIP: 0033:0x7f643d425ab7 [ 2429.524583] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2429.526175] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2429.526854] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2429.527476] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2429.528096] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2429.528718] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2429.529339] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2429.536345] FAULT_INJECTION: forcing a failure. [ 2429.536345] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.538299] CPU: 1 PID: 14226 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2429.539398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.539754] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2429.540625] Call Trace: [ 2429.540647] dump_stack+0x107/0x167 [ 2429.540667] should_fail.cold+0x5/0xa [ 2429.540687] ? create_object.isra.0+0x3a/0xa20 [ 2429.540708] should_failslab+0x5/0x20 [ 2429.541379] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2429.541755] kmem_cache_alloc+0x5b/0x310 [ 2429.542087] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2429.542627] ? lock_acquire+0x197/0x470 [ 2429.546882] create_object.isra.0+0x3a/0xa20 [ 2429.547548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2429.548312] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2429.549083] create_io_worker+0xe8/0x620 [ 2429.549705] io_wqe_enqueue+0x69e/0xbe0 [ 2429.550313] ? create_worker_cb+0x260/0x260 [ 2429.550976] ? io_prep_async_work+0x340/0x550 [ 2429.551647] io_queue_async_work+0x26b/0x4f0 [ 2429.552305] __io_queue_sqe+0x5cc/0x9d0 [ 2429.552912] ? io_issue_sqe+0x7700/0x7700 [ 2429.553539] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2429.554251] io_submit_sqes+0x4461/0x85c0 [ 2429.554913] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2429.555657] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2429.556377] ? lock_downgrade+0x6d0/0x6d0 [ 2429.556989] ? find_held_lock+0x2c/0x110 [ 2429.557600] ? io_submit_sqes+0x85c0/0x85c0 [ 2429.558253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2429.558979] ? wait_for_completion_io+0x270/0x270 [ 2429.559696] ? rcu_read_lock_any_held+0x75/0xa0 [ 2429.560389] ? vfs_write+0x354/0xa70 [ 2429.560944] ? fput_many+0x2f/0x1a0 [ 2429.561490] ? ksys_write+0x1a9/0x260 [ 2429.562059] ? __ia32_sys_read+0xb0/0xb0 [ 2429.562672] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.563462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.564247] do_syscall_64+0x33/0x40 [ 2429.564803] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2429.565556] RIP: 0033:0x7f705a641b19 [ 2429.566115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.568826] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2429.569949] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2429.571006] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2429.572059] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2429.573104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2429.574150] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2429.597602] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2429.608643] FAULT_INJECTION: forcing a failure. [ 2429.608643] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.610489] CPU: 1 PID: 14222 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2429.611511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.612606] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2429.612714] Call Trace: [ 2429.613708] dump_stack+0x107/0x167 [ 2429.614248] should_fail.cold+0x5/0xa [ 2429.614815] ? create_io_worker+0xe8/0x620 [ 2429.615436] should_failslab+0x5/0x20 [ 2429.615994] kmem_cache_alloc_node_trace+0x59/0x340 [ 2429.616730] create_io_worker+0xe8/0x620 [ 2429.617327] io_wqe_enqueue+0x69e/0xbe0 [ 2429.617918] ? create_worker_cb+0x260/0x260 [ 2429.618549] ? io_wq_work_match_all+0x10/0x10 [ 2429.619212] ? io_prep_async_work+0x340/0x550 [ 2429.619873] io_queue_async_work+0x26b/0x4f0 [ 2429.620524] __io_queue_sqe+0x5cc/0x9d0 [ 2429.621110] ? io_issue_sqe+0x7700/0x7700 [ 2429.621728] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2429.622421] io_submit_sqes+0x4461/0x85c0 [ 2429.623066] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2429.623795] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2429.624504] ? lock_downgrade+0x6d0/0x6d0 [ 2429.625114] ? find_held_lock+0x2c/0x110 [ 2429.625716] ? io_submit_sqes+0x85c0/0x85c0 [ 2429.626359] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2429.627077] ? wait_for_completion_io+0x270/0x270 [ 2429.627786] ? rcu_read_lock_any_held+0x75/0xa0 [ 2429.628469] ? vfs_write+0x354/0xa70 [ 2429.629017] ? fput_many+0x2f/0x1a0 [ 2429.629557] ? ksys_write+0x1a9/0x260 [ 2429.630121] ? __ia32_sys_read+0xb0/0xb0 [ 2429.630728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.631496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.632252] do_syscall_64+0x33/0x40 [ 2429.632797] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2429.633544] RIP: 0033:0x7fa6ace83b19 [ 2429.634087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.636742] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2429.637839] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2429.638875] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2429.639906] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2429.640933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2429.641959] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2429.669192] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2429.669877] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2429.670510] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2429.673822] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:11:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2429.692932] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:11:16 executing program 2: shmget(0x1, 0x3000, 0x800, &(0x7f0000ff8000/0x3000)=nil) 09:11:16 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90002000}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2429.721503] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:11:16 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 43) 09:11:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000009, 0x4000010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x2}, 0x2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r1, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x100000000000000, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x51c7, 0x0, 0x0, 0x0, 0xffffffffffffff9e) [ 2429.754513] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:11:16 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xcb86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:11:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 09:11:17 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0xfc, "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"}, &(0x7f0000000180)=0x120) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) creat(&(0x7f00000001c0)='./file0\x00', 0x88) [ 2429.797778] FAULT_INJECTION: forcing a failure. [ 2429.797778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2429.798739] CPU: 0 PID: 14258 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2429.799294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.799936] Call Trace: [ 2429.800149] dump_stack+0x107/0x167 [ 2429.800437] should_fail.cold+0x5/0xa [ 2429.800740] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2429.801170] ? shmem_write_begin+0xf7/0x1d0 [ 2429.801510] ? shmem_write_begin+0x100/0x1d0 [ 2429.801877] generic_perform_write+0x279/0x4f0 [ 2429.802244] ? page_cache_prev_miss+0x310/0x310 [ 2429.802621] ? evict_inodes+0x420/0x420 [ 2429.802943] ? generic_write_checks+0x2ad/0x390 [ 2429.803320] __generic_file_write_iter+0x39d/0x5d0 [ 2429.803712] generic_file_write_iter+0xdb/0x230 [ 2429.804091] ? iov_iter_init+0x3c/0x130 [ 2429.804408] new_sync_write+0x42c/0x660 [ 2429.804729] ? new_sync_read+0x6f0/0x6f0 [ 2429.805056] ? __x64_sys_pwrite64+0x201/0x260 [ 2429.805413] ? lock_release+0x680/0x680 [ 2429.805741] ? selinux_file_permission+0x92/0x520 [ 2429.806132] vfs_write+0x747/0xa70 [ 2429.806430] __x64_sys_pwrite64+0x201/0x260 [ 2429.806777] ? ksys_pwrite64+0x1b0/0x1b0 [ 2429.807101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.807513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.807939] do_syscall_64+0x33/0x40 [ 2429.808237] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2429.808646] RIP: 0033:0x7f643d425ab7 [ 2429.808944] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2429.810413] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2429.811018] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2429.811577] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2429.812132] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2429.812691] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2429.813250] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:11:17 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x5) 09:11:17 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2429.856476] FAULT_INJECTION: forcing a failure. [ 2429.856476] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.857441] CPU: 0 PID: 14260 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2429.857982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.858631] Call Trace: [ 2429.858853] dump_stack+0x107/0x167 [ 2429.859143] should_fail.cold+0x5/0xa [ 2429.859448] ? create_object.isra.0+0x3a/0xa20 [ 2429.859818] should_failslab+0x5/0x20 [ 2429.860121] kmem_cache_alloc+0x5b/0x310 [ 2429.860449] ? mark_held_locks+0x9e/0xe0 [ 2429.860775] create_object.isra.0+0x3a/0xa20 [ 2429.861122] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2429.861525] kmem_cache_alloc_bulk+0x168/0x320 [ 2429.861894] io_submit_sqes+0x6f76/0x85c0 [ 2429.862237] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2429.862637] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2429.863028] ? lock_downgrade+0x6d0/0x6d0 [ 2429.863353] ? find_held_lock+0x2c/0x110 [ 2429.863679] ? io_submit_sqes+0x85c0/0x85c0 [ 2429.864029] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2429.864415] ? wait_for_completion_io+0x270/0x270 [ 2429.864801] ? rcu_read_lock_any_held+0x75/0xa0 [ 2429.865171] ? vfs_write+0x354/0xa70 [ 2429.865466] ? fput_many+0x2f/0x1a0 [ 2429.865755] ? ksys_write+0x1a9/0x260 [ 2429.866058] ? __ia32_sys_read+0xb0/0xb0 [ 2429.866382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.866806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.867220] do_syscall_64+0x33/0x40 [ 2429.867517] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2429.867925] RIP: 0033:0x7f705a641b19 [ 2429.868223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.869658] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2429.870257] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2429.870826] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2429.871388] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2429.871948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2429.872511] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2429.911689] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2429.913070] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2429.914205] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2429.929854] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2429.936309] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2429.937539] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2429.938742] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2429.947632] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:11:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x88, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000400)={0x1, r6}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:11:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) [ 2430.010750] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2430.075002] FAULT_INJECTION: forcing a failure. [ 2430.075002] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.077093] CPU: 1 PID: 14281 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2430.078086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.079285] Call Trace: [ 2430.079676] dump_stack+0x107/0x167 [ 2430.080210] should_fail.cold+0x5/0xa [ 2430.080770] ? create_object.isra.0+0x3a/0xa20 [ 2430.081445] should_failslab+0x5/0x20 [ 2430.082002] kmem_cache_alloc+0x5b/0x310 [ 2430.082606] create_object.isra.0+0x3a/0xa20 [ 2430.083263] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2430.084015] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2430.084762] create_io_worker+0xe8/0x620 [ 2430.085360] io_wqe_enqueue+0x69e/0xbe0 [ 2430.085952] ? create_worker_cb+0x260/0x260 [ 2430.086582] ? io_wq_work_match_all+0x10/0x10 [ 2430.087253] ? io_prep_async_work+0x340/0x550 [ 2430.087913] io_queue_async_work+0x26b/0x4f0 [ 2430.088565] __io_queue_sqe+0x5cc/0x9d0 [ 2430.089162] ? io_issue_sqe+0x7700/0x7700 [ 2430.089767] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2430.090472] io_submit_sqes+0x4461/0x85c0 [ 2430.091122] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2430.091855] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2430.092571] ? lock_downgrade+0x6d0/0x6d0 [ 2430.093185] ? find_held_lock+0x2c/0x110 [ 2430.093774] ? io_submit_sqes+0x85c0/0x85c0 [ 2430.094423] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2430.095144] ? wait_for_completion_io+0x270/0x270 [ 2430.095856] ? rcu_read_lock_any_held+0x75/0xa0 [ 2430.096544] ? vfs_write+0x354/0xa70 [ 2430.097103] ? fput_many+0x2f/0x1a0 [ 2430.097629] ? ksys_write+0x1a9/0x260 [ 2430.098199] ? __ia32_sys_read+0xb0/0xb0 [ 2430.098817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2430.099595] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2430.100369] do_syscall_64+0x33/0x40 [ 2430.100903] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2430.101678] RIP: 0033:0x7fa6ace83b19 [ 2430.102238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.104920] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2430.106055] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2430.107123] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2430.108189] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.109253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2430.110313] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:11:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) 09:11:30 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r1 = fork() setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r1, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x80, 0x8, 0x3, 0x2, 0x0, 0x45dab0dd, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x5, 0x1f}, 0x3040, 0x2, 0x5, 0x108a49302aee732c, 0x9, 0x2, 0x3, 0x0, 0x7c8, 0x0, 0x1ff}, r1, 0x3, 0xffffffffffffffff, 0x7) 09:11:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) unshare(0x44000000) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:11:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4200, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:11:30 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080), &(0x7f0000000200)={0x0, 0xfb, 0xc8, 0x5, 0x81, "c6bd0fc038f443cdd8c4ce3503d6efd8", "d25f7b46eb263bd79d450e525c146101ba3b723cec4c3de81dff3fbaa22cc5609f2af2bf801243a13b3192613c73f410dd584c6431b7b176e7f506ec06ff7b59fadd8b111277d860950a98f631442b3ea5f4d0ec900343d58dd46fa0a24b12da5abba23829c1b95525c8e6657b9f05b54633da07fe87bfa290d2b9c0ff3e436606a46d4200ea9d1233785963c1e93baf0ba8139cf3d0541db3e170a7e832a33e9a6e7e4b312a2f472da80b13761f3081ac99de"}, 0xc8, 0x3) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) dup3(r1, r0, 0x0) 09:11:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 09:11:30 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 44) [ 2443.635912] FAULT_INJECTION: forcing a failure. [ 2443.635912] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2443.636991] CPU: 1 PID: 14297 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2443.637595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.638295] Call Trace: [ 2443.638539] dump_stack+0x107/0x167 [ 2443.638855] should_fail.cold+0x5/0xa [ 2443.639199] __alloc_pages_nodemask+0x182/0x600 [ 2443.639610] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2443.640114] ? lock_downgrade+0x6d0/0x6d0 [ 2443.640468] ? lock_acquire+0x197/0x470 [ 2443.640831] alloc_pages_vma+0xbb/0x410 [ 2443.641176] shmem_alloc_page+0x10f/0x1e0 [ 2443.641538] ? shmem_init_inode+0x20/0x20 [ 2443.641905] ? percpu_counter_add_batch+0x8b/0x140 [ 2443.642321] ? __vm_enough_memory+0x184/0x360 [ 2443.642712] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2443.643183] ? shmem_unuse_inode+0xf60/0xf60 [ 2443.643566] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2443.643998] shmem_write_begin+0xf7/0x1d0 [ 2443.644353] generic_perform_write+0x20a/0x4f0 [ 2443.644762] ? page_cache_prev_miss+0x310/0x310 [ 2443.645156] ? evict_inodes+0x420/0x420 [ 2443.645507] ? generic_write_checks+0x2ad/0x390 [ 2443.645914] __generic_file_write_iter+0x39d/0x5d0 [ 2443.646332] generic_file_write_iter+0xdb/0x230 [ 2443.646733] ? iov_iter_init+0x3c/0x130 [ 2443.647081] new_sync_write+0x42c/0x660 [ 2443.647418] ? new_sync_read+0x6f0/0x6f0 [ 2443.647775] ? __x64_sys_pwrite64+0x201/0x260 [ 2443.648157] ? lock_release+0x680/0x680 [ 2443.648503] ? selinux_file_permission+0x92/0x520 [ 2443.648933] vfs_write+0x747/0xa70 [ 2443.649245] __x64_sys_pwrite64+0x201/0x260 [ 2443.649620] ? ksys_pwrite64+0x1b0/0x1b0 [ 2443.649971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.650418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.650869] do_syscall_64+0x33/0x40 [ 2443.651196] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.651640] RIP: 0033:0x7f643d425ab7 [ 2443.651955] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2443.653521] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2443.654164] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2443.654775] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2443.655386] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2443.655997] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2443.656614] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2443.669123] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:11:30 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xcc02, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2443.683736] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2443.684503] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2443.685150] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2443.688970] FAULT_INJECTION: forcing a failure. [ 2443.688970] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.690126] CPU: 1 PID: 14295 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2443.690718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.691424] Call Trace: [ 2443.691678] dump_stack+0x107/0x167 [ 2443.691990] should_fail.cold+0x5/0xa [ 2443.692326] ? create_object.isra.0+0x3a/0xa20 [ 2443.692722] should_failslab+0x5/0x20 [ 2443.693043] kmem_cache_alloc+0x5b/0x310 [ 2443.693384] ? lock_acquire+0x197/0x470 [ 2443.693738] create_object.isra.0+0x3a/0xa20 [ 2443.694118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2443.694565] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2443.695014] create_io_worker+0xe8/0x620 [ 2443.695357] io_wqe_enqueue+0x69e/0xbe0 [ 2443.695767] ? create_worker_cb+0x260/0x260 [ 2443.696222] ? io_wq_work_match_all+0x10/0x10 [ 2443.696690] ? io_prep_async_work+0x340/0x550 [ 2443.697181] io_queue_async_work+0x26b/0x4f0 [ 2443.697649] __io_queue_sqe+0x5cc/0x9d0 [ 2443.698060] ? io_issue_sqe+0x7700/0x7700 [ 2443.698489] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2443.698897] io_submit_sqes+0x4461/0x85c0 [ 2443.699262] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2443.699698] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2443.700106] ? lock_downgrade+0x6d0/0x6d0 [ 2443.700461] ? find_held_lock+0x2c/0x110 [ 2443.700814] ? io_submit_sqes+0x85c0/0x85c0 [ 2443.701191] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2443.701604] ? wait_for_completion_io+0x270/0x270 [ 2443.702015] ? rcu_read_lock_any_held+0x75/0xa0 [ 2443.702402] ? vfs_write+0x354/0xa70 [ 2443.702721] ? fput_many+0x2f/0x1a0 [ 2443.703038] ? ksys_write+0x1a9/0x260 [ 2443.703357] ? __ia32_sys_read+0xb0/0xb0 [ 2443.703725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.704162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.704610] do_syscall_64+0x33/0x40 [ 2443.704920] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.705345] RIP: 0033:0x7f705a641b19 [ 2443.705665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.707210] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2443.707853] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2443.708438] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2443.709037] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2443.709625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2443.710215] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:11:30 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r2, r1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2443.721477] FAULT_INJECTION: forcing a failure. [ 2443.721477] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.723439] CPU: 0 PID: 14299 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2443.724459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.725669] Call Trace: [ 2443.726065] dump_stack+0x107/0x167 [ 2443.726604] should_fail.cold+0x5/0xa [ 2443.727181] ? create_io_worker+0xe8/0x620 [ 2443.727806] should_failslab+0x5/0x20 [ 2443.728371] kmem_cache_alloc_node_trace+0x59/0x340 [ 2443.729111] create_io_worker+0xe8/0x620 [ 2443.729709] io_wqe_enqueue+0x69e/0xbe0 [ 2443.730302] ? create_worker_cb+0x260/0x260 [ 2443.730942] ? io_wq_work_match_all+0x10/0x10 [ 2443.731603] ? io_prep_async_work+0x340/0x550 [ 2443.732270] io_queue_async_work+0x26b/0x4f0 [ 2443.732918] __io_queue_sqe+0x5cc/0x9d0 [ 2443.733505] ? io_issue_sqe+0x7700/0x7700 [ 2443.734128] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2443.734825] io_submit_sqes+0x4461/0x85c0 [ 2443.735481] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2443.736209] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2443.736920] ? lock_downgrade+0x6d0/0x6d0 [ 2443.737524] ? find_held_lock+0x2c/0x110 [ 2443.738128] ? io_submit_sqes+0x85c0/0x85c0 [ 2443.738775] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2443.739488] ? wait_for_completion_io+0x270/0x270 [ 2443.740199] ? rcu_read_lock_any_held+0x75/0xa0 [ 2443.740882] ? vfs_write+0x354/0xa70 [ 2443.741421] ? fput_many+0x2f/0x1a0 [ 2443.741956] ? ksys_write+0x1a9/0x260 [ 2443.742518] ? __ia32_sys_read+0xb0/0xb0 [ 2443.743128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.743896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.744658] do_syscall_64+0x33/0x40 [ 2443.745198] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.745946] RIP: 0033:0x7fa6ace83b19 [ 2443.746490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.749157] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2443.750262] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2443.751311] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2443.752344] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2443.753370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2443.754407] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:11:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) [ 2443.775246] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2443.777915] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2443.779191] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2443.780287] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2443.820447] FAULT_INJECTION: forcing a failure. [ 2443.820447] name failslab, interval 1, probability 0, space 0, times 0 [ 2443.822365] CPU: 0 PID: 14323 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2443.823371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.824554] Call Trace: [ 2443.824936] dump_stack+0x107/0x167 [ 2443.825462] should_fail.cold+0x5/0xa [ 2443.826013] ? create_object.isra.0+0x3a/0xa20 [ 2443.826677] should_failslab+0x5/0x20 [ 2443.827238] kmem_cache_alloc+0x5b/0x310 [ 2443.827829] ? lock_acquire+0x197/0x470 [ 2443.828410] create_object.isra.0+0x3a/0xa20 [ 2443.829045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2443.829784] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2443.830527] create_io_worker+0xe8/0x620 [ 2443.831132] io_wqe_enqueue+0x69e/0xbe0 [ 2443.831710] ? create_worker_cb+0x260/0x260 [ 2443.832336] ? io_prep_async_work+0x340/0x550 [ 2443.832987] io_queue_async_work+0x26b/0x4f0 [ 2443.833627] __io_queue_sqe+0x5cc/0x9d0 [ 2443.834208] ? io_issue_sqe+0x7700/0x7700 [ 2443.834817] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2443.835511] io_submit_sqes+0x4461/0x85c0 [ 2443.836136] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2443.836863] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2443.837561] ? lock_downgrade+0x6d0/0x6d0 [ 2443.838162] ? find_held_lock+0x2c/0x110 [ 2443.838751] ? io_submit_sqes+0x85c0/0x85c0 [ 2443.839412] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2443.840115] ? wait_for_completion_io+0x270/0x270 [ 2443.840815] ? rcu_read_lock_any_held+0x75/0xa0 [ 2443.841484] ? vfs_write+0x354/0xa70 [ 2443.842026] ? fput_many+0x2f/0x1a0 [ 2443.842555] ? ksys_write+0x1a9/0x260 [ 2443.843115] ? __ia32_sys_read+0xb0/0xb0 [ 2443.843708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2443.844464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2443.845210] do_syscall_64+0x33/0x40 [ 2443.845747] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2443.846483] RIP: 0033:0x7f705a641b19 [ 2443.847035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.849658] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2443.850755] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2443.851785] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2443.852811] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2443.853832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2443.854856] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2443.864639] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2443.873316] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:11:31 executing program 0: close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x1}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0xffff, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r1, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xa, 0x1, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in6=@remote, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x3ff, 0x1, 0xfffffc01}}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000000)=ANY=[], 0x26, 0x0, 0x3000) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xeb, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xa08a}], 0x1, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) 09:11:31 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xcc86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:11:31 executing program 2: fstat(0xffffffffffffffff, &(0x7f0000000000)) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:11:31 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:11:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4400, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:11:31 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 45) 09:11:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 09:11:31 executing program 2: shmget(0x3, 0x1000, 0x100, &(0x7f0000ff7000/0x1000)=nil) [ 2444.075619] FAULT_INJECTION: forcing a failure. [ 2444.075619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2444.076650] CPU: 1 PID: 14350 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2444.077213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2444.077884] Call Trace: [ 2444.078105] dump_stack+0x107/0x167 [ 2444.078404] should_fail.cold+0x5/0xa [ 2444.078732] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2444.079181] ? shmem_write_begin+0xf7/0x1d0 [ 2444.079541] ? shmem_write_begin+0x100/0x1d0 [ 2444.079899] generic_perform_write+0x279/0x4f0 [ 2444.080275] ? page_cache_prev_miss+0x310/0x310 [ 2444.080666] ? evict_inodes+0x420/0x420 [ 2444.080993] ? generic_write_checks+0x2ad/0x390 [ 2444.081373] __generic_file_write_iter+0x39d/0x5d0 [ 2444.081783] generic_file_write_iter+0xdb/0x230 [ 2444.082151] ? iov_iter_init+0x3c/0x130 [ 2444.082482] new_sync_write+0x42c/0x660 [ 2444.082821] ? new_sync_read+0x6f0/0x6f0 [ 2444.083166] ? __x64_sys_pwrite64+0x201/0x260 [ 2444.083541] ? lock_release+0x680/0x680 [ 2444.083862] ? selinux_file_permission+0x92/0x520 [ 2444.084270] vfs_write+0x747/0xa70 [ 2444.084573] __x64_sys_pwrite64+0x201/0x260 [ 2444.084928] ? ksys_pwrite64+0x1b0/0x1b0 [ 2444.085257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2444.085688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2444.086100] do_syscall_64+0x33/0x40 [ 2444.086403] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2444.086833] RIP: 0033:0x7f643d425ab7 [ 2444.087144] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2444.088635] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2444.089252] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2444.089829] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2444.090389] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2444.090984] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2444.091565] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:11:31 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmat(r1, &(0x7f0000ff6000/0x3000)=nil, 0x2000) 09:11:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4600, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:11:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x24020280) r1 = syz_io_uring_setup(0x4b89, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) process_madvise(r7, &(0x7f0000000200)=[{&(0x7f0000000300)="21c3ad7dbea90300c0e9828ddb74bf1d2869ef0db85b9095d92beefe5540b51d40e361305f66dd57de36e64d52c3e8d06cf82afb7bca774f55e4957c15614aec2d564d0be04d6e0e795074d83357", 0x4e}], 0x1, 0xc, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:11:31 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff5000/0x3000)=nil) [ 2444.137297] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2444.137938] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2444.138629] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2444.165938] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2444.190772] FAULT_INJECTION: forcing a failure. [ 2444.190772] name failslab, interval 1, probability 0, space 0, times 0 [ 2444.192874] CPU: 0 PID: 14356 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2444.193906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2444.195157] Call Trace: [ 2444.195554] dump_stack+0x107/0x167 [ 2444.196108] should_fail.cold+0x5/0xa [ 2444.196665] ? create_object.isra.0+0x3a/0xa20 [ 2444.197342] should_failslab+0x5/0x20 [ 2444.197909] kmem_cache_alloc+0x5b/0x310 [ 2444.198502] ? lock_acquire+0x197/0x470 [ 2444.199125] create_object.isra.0+0x3a/0xa20 [ 2444.199769] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2444.200527] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2444.201287] create_io_worker+0xe8/0x620 [ 2444.201898] io_wqe_enqueue+0x69e/0xbe0 [ 2444.202486] ? create_worker_cb+0x260/0x260 [ 2444.203152] ? io_wq_work_match_all+0x10/0x10 [ 2444.203813] ? io_prep_async_work+0x340/0x550 [ 2444.204473] io_queue_async_work+0x26b/0x4f0 [ 2444.205126] __io_queue_sqe+0x5cc/0x9d0 [ 2444.205714] ? io_issue_sqe+0x7700/0x7700 [ 2444.206343] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2444.207075] io_submit_sqes+0x4461/0x85c0 [ 2444.207713] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2444.208458] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2444.209178] ? lock_downgrade+0x6d0/0x6d0 [ 2444.209779] ? find_held_lock+0x2c/0x110 [ 2444.210392] ? io_submit_sqes+0x85c0/0x85c0 [ 2444.211077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2444.211785] ? wait_for_completion_io+0x270/0x270 [ 2444.212506] ? rcu_read_lock_any_held+0x75/0xa0 [ 2444.213193] ? vfs_write+0x354/0xa70 [ 2444.213740] ? fput_many+0x2f/0x1a0 [ 2444.214284] ? ksys_write+0x1a9/0x260 [ 2444.214868] ? __ia32_sys_read+0xb0/0xb0 [ 2444.215479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2444.216254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2444.217018] do_syscall_64+0x33/0x40 [ 2444.217560] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2444.218316] RIP: 0033:0x7fa6ace83b19 [ 2444.218883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2444.221539] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2444.222650] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2444.223708] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2444.224741] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2444.225776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2444.226830] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 09:11:44 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xcd86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:11:44 executing program 3: unshare(0x20080) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0x1, 0x4, 0x0, 0x14b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f0000000840)=""/127, 0x7f}], 0x6, &(0x7f0000000940)=""/171, 0xab}, 0x0, 0x40000000}, 0x7) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x80, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x80000, 0x1, {0x0, r3}}, 0x9) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x100000e, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300), 0x4) syz_io_uring_submit(0x0, r2, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000000000042fbc5000ad2fa8f1aad8d733d2d050c108f58657612feb9b3742be1d238fd10f330aca639d3205b83cdeede3026e1435dad28f842e5e4093a189ec5000000000000000000003800000000cf9dd6487072f34f022c6636c6816c3198b8e550"]) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:11:44 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={r2, r3+60000000}, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) close(r5) sendfile(r5, r4, &(0x7f0000000000)=0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xfffffffb}}, './file0\x00'}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) openat2(r7, &(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x410302, 0x82, 0x11}, 0x18) 09:11:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) 09:11:44 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r1 = shmget$private(0x0, 0x3000, 0x880, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmget(0x2, 0x1000, 0x100, &(0x7f0000ff7000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7800) 09:11:44 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 46) 09:11:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 09:11:44 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4800, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2457.822078] FAULT_INJECTION: forcing a failure. [ 2457.822078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2457.823986] CPU: 1 PID: 14383 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2457.825063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.826350] Call Trace: [ 2457.826775] dump_stack+0x107/0x167 [ 2457.827358] should_fail.cold+0x5/0xa [ 2457.827961] __alloc_pages_nodemask+0x182/0x600 [ 2457.828695] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2457.829634] ? lock_downgrade+0x6d0/0x6d0 [ 2457.830282] ? lock_acquire+0x197/0x470 [ 2457.830922] alloc_pages_vma+0xbb/0x410 [ 2457.831566] shmem_alloc_page+0x10f/0x1e0 [ 2457.832217] ? shmem_init_inode+0x20/0x20 [ 2457.832897] ? percpu_counter_add_batch+0x8b/0x140 [ 2457.833668] ? __vm_enough_memory+0x184/0x360 [ 2457.834377] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2457.835234] ? shmem_unuse_inode+0xf60/0xf60 [ 2457.835924] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2457.836729] shmem_write_begin+0xf7/0x1d0 [ 2457.837384] generic_perform_write+0x20a/0x4f0 [ 2457.838110] ? page_cache_prev_miss+0x310/0x310 [ 2457.838834] ? evict_inodes+0x420/0x420 [ 2457.839475] ? generic_write_checks+0x2ad/0x390 [ 2457.840214] __generic_file_write_iter+0x39d/0x5d0 [ 2457.840986] generic_file_write_iter+0xdb/0x230 [ 2457.841707] ? iov_iter_init+0x3c/0x130 [ 2457.842337] new_sync_write+0x42c/0x660 [ 2457.842961] ? new_sync_read+0x6f0/0x6f0 [ 2457.843610] ? __x64_sys_pwrite64+0x201/0x260 [ 2457.844316] ? lock_release+0x680/0x680 [ 2457.844938] ? selinux_file_permission+0x92/0x520 [ 2457.845709] vfs_write+0x747/0xa70 [ 2457.846289] __x64_sys_pwrite64+0x201/0x260 [ 2457.846970] ? ksys_pwrite64+0x1b0/0x1b0 [ 2457.847620] FAULT_INJECTION: forcing a failure. [ 2457.847620] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.849332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.850146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.850956] do_syscall_64+0x33/0x40 [ 2457.851547] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.852346] RIP: 0033:0x7f643d425ab7 [ 2457.852928] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2457.855759] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2457.856937] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2457.858041] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2457.859153] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2457.860260] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2457.861365] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2457.862497] CPU: 0 PID: 14390 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2457.863130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.863795] Call Trace: [ 2457.864014] dump_stack+0x107/0x167 [ 2457.864306] should_fail.cold+0x5/0xa [ 2457.864618] ? create_object.isra.0+0x3a/0xa20 [ 2457.864988] should_failslab+0x5/0x20 [ 2457.865301] kmem_cache_alloc+0x5b/0x310 [ 2457.865641] ? lock_acquire+0x197/0x470 [ 2457.865969] create_object.isra.0+0x3a/0xa20 [ 2457.866320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2457.866727] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2457.867137] create_io_worker+0xe8/0x620 [ 2457.867465] io_wqe_enqueue+0x69e/0xbe0 [ 2457.867786] ? create_worker_cb+0x260/0x260 [ 2457.868137] ? io_wq_work_match_all+0x10/0x10 [ 2457.868499] ? io_prep_async_work+0x340/0x550 [ 2457.868853] io_queue_async_work+0x26b/0x4f0 [ 2457.869211] __io_queue_sqe+0x5cc/0x9d0 [ 2457.869533] ? io_issue_sqe+0x7700/0x7700 [ 2457.869870] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2457.870245] io_submit_sqes+0x4461/0x85c0 [ 2457.870592] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2457.870979] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2457.871373] ? lock_downgrade+0x6d0/0x6d0 [ 2457.871702] ? find_held_lock+0x2c/0x110 [ 2457.872024] ? io_submit_sqes+0x85c0/0x85c0 [ 2457.872382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2457.872768] ? wait_for_completion_io+0x270/0x270 [ 2457.873159] ? rcu_read_lock_any_held+0x75/0xa0 [ 2457.873529] ? vfs_write+0x354/0xa70 [ 2457.873830] ? fput_many+0x2f/0x1a0 [ 2457.874118] ? ksys_write+0x1a9/0x260 [ 2457.874426] ? __ia32_sys_read+0xb0/0xb0 [ 2457.874747] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.875174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.875591] do_syscall_64+0x33/0x40 [ 2457.875883] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.876290] RIP: 0033:0x7f705a641b19 [ 2457.876590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.878044] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2457.878657] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2457.879233] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2457.879788] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.880344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.880901] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:11:45 executing program 2: shmget(0x0, 0x3000, 0x1, &(0x7f0000ff5000/0x3000)=nil) 09:11:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000780)=@IORING_OP_WRITEV={0x2, 0x2, 0x2000, @fd=r4, 0x1, &(0x7f0000000740)=[{&(0x7f0000000580)="bccc5f05624f7b29776fbf3da9968c9bbdf67976b2f82117dad4fdda7f4bb32abe0af407907907d39920650de9e675a5ce1ab9de35ecab3ba0b1a1e7f86f1a6f37bc8c04fdb410d99299301532fbc9e0973e4c5e1c004ddb1061a8976f997c2ca273418f5f201e4daf0154b9b34cf9a3b60e77387fc57f2825ff0907ab00bb9bdafffbdb79c21571f80d519457eebd2a7b93c86658d1e9d702fe3678f94eccaac55fa2abf72afb07bafaba6e7ff507f3ae267c2fe966bd6ef33781947bc1996e31add3bb4672844f6051606613e6c10969c86b4c799f370b995652270e36d6640cac10deb807c8f67823", 0xea}, {&(0x7f0000000680)="78cd365e26a36554267c769c8d83f4de680a4b703adb54183789a383622dfeaed8178a1a76968670c7edcd297b6f26ad8540e8b7c0f911ff9f50da88f4", 0x3d}, {&(0x7f00000006c0)="8ac42f48e9a9dbb09fa173bc716e3210a7fbf5e85cc4ca46af293ea9e3bf682caafacb87d952167fe0bc4ca64336bd1edd8762cccb60d350fbf247e384995d461cfaef61ad5ec5492befacd57cc0b8", 0x4f}], 0x3, 0x0, 0x0, {0x1}}, 0x200) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x800, 0x100, 0x1, {0x0, r6}}, 0x7adb30ad) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x40010, r1, 0x0) syz_io_uring_setup(0x224, &(0x7f0000000300)={0x0, 0xe695, 0x28, 0x1, 0x352, 0x0, r1}, &(0x7f0000800000/0x800000)=nil, &(0x7f00009da000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd_index=0x2, 0xfffffffffffffe85, 0x0, 0x0, 0x2, 0x0, {0x2, r6}}, 0xffff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2457.889759] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2457.903326] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2457.903959] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2457.904565] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2457.932342] FAULT_INJECTION: forcing a failure. [ 2457.932342] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.934420] CPU: 1 PID: 14393 Comm: syz-executor.4 Not tainted 5.10.214 #1 [ 2457.935519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.936817] Call Trace: [ 2457.937242] dump_stack+0x107/0x167 [ 2457.937820] should_fail.cold+0x5/0xa [ 2457.938432] ? create_io_worker+0xe8/0x620 [ 2457.939114] should_failslab+0x5/0x20 [ 2457.939724] kmem_cache_alloc_node_trace+0x59/0x340 [ 2457.940526] create_io_worker+0xe8/0x620 [ 2457.941181] io_wqe_enqueue+0x69e/0xbe0 [ 2457.941812] ? create_worker_cb+0x260/0x260 [ 2457.942496] ? io_wq_work_match_all+0x10/0x10 [ 2457.943217] ? io_prep_async_work+0x340/0x550 [ 2457.943936] io_queue_async_work+0x26b/0x4f0 [ 2457.944639] __io_queue_sqe+0x5cc/0x9d0 [ 2457.945274] ? io_issue_sqe+0x7700/0x7700 [ 2457.945939] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2457.946693] io_submit_sqes+0x4461/0x85c0 [ 2457.947384] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2457.948172] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2457.948941] ? lock_downgrade+0x6d0/0x6d0 [ 2457.949598] ? find_held_lock+0x2c/0x110 [ 2457.950249] ? io_submit_sqes+0x85c0/0x85c0 [ 2457.950943] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2457.951714] ? wait_for_completion_io+0x270/0x270 [ 2457.952485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2457.953227] ? vfs_write+0x354/0xa70 [ 2457.953816] ? fput_many+0x2f/0x1a0 [ 2457.954397] ? ksys_write+0x1a9/0x260 [ 2457.955002] ? __ia32_sys_read+0xb0/0xb0 [ 2457.955658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.956483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.957307] do_syscall_64+0x33/0x40 [ 2457.957891] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.958701] RIP: 0033:0x7fa6ace83b19 [ 2457.959302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.962193] RSP: 002b:00007fa6aa3f9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2457.963400] RAX: ffffffffffffffda RBX: 00007fa6acf96f60 RCX: 00007fa6ace83b19 [ 2457.964519] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2457.965638] RBP: 00007fa6aa3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.966762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.967891] R13: 00007ffc15ce1fcf R14: 00007fa6aa3f9300 R15: 0000000000022000 [ 2457.977714] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2457.981484] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:11:45 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xce86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2457.997679] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2457.998386] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2457.998956] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:11:45 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) lseek(r2, 0x0, 0x3) close(r1) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="570006000917844003000000030000022000000008030000000500f9346946efb76b961d00000000008004ee00000300bfd7e624000700000000000000002b6f867ed204b0df8fc5114c24790000000000000016030000000600000000"], 0x57) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008000}, 0x7, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{@pci, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4084) fchdir(r0) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2458.025712] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:11:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x50, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:11:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4a00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2458.086577] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2458.087337] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2458.087914] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:11:45 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 47) 09:11:45 executing program 2: shmget(0x3, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) [ 2458.129908] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2458.159194] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2458.168523] FAULT_INJECTION: forcing a failure. [ 2458.168523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.170481] CPU: 1 PID: 14425 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2458.171566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.172856] Call Trace: [ 2458.173280] dump_stack+0x107/0x167 [ 2458.173855] should_fail.cold+0x5/0xa [ 2458.174466] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2458.175314] ? shmem_write_begin+0xf7/0x1d0 [ 2458.175996] ? shmem_write_begin+0x100/0x1d0 [ 2458.176701] generic_perform_write+0x279/0x4f0 [ 2458.177431] ? page_cache_prev_miss+0x310/0x310 [ 2458.178162] ? evict_inodes+0x420/0x420 [ 2458.178795] ? generic_write_checks+0x2ad/0x390 [ 2458.179542] __generic_file_write_iter+0x39d/0x5d0 [ 2458.180313] generic_file_write_iter+0xdb/0x230 [ 2458.181039] ? iov_iter_init+0x3c/0x130 [ 2458.181669] new_sync_write+0x42c/0x660 [ 2458.182296] ? new_sync_read+0x6f0/0x6f0 [ 2458.182939] ? __x64_sys_pwrite64+0x201/0x260 [ 2458.183650] ? lock_release+0x680/0x680 [ 2458.184280] ? selinux_file_permission+0x92/0x520 [ 2458.185058] vfs_write+0x747/0xa70 [ 2458.185628] __x64_sys_pwrite64+0x201/0x260 [ 2458.186312] ? ksys_pwrite64+0x1b0/0x1b0 [ 2458.186956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2458.187778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.188595] do_syscall_64+0x33/0x40 [ 2458.189177] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2458.189976] RIP: 0033:0x7f643d425ab7 [ 2458.190570] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2458.193449] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2458.194647] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2458.195774] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2458.196894] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2458.198006] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2458.199133] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2458.244847] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2458.285075] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2458.285732] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2458.286339] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2458.293524] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:01 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000040)={0x8, 0x80000001, 0x4, 0xfc8, 0x1, [{0x7, 0x9, 0x1, '\x00', 0x1400}]}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:12:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 09:12:01 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 48) 09:12:01 executing program 2: shmget(0x2, 0x2000, 0x4, &(0x7f0000ff5000/0x2000)=nil) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) 09:12:01 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xcf86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 09:12:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4c00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:12:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x3}, 0x2) unshare(0x20080) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r3, 0x3, 0x0, 0x4, 0x1, 0x3}, 0xce) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2474.192746] FAULT_INJECTION: forcing a failure. [ 2474.192746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2474.194566] CPU: 0 PID: 14455 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2474.195620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2474.196866] Call Trace: [ 2474.197273] dump_stack+0x107/0x167 [ 2474.197827] should_fail.cold+0x5/0xa [ 2474.198411] __alloc_pages_nodemask+0x182/0x600 [ 2474.199123] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2474.200038] ? lock_downgrade+0x6d0/0x6d0 [ 2474.200428] FAULT_INJECTION: forcing a failure. [ 2474.200428] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.200662] ? lock_acquire+0x197/0x470 [ 2474.200699] alloc_pages_vma+0xbb/0x410 [ 2474.203668] shmem_alloc_page+0x10f/0x1e0 [ 2474.204293] ? shmem_init_inode+0x20/0x20 [ 2474.204937] ? percpu_counter_add_batch+0x8b/0x140 [ 2474.205681] ? __vm_enough_memory+0x184/0x360 [ 2474.206364] shmem_getpage_gfp.constprop.0+0x512/0x1920 [ 2474.207180] ? shmem_unuse_inode+0xf60/0xf60 [ 2474.207856] ? __set_page_dirty_no_writeback+0x9e/0x150 [ 2474.208651] ? iov_iter_fault_in_readable+0x9a/0x410 [ 2474.209421] shmem_write_begin+0xf7/0x1d0 [ 2474.210048] generic_perform_write+0x20a/0x4f0 [ 2474.210746] ? page_cache_prev_miss+0x310/0x310 [ 2474.211455] ? evict_inodes+0x420/0x420 [ 2474.212055] ? generic_write_checks+0x2ad/0x390 [ 2474.212762] __generic_file_write_iter+0x39d/0x5d0 [ 2474.213506] generic_file_write_iter+0xdb/0x230 [ 2474.214201] ? iov_iter_init+0x3c/0x130 [ 2474.214801] new_sync_write+0x42c/0x660 [ 2474.215409] ? new_sync_read+0x6f0/0x6f0 [ 2474.216019] ? __x64_sys_pwrite64+0x201/0x260 [ 2474.216698] ? lock_release+0x680/0x680 [ 2474.217297] ? selinux_file_permission+0x92/0x520 [ 2474.218035] vfs_write+0x747/0xa70 [ 2474.218584] __x64_sys_pwrite64+0x201/0x260 [ 2474.219237] ? ksys_pwrite64+0x1b0/0x1b0 [ 2474.219857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2474.220647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2474.221429] do_syscall_64+0x33/0x40 [ 2474.221960] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2474.222727] RIP: 0033:0x7f643d425ab7 [ 2474.223288] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2474.226027] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2474.227167] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2474.228237] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2474.229300] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2474.230363] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2474.231434] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 2474.232535] CPU: 1 PID: 14443 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2474.233693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2474.235032] Call Trace: [ 2474.235487] dump_stack+0x107/0x167 [ 2474.236083] should_fail.cold+0x5/0xa [ 2474.236708] ? create_io_worker+0xe8/0x620 [ 2474.237404] should_failslab+0x5/0x20 [ 2474.238032] kmem_cache_alloc_node_trace+0x59/0x340 [ 2474.238857] create_io_worker+0xe8/0x620 [ 2474.239530] io_wqe_enqueue+0x69e/0xbe0 [ 2474.240193] ? create_worker_cb+0x260/0x260 [ 2474.240904] ? io_wq_work_match_all+0x10/0x10 [ 2474.241632] ? io_prep_async_work+0x340/0x550 [ 2474.242367] io_queue_async_work+0x26b/0x4f0 [ 2474.243090] __io_queue_sqe+0x5cc/0x9d0 [ 2474.243747] ? io_issue_sqe+0x7700/0x7700 [ 2474.244432] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2474.245208] io_submit_sqes+0x4461/0x85c0 [ 2474.245914] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2474.246725] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2474.247523] ? lock_downgrade+0x6d0/0x6d0 [ 2474.248196] ? find_held_lock+0x2c/0x110 [ 2474.248861] ? io_submit_sqes+0x85c0/0x85c0 [ 2474.249572] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2474.250361] ? wait_for_completion_io+0x270/0x270 [ 2474.251146] ? rcu_read_lock_any_held+0x75/0xa0 [ 2474.251456] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2474.251914] ? vfs_write+0x354/0xa70 [ 2474.251936] ? fput_many+0x2f/0x1a0 [ 2474.254163] ? ksys_write+0x1a9/0x260 [ 2474.254788] ? __ia32_sys_read+0xb0/0xb0 [ 2474.255461] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2474.256311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2474.257155] do_syscall_64+0x33/0x40 [ 2474.257760] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2474.258589] RIP: 0033:0x7f705a641b19 [ 2474.259199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2474.262167] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2474.263417] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2474.264571] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2474.265716] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2474.266865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2474.268023] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2474.276088] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2474.277310] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2474.278420] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:12:01 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x5}, 0x4) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2474.322444] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2474.325683] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2474.327042] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2474.328330] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2474.347795] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:01 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2, 0x2, 0x6, 0x1, 0xfffffffe}}) [ 2474.360281] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) [ 2474.477393] FAULT_INJECTION: forcing a failure. [ 2474.477393] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.481595] CPU: 1 PID: 14474 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2474.482727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2474.484076] Call Trace: [ 2474.484511] dump_stack+0x107/0x167 [ 2474.485104] should_fail.cold+0x5/0xa [ 2474.485724] ? create_object.isra.0+0x3a/0xa20 [ 2474.486466] should_failslab+0x5/0x20 [ 2474.487084] kmem_cache_alloc+0x5b/0x310 [ 2474.487751] ? create_io_worker+0xe8/0x620 [ 2474.488439] create_object.isra.0+0x3a/0xa20 [ 2474.489155] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2474.489981] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2474.490806] create_io_worker+0xe8/0x620 [ 2474.491487] io_wqe_enqueue+0x69e/0xbe0 [ 2474.492141] ? create_worker_cb+0x260/0x260 [ 2474.492835] ? io_wq_work_match_all+0x10/0x10 [ 2474.493563] ? io_prep_async_work+0x340/0x550 [ 2474.494294] io_queue_async_work+0x26b/0x4f0 [ 2474.495014] __io_queue_sqe+0x5cc/0x9d0 [ 2474.495676] ? io_issue_sqe+0x7700/0x7700 [ 2474.496358] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2474.497128] io_submit_sqes+0x4461/0x85c0 [ 2474.497916] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2474.498712] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2474.499503] ? lock_downgrade+0x6d0/0x6d0 [ 2474.500167] ? find_held_lock+0x2c/0x110 [ 2474.500823] ? io_submit_sqes+0x85c0/0x85c0 [ 2474.501525] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2474.502301] ? wait_for_completion_io+0x270/0x270 [ 2474.503078] ? rcu_read_lock_any_held+0x75/0xa0 [ 2474.503837] ? vfs_write+0x354/0xa70 [ 2474.504441] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2474.505179] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2474.506042] ? ksys_write+0x1a9/0x260 [ 2474.506655] ? __ia32_sys_read+0xb0/0xb0 [ 2474.507323] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2474.508175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2474.509008] do_syscall_64+0x33/0x40 [ 2474.509608] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2474.510430] RIP: 0033:0x7f705a641b19 [ 2474.511031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2474.513968] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2474.515188] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2474.516337] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2474.517478] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2474.518615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2474.519762] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:12:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 09:12:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:12:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4e00, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:12:14 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 49) 09:12:14 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd086, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:14 executing program 2: shmget(0x2, 0x1000, 0x40, &(0x7f0000ff4000/0x1000)=nil) shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ff4000/0x4000)=nil) 09:12:14 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x181001) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6, 0x7f}}, './file2\x00'}) [ 2487.237998] FAULT_INJECTION: forcing a failure. [ 2487.237998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2487.239860] CPU: 1 PID: 14496 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2487.240863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2487.242055] Call Trace: [ 2487.242445] dump_stack+0x107/0x167 [ 2487.242972] should_fail.cold+0x5/0xa [ 2487.243543] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2487.244325] ? shmem_write_begin+0xf7/0x1d0 [ 2487.244951] ? shmem_write_begin+0x100/0x1d0 [ 2487.245613] generic_perform_write+0x279/0x4f0 [ 2487.246310] ? page_cache_prev_miss+0x310/0x310 [ 2487.246989] ? evict_inodes+0x420/0x420 [ 2487.247587] ? generic_write_checks+0x2ad/0x390 [ 2487.248294] __generic_file_write_iter+0x39d/0x5d0 [ 2487.249028] generic_file_write_iter+0xdb/0x230 [ 2487.249713] ? iov_iter_init+0x3c/0x130 [ 2487.250300] new_sync_write+0x42c/0x660 [ 2487.250888] ? new_sync_read+0x6f0/0x6f0 [ 2487.251507] ? __x64_sys_pwrite64+0x201/0x260 [ 2487.252176] ? lock_release+0x680/0x680 [ 2487.252758] ? selinux_file_permission+0x92/0x520 [ 2487.253481] vfs_write+0x747/0xa70 [ 2487.254026] __x64_sys_pwrite64+0x201/0x260 [ 2487.254668] ? ksys_pwrite64+0x1b0/0x1b0 [ 2487.255267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2487.256039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2487.256800] do_syscall_64+0x33/0x40 [ 2487.257364] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2487.258111] RIP: 0033:0x7f643d425ab7 [ 2487.258655] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2487.261330] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2487.262465] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2487.263522] RDX: 000000000000fdd7 RSI: 0000000020000000 RDI: 0000000000000004 [ 2487.264571] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2487.265644] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 2487.266720] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 09:12:14 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x90080) dup3(r1, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2487.290568] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 2487.298656] FAULT_INJECTION: forcing a failure. [ 2487.298656] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.300571] CPU: 0 PID: 14486 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2487.301551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2487.302713] Call Trace: [ 2487.303106] dump_stack+0x107/0x167 [ 2487.303643] should_fail.cold+0x5/0xa [ 2487.304184] ? create_object.isra.0+0x3a/0xa20 [ 2487.304829] should_failslab+0x5/0x20 [ 2487.305369] kmem_cache_alloc+0x5b/0x310 [ 2487.305946] ? mark_held_locks+0x9e/0xe0 [ 2487.306522] create_object.isra.0+0x3a/0xa20 [ 2487.307147] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2487.307870] kmem_cache_alloc_bulk+0x168/0x320 [ 2487.308521] io_submit_sqes+0x6f76/0x85c0 [ 2487.309135] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2487.309865] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2487.310550] ? lock_downgrade+0x6d0/0x6d0 [ 2487.311132] ? find_held_lock+0x2c/0x110 [ 2487.311715] ? io_submit_sqes+0x85c0/0x85c0 [ 2487.312334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2487.313022] ? wait_for_completion_io+0x270/0x270 [ 2487.313703] ? rcu_read_lock_any_held+0x75/0xa0 [ 2487.314358] ? vfs_write+0x354/0xa70 [ 2487.314888] ? fput_many+0x2f/0x1a0 [ 2487.315402] ? ksys_write+0x1a9/0x260 [ 2487.315981] ? __ia32_sys_read+0xb0/0xb0 [ 2487.316557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2487.317291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2487.318023] do_syscall_64+0x33/0x40 [ 2487.318549] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2487.319274] RIP: 0033:0x7f705a641b19 [ 2487.319807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2487.322351] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2487.323417] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2487.324437] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2487.325456] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2487.326453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2487.327444] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2487.330070] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2487.331174] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2487.332224] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2487.348656] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2487.349798] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2487.350834] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2487.365236] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 09:12:14 executing program 2: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 2487.397470] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2487.400270] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:14 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xedc0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:12:14 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 50) [ 2487.565636] FAULT_INJECTION: forcing a failure. [ 2487.565636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2487.567410] CPU: 0 PID: 14520 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2487.568428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2487.569612] Call Trace: [ 2487.570012] dump_stack+0x107/0x167 [ 2487.570558] should_fail.cold+0x5/0xa [ 2487.571129] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2487.571924] ? shmem_write_begin+0xf7/0x1d0 [ 2487.572567] ? shmem_write_begin+0x100/0x1d0 [ 2487.573215] generic_perform_write+0x279/0x4f0 [ 2487.574056] ? __mnt_drop_write_file+0x9/0x70 [ 2487.574708] ? page_cache_prev_miss+0x310/0x310 [ 2487.575388] ? evict_inodes+0x420/0x420 [ 2487.575978] ? generic_write_checks+0x2ad/0x390 [ 2487.576662] __generic_file_write_iter+0x39d/0x5d0 [ 2487.577380] generic_file_write_iter+0xdb/0x230 [ 2487.578047] ? iov_iter_init+0x3c/0x130 [ 2487.578638] new_sync_write+0x42c/0x660 [ 2487.579221] ? new_sync_read+0x6f0/0x6f0 [ 2487.579835] ? __x64_sys_pwrite64+0x201/0x260 [ 2487.580641] ? lock_release+0x680/0x680 [ 2487.581225] ? selinux_file_permission+0x92/0x520 [ 2487.581948] vfs_write+0x747/0xa70 [ 2487.582600] __x64_sys_pwrite64+0x201/0x260 [ 2487.583229] ? ksys_pwrite64+0x1b0/0x1b0 [ 2487.583992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2487.584753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2487.585692] do_syscall_64+0x33/0x40 [ 2487.586292] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2487.587221] RIP: 0033:0x7f643d425ab7 [ 2487.587784] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2487.590378] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2487.591483] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2487.592762] RDX: 0000000000000009 RSI: 00000000200006c0 RDI: 0000000000000004 [ 2487.594037] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2487.595332] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000004 [ 2487.596625] R13: 0000000000000004 R14: 0000000020000470 R15: 0000000000000002 [ 2500.285777] FAULT_INJECTION: forcing a failure. [ 2500.285777] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.287210] CPU: 0 PID: 14535 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2500.287817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.288536] Call Trace: [ 2500.288761] dump_stack+0x107/0x167 [ 2500.289061] should_fail.cold+0x5/0xa [ 2500.289380] ? create_io_worker+0xe8/0x620 [ 2500.289726] should_failslab+0x5/0x20 [ 2500.290062] kmem_cache_alloc_node_trace+0x59/0x340 [ 2500.290500] create_io_worker+0xe8/0x620 [ 2500.290858] io_wqe_enqueue+0x69e/0xbe0 [ 2500.291193] ? create_worker_cb+0x260/0x260 [ 2500.291568] ? io_wq_work_match_all+0x10/0x10 [ 2500.291964] ? io_prep_async_work+0x340/0x550 [ 2500.292358] io_queue_async_work+0x26b/0x4f0 [ 2500.292727] __io_queue_sqe+0x5cc/0x9d0 [ 2500.293076] ? io_issue_sqe+0x7700/0x7700 [ 2500.293442] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2500.293855] io_submit_sqes+0x4461/0x85c0 [ 2500.294232] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2500.294668] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2500.295090] ? lock_downgrade+0x6d0/0x6d0 [ 2500.295434] ? find_held_lock+0x2c/0x110 [ 2500.295794] ? io_submit_sqes+0x85c0/0x85c0 [ 2500.296179] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2500.296599] ? wait_for_completion_io+0x270/0x270 [ 2500.297021] ? rcu_read_lock_any_held+0x75/0xa0 [ 2500.297405] ? vfs_write+0x354/0xa70 [ 2500.297951] ? fput_many+0x2f/0x1a0 [ 2500.298252] ? ksys_write+0x1a9/0x260 [ 2500.298582] ? __ia32_sys_read+0xb0/0xb0 [ 2500.298939] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.299369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.299823] do_syscall_64+0x33/0x40 [ 2500.300138] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.300578] RIP: 0033:0x7f705a641b19 [ 2500.300890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.302467] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2500.303078] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2500.303691] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2500.304302] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.304909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2500.305522] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:12:27 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 51) 09:12:27 executing program 2: shmget(0x3, 0x1000, 0x40, &(0x7f0000ff8000/0x1000)=nil) r0 = shmget(0x1, 0x1000, 0x2, &(0x7f0000ff8000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/179) 09:12:27 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x152}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000002, 0x10, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@can, 0x0, 0x0, 0x0, {0x0, r3}}, 0x3) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000e, 0x100010, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x1e7e, &(0x7f0000000300)={0x0, 0xd0a4, 0x8, 0x2, 0x242}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000380)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f00000003c0)={0xaa002, 0x88, 0x4}, &(0x7f0000000400)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:12:27 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0xdde36ff975a78960) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:12:27 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd186, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) 09:12:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:12:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xff0f, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2500.311955] FAULT_INJECTION: forcing a failure. [ 2500.311955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2500.313790] CPU: 1 PID: 14542 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2500.314815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.316048] Call Trace: [ 2500.316447] dump_stack+0x107/0x167 [ 2500.316994] should_fail.cold+0x5/0xa [ 2500.317570] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 2500.318376] ? shmem_write_begin+0xf7/0x1d0 [ 2500.319013] ? shmem_write_begin+0x100/0x1d0 [ 2500.319679] generic_perform_write+0x279/0x4f0 [ 2500.320368] ? page_cache_prev_miss+0x310/0x310 [ 2500.321047] ? evict_inodes+0x420/0x420 [ 2500.321643] ? generic_write_checks+0x2ad/0x390 [ 2500.322343] __generic_file_write_iter+0x39d/0x5d0 [ 2500.323080] generic_file_write_iter+0xdb/0x230 [ 2500.323776] ? iov_iter_init+0x3c/0x130 [ 2500.324387] new_sync_write+0x42c/0x660 [ 2500.324981] ? new_sync_read+0x6f0/0x6f0 [ 2500.325614] ? __x64_sys_pwrite64+0x201/0x260 [ 2500.326290] ? lock_release+0x680/0x680 [ 2500.326895] ? selinux_file_permission+0x92/0x520 [ 2500.327633] vfs_write+0x747/0xa70 [ 2500.328197] __x64_sys_pwrite64+0x201/0x260 [ 2500.328829] ? ksys_pwrite64+0x1b0/0x1b0 [ 2500.329458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.330226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.330990] do_syscall_64+0x33/0x40 [ 2500.331534] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.332320] RIP: 0033:0x7f643d425ab7 [ 2500.332876] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 2500.335607] RSP: 002b:00007f643a9e7f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2500.336737] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425ab7 [ 2500.337791] RDX: 000000000000001d RSI: 0000000020011600 RDI: 0000000000000004 [ 2500.338849] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffffffffffff [ 2500.339912] R10: 0000000000002100 R11: 0000000000000293 R12: 0000000000000004 [ 2500.340975] R13: 0000000000000004 R14: 0000000020000488 R15: 0000000000000003 [ 2500.359475] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2500.360719] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2500.361783] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2500.416769] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 2500.429104] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:27 executing program 0: syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x2c, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "cb796eeae9"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x81, 0xfffd, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x6, [0xa75, 0x5, 0x1, 0x9, 0x3]}, @country_functional={0xa, 0x24, 0x7, 0xf7, 0x3, [0x6, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0xe1, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xe0, 0x4, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x4, 0x67}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x6, 0xa, 0x9, 0x10, 0x3}, 0x5c, &(0x7f0000000200)={0x5, 0xf, 0x5c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "378293f3bc77b112750588605287e223"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x44, 0x7, 0xb7, 0x8, 0xa0}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "63c868f6c6a7589d453f1d0f0a4adf24"}, @generic={0x19, 0x10, 0x4, "612fcaaa3f3bddc89fe46f59015eb09ec00d1e527f43"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8d, 0x8, 0x4, 0x6, 0x6}]}, 0x2, [{0x54, &(0x7f0000000280)=@string={0x54, 0x3, "21b6c1d6d5399f8144470a509bdb0e5e5dd2b121c0aa6ba7c57c22246074b2d354992ed7049d452685b1f56218ff67e8f72d43cd789feb01dab35fddfda61fd1d6855e19b87ea42a39f8080694dc8b519fdb"}}, {0xc2, &(0x7f0000000300)=@string={0xc2, 0x3, "ad54e87c3955b511216107d9f35424e201878c01c0229896dff17254cee6abe375c5035be969b49503be499a6acb014c940affdf9e9cfc0b8d9a319c78e40001bb0fe98067211c609642996656f1f7749f4fe28995d4a90758b5e5bed0b2b50c31f55a9a83ea2709b351273c17792adeaa9dbc232bb6414a480b20670a1f9f6bb509246983acdc6b68d47b1f2d8a0dfffc963a7de6ff324c2471b570b5001e01ef936f3fb4308600d84491fc4b278253934663ec2d0d64d81697aa0866c659fa"}}]}) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2500.449865] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 09:12:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x8, 0x0, 0x0, 0x0) 09:12:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2500.476012] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2500.476691] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2500.477349] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2500.499151] udc-core: couldn't find an available UDC or it's busy [ 2500.499714] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 09:12:27 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd286, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) [ 2500.519959] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:12:27 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/76) shmget(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) r1 = shmget(0x2, 0x4000, 0x10, &(0x7f0000ff5000/0x4000)=nil) shmat(r1, &(0x7f0000ff5000/0x1000)=nil, 0x6000) [ 2500.603957] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2500.604679] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2500.605289] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2500.619629] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2500.635772] FAULT_INJECTION: forcing a failure. [ 2500.635772] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.637715] CPU: 1 PID: 14566 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2500.638740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.639927] Call Trace: [ 2500.640334] dump_stack+0x107/0x167 [ 2500.640863] should_fail.cold+0x5/0xa [ 2500.641426] ? create_io_worker+0xe8/0x620 [ 2500.642027] should_failslab+0x5/0x20 [ 2500.642585] kmem_cache_alloc_node_trace+0x59/0x340 [ 2500.643300] create_io_worker+0xe8/0x620 [ 2500.643912] io_wqe_enqueue+0x69e/0xbe0 [ 2500.644482] ? create_worker_cb+0x260/0x260 [ 2500.644615] ISOFS: Unable to identify CD-ROM format. [ 2500.645102] ? io_wq_work_match_all+0x10/0x10 [ 2500.645124] ? io_prep_async_work+0x340/0x550 [ 2500.646800] io_queue_async_work+0x26b/0x4f0 [ 2500.647447] __io_queue_sqe+0x5cc/0x9d0 [ 2500.648045] ? io_issue_sqe+0x7700/0x7700 [ 2500.648657] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2500.649351] io_submit_sqes+0x4461/0x85c0 [ 2500.649978] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2500.650702] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2500.651406] ? lock_downgrade+0x6d0/0x6d0 [ 2500.652016] ? find_held_lock+0x2c/0x110 [ 2500.652596] ? io_submit_sqes+0x85c0/0x85c0 [ 2500.653241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2500.653944] ? wait_for_completion_io+0x270/0x270 [ 2500.654647] ? rcu_read_lock_any_held+0x75/0xa0 [ 2500.655323] ? vfs_write+0x354/0xa70 [ 2500.655873] ? fput_many+0x2f/0x1a0 [ 2500.656407] ? ksys_write+0x1a9/0x260 [ 2500.656965] ? __ia32_sys_read+0xb0/0xb0 [ 2500.657560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2500.658321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.659058] do_syscall_64+0x33/0x40 [ 2500.659604] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2500.660338] RIP: 0033:0x7f705a641b19 [ 2500.660885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.663523] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2500.664630] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2500.665660] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2500.666691] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.667724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2500.668754] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2500.722178] ISOFS: Unable to identify CD-ROM format. [ 2501.031635] udc-core: couldn't find an available UDC or it's busy [ 2501.032210] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 09:12:40 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmat(r0, &(0x7f0000ff5000/0x2000)=nil, 0x0) 09:12:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x40) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:12:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) [ 2513.118207] FAULT_INJECTION: forcing a failure. [ 2513.118207] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.119847] CPU: 0 PID: 14595 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2513.120844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.122032] Call Trace: [ 2513.122409] dump_stack+0x107/0x167 [ 2513.122944] should_fail.cold+0x5/0xa [ 2513.123497] ? getname_flags.part.0+0x50/0x4f0 [ 2513.124167] should_failslab+0x5/0x20 [ 2513.124722] kmem_cache_alloc+0x5b/0x310 [ 2513.125314] getname_flags.part.0+0x50/0x4f0 [ 2513.125956] getname+0x8e/0xd0 [ 2513.126426] do_sys_openat2+0xf9/0x420 [ 2513.126989] ? build_open_flags+0x6f0/0x6f0 [ 2513.127624] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.128307] __x64_sys_openat+0x13f/0x1f0 [ 2513.128905] ? __ia32_sys_open+0x1c0/0x1c0 [ 2513.129522] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.130279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.131218] do_syscall_64+0x33/0x40 [ 2513.131753] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2513.132493] RIP: 0033:0x7f643d425a04 [ 2513.133030] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2513.135650] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2513.136742] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2513.137762] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2513.138777] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2513.139804] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2513.140843] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 09:12:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 09:12:40 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 52) 09:12:40 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd386, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4fff, &(0x7f0000000300)={0x0, 0xe212, 0x4, 0x2, 0x16a, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000380)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x100040, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x0, 0x0, r5, &(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x8, 0x6400, 0x1}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8012, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000640)={{r8}, 0x0, 0xc, @inherit={0x90, &(0x7f0000000580)={0x0, 0x9, 0x0, 0x1, {0x1, 0x401, 0x7f, 0x6, 0x7fff}, [0x9, 0x3, 0xb1, 0x8, 0x7, 0xd070, 0x20, 0x0, 0x8]}}, @name="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"}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:12:40 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2513.174061] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2513.175250] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2513.175714] FAULT_INJECTION: forcing a failure. [ 2513.175714] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.176381] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2513.178808] CPU: 1 PID: 14588 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2513.179582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.180441] Call Trace: [ 2513.180746] dump_stack+0x107/0x167 [ 2513.181157] should_fail.cold+0x5/0xa [ 2513.181585] ? create_object.isra.0+0x3a/0xa20 [ 2513.182102] should_failslab+0x5/0x20 [ 2513.182530] kmem_cache_alloc+0x5b/0x310 [ 2513.182995] create_object.isra.0+0x3a/0xa20 [ 2513.183488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.184026] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2513.184599] create_io_worker+0xe8/0x620 [ 2513.185064] io_wqe_enqueue+0x69e/0xbe0 [ 2513.185518] ? create_worker_cb+0x260/0x260 [ 2513.186007] ? io_wq_work_match_all+0x10/0x10 [ 2513.186512] ? io_prep_async_work+0x340/0x550 [ 2513.187023] io_queue_async_work+0x26b/0x4f0 [ 2513.187510] __io_queue_sqe+0x5cc/0x9d0 [ 2513.187967] ? io_issue_sqe+0x7700/0x7700 [ 2513.188456] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2513.188948] io_submit_sqes+0x4461/0x85c0 [ 2513.189428] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2513.189977] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2513.190519] ? lock_downgrade+0x6d0/0x6d0 [ 2513.190977] ? find_held_lock+0x2c/0x110 [ 2513.191433] ? io_submit_sqes+0x85c0/0x85c0 [ 2513.191929] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2513.192476] ? wait_for_completion_io+0x270/0x270 [ 2513.193016] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.193534] ? vfs_write+0x354/0xa70 [ 2513.193951] ? fput_many+0x2f/0x1a0 [ 2513.194333] ? ksys_write+0x1a9/0x260 [ 2513.194754] ? __ia32_sys_read+0xb0/0xb0 [ 2513.195210] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.195807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.196379] do_syscall_64+0x33/0x40 [ 2513.196804] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2513.197381] RIP: 0033:0x7f705a641b19 [ 2513.197768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.199821] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2513.200681] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2513.201418] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2513.202161] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.202894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.203631] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:12:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2513.231210] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:40 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 53) [ 2513.268677] ISOFS: Unable to identify CD-ROM format. 09:12:40 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd486, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x40, 0x8, 0xf6, 0x3ff, {{0x20, 0x4, 0x0, 0x7, 0x80, 0x68, 0x0, 0x3f, 0x29, 0x0, @multicast2, @local, {[@ssrr={0x89, 0x2b, 0x58, [@loopback, @loopback, @rand_addr=0x64010101, @broadcast, @empty, @broadcast, @multicast1, @private=0xa010100, @rand_addr=0x64010102, @multicast2]}, @generic={0x83, 0xd, "9c64b954981e288559f0e9"}, @lsrr={0x83, 0x7, 0x4b, [@empty]}, @ssrr={0x89, 0x13, 0xdd, [@rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @private=0xa010100]}, @end, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @ssrr={0x89, 0xf, 0x6d, [@multicast1, @rand_addr=0x64010101, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'syztnl1\x00', r7, 0x8, 0x20, 0x80000000, 0x81, {{0x14, 0x4, 0x2, 0x1f, 0x50, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@generic={0x86, 0x7, "f61763d73f"}, @cipso={0x86, 0x34, 0x3, [{0x6, 0xa, "31b510312bf56c2c"}, {0x7, 0x12, "cd6c141dd4e421ac5fdff7f7070fe9f5"}, {0x5, 0x12, "df5d391a549ab68c02702fd1f785fd35"}]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2513.306829] FAULT_INJECTION: forcing a failure. [ 2513.306829] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.308246] CPU: 1 PID: 14614 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2513.309032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.309926] Call Trace: [ 2513.310229] dump_stack+0x107/0x167 [ 2513.310613] should_fail.cold+0x5/0xa [ 2513.311021] ? create_object.isra.0+0x3a/0xa20 [ 2513.311514] should_failslab+0x5/0x20 [ 2513.311934] kmem_cache_alloc+0x5b/0x310 [ 2513.312377] ? __generic_file_write_iter+0x1a4/0x5d0 [ 2513.312924] create_object.isra.0+0x3a/0xa20 [ 2513.313402] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.313986] kmem_cache_alloc+0x159/0x310 [ 2513.314440] getname_flags.part.0+0x50/0x4f0 [ 2513.314901] getname+0x8e/0xd0 [ 2513.315257] do_sys_openat2+0xf9/0x420 [ 2513.315670] ? build_open_flags+0x6f0/0x6f0 [ 2513.316151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.316659] __x64_sys_openat+0x13f/0x1f0 [ 2513.317105] ? __ia32_sys_open+0x1c0/0x1c0 [ 2513.317570] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.318129] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.318722] do_syscall_64+0x33/0x40 [ 2513.319127] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2513.319670] RIP: 0033:0x7f643d425a04 [ 2513.320125] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2513.322071] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2513.322870] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2513.323627] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2513.324380] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2513.325121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2513.325914] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 09:12:40 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYBLOB="010029bd7000fcdbdf25040000004404004e240000140003752bed067af16ed20000000000000074000c000700300000000400000008000500f900000008000b0e73697000060002005a00000038000280060002004e2100000800090000000000080006f54f00000014000100e000000200000000000000000000000008000900090000001c000380080003000000000008000100010000000c0001000200000008000400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e00006000b000a00"], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x301, 0x70bd2a, 0x25dfdbbb}, 0x14}, 0x1, 0x0, 0x0, 0x44845}, 0x48014) shmget(0x3, 0x3000, 0x400, &(0x7f0000ff5000/0x3000)=nil) 09:12:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000400)=ANY=[@ANYBLOB="f8ff000000001b00"/17]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = eventfd(0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="fe11d6efc3c2bcce3a2dac46ecc30289e61805ed71c45def07d824", @ANYRES16=0x0, @ANYBLOB="080027bd7000fcdbdf25040000006000018014000400ff010000000000000000000000000001080006000f00000008000300ac1414bb14000400fe8000000000000000000000000000440800060005000000060001000a000000140004002001000000000000000000000000000108000300010000000800020002000000"], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c4605031f20080000000000000003000300050000005100000038000000b00200004100000000f020000100ff000104ff030000000003000000b80d00000000010000000000040000003f000000ffffff7f070000007e208d9e234c3c9389980892acf8c97ebca4acab86b64c5e64b70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/1650], 0x672) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000080)={0x1, 0x5, 0x29f, 0x0, 0x8}) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x40, 0x700, 0x80000001, 0x3, {{0x1d, 0x4, 0x0, 0x3, 0x74, 0x67, 0x0, 0x5, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x1c, 0xb, 0x1, 0x3, [{@rand_addr=0x64010102, 0x5}, {@private=0xa010101, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}, @noop, @end, @cipso={0x86, 0x14, 0x3, [{0x6, 0x4, "8d13"}, {0x7, 0xa, "b0cf9eeee3dea154"}]}, @ssrr={0x89, 0x7, 0xc6, [@local]}, @end, @lsrr={0x83, 0xf, 0x4e, [@local, @rand_addr=0x64010100, @empty]}, @ssrr={0x89, 0xb, 0x5d, [@multicast2, @empty]}, @timestamp={0x44, 0xc, 0x30, 0x0, 0x7, [0x3, 0x100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', r5, 0x29, 0x20, 0x0, 0x5, 0x15, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1d}, 0x10, 0x10, 0x4, 0x8000}}) 09:12:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) [ 2513.405120] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2513.406399] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2513.407485] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2513.415107] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2513.427583] ISOFS: Unable to identify CD-ROM format. [ 2513.436231] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2513.437180] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2513.438024] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:12:40 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100ed0018000000", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653200"]) close(r3) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0x462747a9263f725c}}, 0x14) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2513.462750] FAULT_INJECTION: forcing a failure. [ 2513.462750] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.464224] CPU: 1 PID: 14629 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2513.464939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.465852] Call Trace: [ 2513.466148] dump_stack+0x107/0x167 [ 2513.466531] should_fail.cold+0x5/0xa [ 2513.466934] ? create_object.isra.0+0x3a/0xa20 [ 2513.467417] should_failslab+0x5/0x20 [ 2513.467824] kmem_cache_alloc+0x5b/0x310 [ 2513.468250] ? lock_acquire+0x197/0x470 [ 2513.468670] create_object.isra.0+0x3a/0xa20 [ 2513.469142] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2513.469675] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2513.470209] create_io_worker+0xe8/0x620 [ 2513.470639] io_wqe_enqueue+0x69e/0xbe0 [ 2513.471061] ? create_worker_cb+0x260/0x260 [ 2513.471509] ? io_wq_work_match_all+0x10/0x10 [ 2513.472032] ? io_prep_async_work+0x340/0x550 [ 2513.472504] io_queue_async_work+0x26b/0x4f0 [ 2513.472966] __io_queue_sqe+0x5cc/0x9d0 [ 2513.473385] ? io_issue_sqe+0x7700/0x7700 [ 2513.473822] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2513.474324] io_submit_sqes+0x4461/0x85c0 [ 2513.474775] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2513.475290] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2513.475801] ? lock_downgrade+0x6d0/0x6d0 [ 2513.476267] ? find_held_lock+0x2c/0x110 [ 2513.476698] ? io_submit_sqes+0x85c0/0x85c0 [ 2513.477154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2513.477657] ? wait_for_completion_io+0x270/0x270 [ 2513.478199] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.478685] ? vfs_write+0x354/0xa70 [ 2513.479103] ? fput_many+0x2f/0x1a0 [ 2513.479486] ? ksys_write+0x1a9/0x260 [ 2513.479928] ? __ia32_sys_read+0xb0/0xb0 [ 2513.480364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.480945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.481488] do_syscall_64+0x33/0x40 [ 2513.481909] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2513.482445] RIP: 0033:0x7f705a641b19 [ 2513.482867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.484767] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2513.485622] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2513.486409] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2513.487196] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2513.487989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2513.488779] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2513.501653] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:40 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 54) 09:12:40 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:12:40 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd586, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2513.613796] FAULT_INJECTION: forcing a failure. [ 2513.613796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2513.615552] CPU: 0 PID: 14643 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2513.616556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.617743] Call Trace: [ 2513.618137] dump_stack+0x107/0x167 [ 2513.618666] should_fail.cold+0x5/0xa [ 2513.619225] strncpy_from_user+0x34/0x470 [ 2513.619836] getname_flags.part.0+0x95/0x4f0 [ 2513.620476] getname+0x8e/0xd0 [ 2513.620949] do_sys_openat2+0xf9/0x420 [ 2513.621517] ? build_open_flags+0x6f0/0x6f0 [ 2513.622151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2513.622829] __x64_sys_openat+0x13f/0x1f0 [ 2513.623440] ? __ia32_sys_open+0x1c0/0x1c0 [ 2513.624068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2513.624828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2513.625577] do_syscall_64+0x33/0x40 [ 2513.626117] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2513.626857] RIP: 0033:0x7f643d425a04 [ 2513.627399] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2513.630031] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2513.631142] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2513.632169] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2513.633191] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2513.634215] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2513.635241] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 [ 2513.638511] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2513.639376] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2513.640117] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2513.664761] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:12:53 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x1, 0x4000, 0x1, &(0x7f0000ff2000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 09:12:53 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 55) 09:12:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 09:12:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r2, r1, 0x0) fadvise64(r1, 0x5, 0xb4, 0x1) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:12:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 09:12:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:12:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd686, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x1, {}, 0x25, 0x0, 0x1, {0x0, 0x0, r1}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/14], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r0, 0x1, 0x0, 0x8, 0x0, 0x0, {0x0, r4}}, 0x3) [ 2526.048339] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2526.049114] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2526.049757] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2526.066213] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2526.086560] FAULT_INJECTION: forcing a failure. [ 2526.086560] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.089769] CPU: 1 PID: 14675 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2526.090831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.092090] Call Trace: [ 2526.092496] dump_stack+0x107/0x167 [ 2526.093049] should_fail.cold+0x5/0xa [ 2526.093633] ? __alloc_file+0x21/0x320 [ 2526.094221] should_failslab+0x5/0x20 [ 2526.094797] kmem_cache_alloc+0x5b/0x310 [ 2526.095411] ? __lock_acquire+0xbb1/0x5b00 [ 2526.096065] __alloc_file+0x21/0x320 [ 2526.096626] alloc_empty_file+0x6d/0x170 [ 2526.097238] path_openat+0xe3/0x26e0 [ 2526.097812] ? path_lookupat+0x860/0x860 [ 2526.098430] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.099214] ? lock_acquire+0x197/0x470 [ 2526.099813] ? find_held_lock+0x2c/0x110 [ 2526.100445] do_filp_open+0x190/0x3e0 [ 2526.101021] ? may_open_dev+0xf0/0xf0 [ 2526.101599] ? __alloc_fd+0x2b8/0x630 [ 2526.102176] ? lock_downgrade+0x6d0/0x6d0 [ 2526.102806] ? do_raw_spin_lock+0x121/0x260 [ 2526.103461] ? rwlock_bug.part.0+0x90/0x90 [ 2526.104116] ? _raw_spin_unlock+0x1a/0x30 [ 2526.104745] ? __alloc_fd+0x2b8/0x630 [ 2526.105332] do_sys_openat2+0x171/0x420 [ 2526.105933] ? build_open_flags+0x6f0/0x6f0 [ 2526.106591] ? rcu_read_lock_any_held+0x75/0xa0 [ 2526.107307] __x64_sys_openat+0x13f/0x1f0 [ 2526.107947] ? __ia32_sys_open+0x1c0/0x1c0 [ 2526.108598] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.109385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.110164] do_syscall_64+0x33/0x40 [ 2526.110730] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2526.111498] RIP: 0033:0x7f643d425a04 [ 2526.112074] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2526.114845] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2526.116010] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2526.117092] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2526.118169] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2526.119242] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2526.120331] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 09:12:53 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmat(r0, &(0x7f0000ff6000/0x2000)=nil, 0x7000) 09:12:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd786, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2526.195409] ISOFS: Unable to identify CD-ROM format. 09:12:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd886, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2526.219588] FAULT_INJECTION: forcing a failure. [ 2526.219588] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.221604] CPU: 1 PID: 14677 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2526.222660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.223919] Call Trace: [ 2526.224347] dump_stack+0x107/0x167 [ 2526.224902] should_fail.cold+0x5/0xa [ 2526.225487] ? create_io_worker+0xe8/0x620 [ 2526.226133] should_failslab+0x5/0x20 [ 2526.226715] kmem_cache_alloc_node_trace+0x59/0x340 09:12:53 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 56) [ 2526.227478] create_io_worker+0xe8/0x620 [ 2526.228303] io_wqe_enqueue+0x69e/0xbe0 [ 2526.228917] ? create_worker_cb+0x260/0x260 [ 2526.229572] ? io_wq_work_match_all+0x10/0x10 [ 2526.230252] ? io_prep_async_work+0x340/0x550 [ 2526.230936] io_queue_async_work+0x26b/0x4f0 [ 2526.231612] __io_queue_sqe+0x5cc/0x9d0 [ 2526.232229] ? io_issue_sqe+0x7700/0x7700 [ 2526.232865] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2526.233584] io_submit_sqes+0x4461/0x85c0 [ 2526.234240] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2526.234991] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2526.235725] ? lock_downgrade+0x6d0/0x6d0 [ 2526.236358] ? find_held_lock+0x2c/0x110 [ 2526.236976] ? io_submit_sqes+0x85c0/0x85c0 [ 2526.237638] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2526.238371] ? wait_for_completion_io+0x270/0x270 [ 2526.239102] ? rcu_read_lock_any_held+0x75/0xa0 [ 2526.239805] ? vfs_write+0x354/0xa70 [ 2526.240379] ? fput_many+0x2f/0x1a0 [ 2526.240932] ? ksys_write+0x1a9/0x260 [ 2526.241510] ? __ia32_sys_read+0xb0/0xb0 [ 2526.242130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.242921] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.243707] do_syscall_64+0x33/0x40 [ 2526.244302] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2526.245073] RIP: 0033:0x7f705a641b19 [ 2526.245637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2526.248400] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2526.249544] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2526.250619] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2526.251698] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2526.252774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2526.253846] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 09:12:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x42002, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom1\x00', 0x2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d054a1e424a5683316cc72b3612c0e2df5b00ecf51feae58adb4229815de04daccc84e6bfd05cd77021476f5d00decde9c6f9a8195e917a93c1c76cc73d33a91c7e07386a0f55ff1b8a945429991f255825f0f5cca681d3ad10560d1f37f98006c6ee3886259751dc01ba40af2f0f0c3e71a91c91f62068e0195b4413b52ebe4406a335ee00249282ce4ce08edc50304edac7e88eb4a33ed0d65b1dc6285a0f0f37541bbde1d32a26f86d458d0d1f32429aa2cdaddf084170fa2e0550237eba54bd797c7d040c4e241141f4adfdabbc2faaece3da2c79163e096f2d42317afb1916842dc", 0xe4}, {&(0x7f00000001c0)="dabb44e8cd228a6b8dae4aba6e1229675e55150d70f788e2eeff537feed03ec059dee05328f8b029d0499ca4477bac2c019ac94c226e156227a7b08437a4595887678cbf2e9d7b67296a27cd945e5259c2d547ea152190fec773ec9209dad288fbcbb6aaa3a7185f24fd7a71a2fbc3ea9dc591edacdd4d0bbd5fad5d8db78ae144f6f2b12e583237f726febc137c911f6b9d2a704ca601cd652781accd92110c21045c4fbe41633742282aa302b9b82e7771d255e9c405988dccf54dc987808705d1da1541da8431755a381326d24886de", 0xd1}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r8]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0x128, 0x10000}, 0x804) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2526.318635] FAULT_INJECTION: forcing a failure. [ 2526.318635] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.320513] CPU: 0 PID: 14690 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2526.321569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2526.322823] Call Trace: [ 2526.323232] dump_stack+0x107/0x167 [ 2526.323790] should_fail.cold+0x5/0xa [ 2526.324386] ? create_object.isra.0+0x3a/0xa20 [ 2526.325085] should_failslab+0x5/0x20 [ 2526.325668] kmem_cache_alloc+0x5b/0x310 [ 2526.326293] create_object.isra.0+0x3a/0xa20 [ 2526.326963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2526.327741] kmem_cache_alloc+0x159/0x310 [ 2526.328388] __alloc_file+0x21/0x320 [ 2526.328956] alloc_empty_file+0x6d/0x170 [ 2526.329575] path_openat+0xe3/0x26e0 [ 2526.330154] ? path_lookupat+0x860/0x860 [ 2526.330780] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2526.331581] ? lock_acquire+0x197/0x470 [ 2526.332222] ? find_held_lock+0x2c/0x110 [ 2526.332855] do_filp_open+0x190/0x3e0 [ 2526.333448] ? may_open_dev+0xf0/0xf0 [ 2526.334034] ? __alloc_fd+0x2b8/0x630 [ 2526.334614] ? lock_downgrade+0x6d0/0x6d0 [ 2526.335249] ? do_raw_spin_lock+0x121/0x260 [ 2526.335911] ? rwlock_bug.part.0+0x90/0x90 [ 2526.336576] ? _raw_spin_unlock+0x1a/0x30 [ 2526.337207] ? __alloc_fd+0x2b8/0x630 [ 2526.337803] do_sys_openat2+0x171/0x420 [ 2526.338413] ? build_open_flags+0x6f0/0x6f0 [ 2526.339080] ? rcu_read_lock_any_held+0x75/0xa0 [ 2526.339799] __x64_sys_openat+0x13f/0x1f0 [ 2526.340463] ? __ia32_sys_open+0x1c0/0x1c0 [ 2526.341127] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2526.341937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2526.342739] do_syscall_64+0x33/0x40 [ 2526.343307] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2526.344100] RIP: 0033:0x7f643d425a04 [ 2526.344668] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2526.347449] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2526.348618] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2526.349702] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2526.350784] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2526.351869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2526.352957] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 [ 2526.381814] ISOFS: Unable to identify CD-ROM format. 09:12:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffff8001}}, './file0\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:12:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x370, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbea3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ad4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf38c}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "080e247d80dc4ea49e6a896904c77c451c4b66d8963fa5397a79130c69e86c16bfa73c4f022d5edc599f49527293e0326d03d8f8d25f9d3b528f4c99ca37d4128cca05ac948e7c31eb260771fddb98ba0209533f8886fe3422958eb25a746f235c15eb673e018f887a06fa9372199fdd491a6ba8d0e30cf84f054a89b66c351f51dda1ead335"}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "52ab744ed974924657544c23f3e82a22a21ebe06822e054f77d443822682e84a11f0de28653b744fb2e4fea68cb55aaf0e107fba46746954d0bb109026e454779d0b1a38ff713b9e2debbe0f1cfaac36c6091792c3bc9a3b12ac32e65e3a0ec7077ada8455972f11d782c5db2701c6c4f06326af5065e56370c439fc2723831c7542801d0b82a3db0af7461c1bf430c5a931e3fff3add1aa175b48bf7428e83cc4d16c87fbfdd7aaf9af222c91076084b286b955cc9f1ae9cdb0a71e951c638736dabea5bb65186b4e63d2b81541549c85b8888723cf01b2a46e35"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x39}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9dd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:12:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd986, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:12:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) 09:12:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2526.514232] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2526.515606] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2526.516740] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2526.561793] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:13:07 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 57) 09:13:07 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x0, 0x3000, 0x480, &(0x7f0000ff4000/0x3000)=nil) 09:13:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = signalfd(r2, &(0x7f0000000040), 0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x0, 0x1, 0xffffff7d, 0x3, 0x1}) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) pwrite64(r1, &(0x7f00000000c0)="71b5f6ef7f9a223768c6f36b4957bbee908db923665364548a4701f152a433bef33a081dd81d40e0f401ea05e5f7de6cb7a19b0452722b53822ed2967a7d046e196c3ec851881c1446362175602bbd9ea1a4fb3c00c5ad91d4cd25d8d5361c19e8b3233096d141c214f2307142c79122020dd95ad0c745a587a58bbd9b336735a53ce3d4ba38635206ea3fb13e81", 0x8e, 0x88) 09:13:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 09:13:07 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xda86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:07 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r0 = syz_io_uring_setup(0x6d4f, &(0x7f0000000340)={0x0, 0x0, 0x36}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x10652d29f358a035, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r3}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r5, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:13:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) [ 2540.323381] FAULT_INJECTION: forcing a failure. [ 2540.323381] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.325412] CPU: 1 PID: 14723 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2540.326516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.327680] Call Trace: [ 2540.328091] dump_stack+0x107/0x167 [ 2540.328649] should_fail.cold+0x5/0xa [ 2540.329241] ? security_file_alloc+0x34/0x170 [ 2540.329921] should_failslab+0x5/0x20 [ 2540.330506] kmem_cache_alloc+0x5b/0x310 [ 2540.331144] security_file_alloc+0x34/0x170 [ 2540.331816] __alloc_file+0xb7/0x320 [ 2540.332400] alloc_empty_file+0x6d/0x170 [ 2540.333017] path_openat+0xe3/0x26e0 [ 2540.333611] ? path_lookupat+0x860/0x860 [ 2540.334249] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2540.334926] FAULT_INJECTION: forcing a failure. [ 2540.334926] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.335054] ? lock_acquire+0x197/0x470 [ 2540.335072] ? find_held_lock+0x2c/0x110 [ 2540.335100] do_filp_open+0x190/0x3e0 [ 2540.337775] ? may_open_dev+0xf0/0xf0 [ 2540.338358] ? __alloc_fd+0x2b8/0x630 [ 2540.338925] ? lock_downgrade+0x6d0/0x6d0 [ 2540.339559] ? do_raw_spin_lock+0x121/0x260 [ 2540.340229] ? rwlock_bug.part.0+0x90/0x90 [ 2540.340870] ? _raw_spin_unlock+0x1a/0x30 [ 2540.341494] ? __alloc_fd+0x2b8/0x630 [ 2540.342077] do_sys_openat2+0x171/0x420 [ 2540.342686] ? build_open_flags+0x6f0/0x6f0 [ 2540.343349] ? rcu_read_lock_any_held+0x75/0xa0 [ 2540.344012] __x64_sys_openat+0x13f/0x1f0 [ 2540.344652] ? __ia32_sys_open+0x1c0/0x1c0 [ 2540.345301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.346092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.346877] do_syscall_64+0x33/0x40 [ 2540.347441] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2540.348219] RIP: 0033:0x7f643d425a04 [ 2540.348775] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2540.351539] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2540.352704] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2540.353783] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2540.354868] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2540.355940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2540.357036] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 [ 2540.358154] CPU: 0 PID: 14729 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2540.358775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.359494] Call Trace: [ 2540.359734] dump_stack+0x107/0x167 [ 2540.360057] should_fail.cold+0x5/0xa [ 2540.360399] ? create_io_worker+0xe8/0x620 [ 2540.360769] should_failslab+0x5/0x20 [ 2540.361109] kmem_cache_alloc_node_trace+0x59/0x340 [ 2540.361547] create_io_worker+0xe8/0x620 [ 2540.361892] io_wqe_enqueue+0x69e/0xbe0 [ 2540.362238] ? create_worker_cb+0x260/0x260 [ 2540.362605] ? io_wq_work_match_all+0x10/0x10 [ 2540.362991] ? io_prep_async_work+0x340/0x550 [ 2540.363382] io_queue_async_work+0x26b/0x4f0 [ 2540.363757] __io_queue_sqe+0x5cc/0x9d0 [ 2540.364108] ? io_issue_sqe+0x7700/0x7700 [ 2540.364477] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2540.364884] io_submit_sqes+0x4461/0x85c0 [ 2540.365257] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2540.365683] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2540.366098] ? lock_downgrade+0x6d0/0x6d0 [ 2540.366452] ? find_held_lock+0x2c/0x110 [ 2540.366797] ? io_submit_sqes+0x85c0/0x85c0 [ 2540.367178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2540.367592] ? wait_for_completion_io+0x270/0x270 [ 2540.368008] ? rcu_read_lock_any_held+0x75/0xa0 [ 2540.368411] ? vfs_write+0x354/0xa70 [ 2540.368725] ? fput_many+0x2f/0x1a0 [ 2540.369039] ? ksys_write+0x1a9/0x260 [ 2540.369371] ? __ia32_sys_read+0xb0/0xb0 [ 2540.369726] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.370176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.370624] do_syscall_64+0x33/0x40 [ 2540.370945] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2540.371382] RIP: 0033:0x7f705a641b19 [ 2540.371702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2540.373250] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2540.373901] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2540.374505] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2540.375097] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2540.375697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2540.376297] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2540.395183] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2540.395846] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2540.396487] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:13:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x5000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:13:07 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 58) 09:13:07 executing program 2: r0 = shmget(0x0, 0x3000, 0x78000018, &(0x7f0000ff5000/0x3000)=nil) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ff5000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmat(r2, &(0x7f0000ff7000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(r2, 0xc) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) 09:13:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="d4010000170001000000000000000000fc0200000000000000000000000000010000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100fffeffffffffffff00000000027f002000ffffeb0000004000dba0b252aa8cf142000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000000000800000000000000af8ffffffffffffff00000000000000000000000000000073d55792ffffffff05000000000000000900000000000000000000000000000000000080000000005d0b000000000000e700000000ddffffff020000000000000200010300000000"], 0x1d4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x9, 0x1, 0x3}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r6 = dup3(r5, r2, 0x0) fsync(r6) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x9, 0xe9, 0x40, 0x20, 0x20}) [ 2540.468615] FAULT_INJECTION: forcing a failure. [ 2540.468615] name failslab, interval 1, probability 0, space 0, times 0 [ 2540.470285] CPU: 1 PID: 14748 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2540.471026] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2540.471253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2540.471261] Call Trace: [ 2540.471287] dump_stack+0x107/0x167 [ 2540.474036] should_fail.cold+0x5/0xa [ 2540.474582] ? create_object.isra.0+0x3a/0xa20 [ 2540.475240] should_failslab+0x5/0x20 [ 2540.475779] kmem_cache_alloc+0x5b/0x310 [ 2540.476377] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2540.477162] create_object.isra.0+0x3a/0xa20 [ 2540.477791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2540.478516] kmem_cache_alloc+0x159/0x310 [ 2540.479129] security_file_alloc+0x34/0x170 [ 2540.479741] __alloc_file+0xb7/0x320 [ 2540.480288] alloc_empty_file+0x6d/0x170 [ 2540.480868] path_openat+0xe3/0x26e0 [ 2540.481419] ? path_lookupat+0x860/0x860 [ 2540.481997] ? perf_trace_lock+0xac/0x490 [ 2540.482587] ? lock_acquire+0x197/0x470 [ 2540.483150] ? find_held_lock+0x2c/0x110 [ 2540.483720] ? __lockdep_reset_lock+0x180/0x180 [ 2540.484393] do_filp_open+0x190/0x3e0 [ 2540.484932] ? may_open_dev+0xf0/0xf0 [ 2540.485478] ? __alloc_fd+0x2b8/0x630 [ 2540.486013] ? lock_downgrade+0x6d0/0x6d0 [ 2540.486610] ? do_raw_spin_lock+0x121/0x260 [ 2540.487224] ? rwlock_bug.part.0+0x90/0x90 [ 2540.487839] ? _raw_spin_unlock+0x1a/0x30 [ 2540.488431] ? __alloc_fd+0x2b8/0x630 [ 2540.488987] do_sys_openat2+0x171/0x420 [ 2540.489109] ISOFS: Unable to identify CD-ROM format. [ 2540.489552] ? build_open_flags+0x6f0/0x6f0 [ 2540.489582] ? rcu_read_lock_any_held+0x75/0xa0 [ 2540.491246] __x64_sys_openat+0x13f/0x1f0 [ 2540.491831] ? __ia32_sys_open+0x1c0/0x1c0 [ 2540.492450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2540.493187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2540.493912] do_syscall_64+0x33/0x40 [ 2540.494453] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2540.495175] RIP: 0033:0x7f643d425a04 [ 2540.495714] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2540.498273] RSP: 002b:00007f643a9e7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2540.499359] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d425a04 [ 2540.500357] RDX: 0000000000000002 RSI: 00007f643a9e8000 RDI: 00000000ffffff9c [ 2540.501360] RBP: 00007f643a9e8000 R08: 0000000000000000 R09: ffffffffffffffff [ 2540.502361] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2540.503370] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 09:13:07 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xdb86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:07 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x4) shmget(0x0, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:13:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x8, 0x0, 0x0) [ 2540.563757] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2540.565054] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2540.566120] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2540.576055] ISOFS: Unable to identify CD-ROM format. [ 2540.594354] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2540.595096] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2540.595693] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2540.600865] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2540.615238] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:13:21 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xdc86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x1, 0x1, 0xde2, 0x1, 0x81}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x111201, 0x14) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x155d, 0x7f, 0x0, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5dc}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 09:13:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) unshare(0x8040800) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3990, &(0x7f0000000300)={0x0, 0x973a, 0x4, 0x0, 0x75, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000380)) 09:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 09:13:21 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x80) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)=':\'[,#\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000015c0)={&(0x7f00000000c0), 0xc, &(0x7f0000001580)={&(0x7f0000000100)={0x1480, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x99, 0x10}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x13c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x129c, 0xd, 0x0, 0x1, [{0xf9, 0x0, "8299a077d21631aac004f46d18de3cb07e6a328241712a15801a72f5ed7213edaef7d43089bb92fc087bfacc9a618cab34f47e80157881a9439c357896f794387ab6a8c55317f1b9386618c6c4fc30028e3643d1dcf803bdb560e8da6154eb2c6d4afcf67bb558e7206fa93a16b2c0c016cfabe5acffdc2333339b3f6ec0e8112311851c6df3ec4ba04e42339e33b9f4d042014281f9d6ef0c11b2d03f18fffbeda964be1136b4ec2040c2e9aca4222606a5bfd694b1360230d44f307986b2603644be6a5aea476efbf1d53cc571600b69aa184f31f46e57611962cedcdf331cfad3b0ac18d88b8a74f5523f12b01317ba542ba556"}, {0x6b, 0x0, "1b9c2eec1901fa2608c19e376dc67a645c668172cdae1a311089215d0097909a25a2a78a177b51ddcc54bc69a9947de4ffac1eeb0bfb67bae36c68f700c33bc409dda84b98c65b8c0842a12835e2d8b8da2c3e4ea67fbe3941a64133eeae97cab23808ee3cb07d"}, {0x1004, 0x0, "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"}, {0x2a, 0x0, "ba46c6683de97392597d63bc822aa3c1755c5d13d1ebe48b20e63533ed5fad5cfe2835f3b1a4"}, {0xfe, 0x0, "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"}]}, @NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}, @NL80211_ATTR_NAN_FUNC={0x7c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x78, 0xe, 0x0, 0x1, [{0x5b, 0x0, "c8673fa03bd9db498fc76aa857ce23eea3ba3b490a0acfd80ebb465078bff184cc3f53ec1db57cd6eff6fdc398aa48db5688e3df8bb2788f71a93e385a3ea146dd1182233a3a55c326e65b85f4280a2f7c23fa2fe1de54"}, {0x18, 0x0, "baf3d5bf03e3c11a4700014f3651cd8daa128d24"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x1480}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:13:21 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 59) 09:13:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 09:13:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x6000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2554.173274] FAULT_INJECTION: forcing a failure. [ 2554.173274] name failslab, interval 1, probability 0, space 0, times 0 [ 2554.174995] CPU: 1 PID: 14786 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2554.175931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2554.177053] Call Trace: [ 2554.177416] dump_stack+0x107/0x167 [ 2554.177912] should_fail.cold+0x5/0xa [ 2554.178441] ? __kthread_create_on_node+0xd1/0x400 [ 2554.179111] should_failslab+0x5/0x20 [ 2554.179628] kmem_cache_alloc_trace+0x55/0x320 [ 2554.180253] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2554.180905] __kthread_create_on_node+0xd1/0x400 [ 2554.181550] ? __kthread_parkme+0x1d0/0x1d0 [ 2554.182147] ? __mutex_lock+0x4fe/0x10b0 [ 2554.182694] ? loop_configure+0xcb5/0x1480 [ 2554.183277] ? do_raw_spin_unlock+0x4f/0x220 [ 2554.183879] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2554.184531] kthread_create_on_node+0xbb/0x100 [ 2554.185155] ? __kthread_create_on_node+0x400/0x400 [ 2554.185834] ? lockdep_init_map_type+0x2c7/0x780 [ 2554.186475] ? lockdep_init_map_type+0x2c7/0x780 [ 2554.187128] loop_configure+0x3e3/0x1480 [ 2554.187688] lo_ioctl+0xa72/0x1760 [ 2554.188175] ? avc_has_extended_perms+0x7f1/0xf40 [ 2554.188838] ? loop_set_status_old+0x250/0x250 [ 2554.189462] ? avc_ss_reset+0x180/0x180 [ 2554.190007] ? lock_acquire+0x197/0x470 [ 2554.190546] ? find_held_lock+0x2c/0x110 [ 2554.191109] ? __lock_acquire+0xbb1/0x5b00 [ 2554.191730] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2554.192450] ? generic_block_fiemap+0x60/0x60 [ 2554.193069] ? loop_set_status_old+0x250/0x250 [ 2554.193497] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2554.193683] blkdev_ioctl+0x291/0x710 [ 2554.193709] ? blkdev_common_ioctl+0x1930/0x1930 [ 2554.194852] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2554.195340] ? selinux_file_ioctl+0xb6/0x270 [ 2554.195370] block_ioctl+0xf9/0x140 [ 2554.195386] ? blkdev_read_iter+0x1c0/0x1c0 [ 2554.195408] __x64_sys_ioctl+0x19a/0x210 [ 2554.196118] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2554.197021] do_syscall_64+0x33/0x40 [ 2554.197044] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2554.201377] RIP: 0033:0x7f643d4728d7 [ 2554.201883] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2554.204345] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2554.205377] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d4728d7 [ 2554.206333] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2554.207288] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2554.208237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2554.209193] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 09:13:21 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 60) 09:13:21 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/25) r1 = shmget$private(0x0, 0x1000, 0x325a9c9532b73673, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/5) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 2554.271449] FAULT_INJECTION: forcing a failure. [ 2554.271449] name failslab, interval 1, probability 0, space 0, times 0 [ 2554.273382] CPU: 0 PID: 14791 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2554.274387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2554.275570] Call Trace: [ 2554.275962] dump_stack+0x107/0x167 [ 2554.276505] should_fail.cold+0x5/0xa [ 2554.277062] ? create_object.isra.0+0x3a/0xa20 [ 2554.277730] should_failslab+0x5/0x20 [ 2554.278291] kmem_cache_alloc+0x5b/0x310 [ 2554.278882] ? lock_acquire+0x197/0x470 [ 2554.279465] create_object.isra.0+0x3a/0xa20 [ 2554.280104] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2554.280852] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2554.281597] create_io_worker+0xe8/0x620 [ 2554.282194] io_wqe_enqueue+0x69e/0xbe0 [ 2554.282778] ? create_worker_cb+0x260/0x260 [ 2554.283404] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2554.284172] ? io_wq_work_match_all+0x10/0x10 [ 2554.284841] ? io_prep_async_work+0x340/0x550 [ 2554.285497] io_queue_async_work+0x26b/0x4f0 [ 2554.286140] __io_queue_sqe+0x5cc/0x9d0 [ 2554.286724] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2554.287508] ? trace_hardirqs_on+0x5b/0x180 [ 2554.288140] ? io_issue_sqe+0x7700/0x7700 [ 2554.288766] io_submit_sqes+0x4461/0x85c0 [ 2554.289399] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2554.290124] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2554.290825] ? lock_downgrade+0x6d0/0x6d0 [ 2554.291423] ? find_held_lock+0x2c/0x110 [ 2554.292016] ? io_submit_sqes+0x85c0/0x85c0 [ 2554.292657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2554.293359] ? wait_for_completion_io+0x270/0x270 [ 2554.294061] ? rcu_read_lock_any_held+0x75/0xa0 [ 2554.294737] ? vfs_write+0x354/0xa70 [ 2554.295276] ? fput_many+0x2f/0x1a0 [ 2554.295812] ? ksys_write+0x1a9/0x260 [ 2554.296373] ? __ia32_sys_read+0xb0/0xb0 [ 2554.296970] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2554.297733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2554.298481] do_syscall_64+0x33/0x40 [ 2554.299020] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2554.299759] RIP: 0033:0x7f705a641b19 [ 2554.300305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2554.302946] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2554.304045] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2554.305079] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2554.306101] RBP: 00007f7057bb71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2554.307120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2554.308142] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2554.321893] FAULT_INJECTION: forcing a failure. [ 2554.321893] name failslab, interval 1, probability 0, space 0, times 0 [ 2554.323562] CPU: 0 PID: 14799 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2554.324569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2554.325764] Call Trace: [ 2554.326155] dump_stack+0x107/0x167 [ 2554.326688] should_fail.cold+0x5/0xa [ 2554.327247] ? create_object.isra.0+0x3a/0xa20 [ 2554.327913] should_failslab+0x5/0x20 [ 2554.328474] kmem_cache_alloc+0x5b/0x310 [ 2554.329074] create_object.isra.0+0x3a/0xa20 [ 2554.329714] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2554.330457] kmem_cache_alloc_trace+0x151/0x320 [ 2554.331136] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2554.331830] __kthread_create_on_node+0xd1/0x400 [ 2554.332529] ? __kthread_parkme+0x1d0/0x1d0 [ 2554.333173] ? __mutex_lock+0x4fe/0x10b0 [ 2554.333766] ? loop_configure+0xcb5/0x1480 [ 2554.334387] ? do_raw_spin_unlock+0x4f/0x220 [ 2554.335028] ? loop_info64_to_compat+0x5f0/0x5f0 [ 2554.335725] kthread_create_on_node+0xbb/0x100 [ 2554.336394] ? __kthread_create_on_node+0x400/0x400 [ 2554.337122] ? lockdep_init_map_type+0x2c7/0x780 [ 2554.337816] ? lockdep_init_map_type+0x2c7/0x780 [ 2554.338519] loop_configure+0x3e3/0x1480 [ 2554.339121] lo_ioctl+0xa72/0x1760 [ 2554.339646] ? avc_has_extended_perms+0x7f1/0xf40 [ 2554.340355] ? loop_set_status_old+0x250/0x250 [ 2554.341035] ? avc_ss_reset+0x180/0x180 [ 2554.341620] ? lock_acquire+0x197/0x470 [ 2554.342198] ? find_held_lock+0x2c/0x110 [ 2554.342795] ? __lock_acquire+0xbb1/0x5b00 [ 2554.343456] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2554.344222] ? generic_block_fiemap+0x60/0x60 [ 2554.344910] ? loop_set_status_old+0x250/0x250 [ 2554.345575] blkdev_ioctl+0x291/0x710 [ 2554.346135] ? blkdev_common_ioctl+0x1930/0x1930 [ 2554.346828] ? selinux_file_ioctl+0xb6/0x270 [ 2554.347474] block_ioctl+0xf9/0x140 [ 2554.348002] ? blkdev_read_iter+0x1c0/0x1c0 [ 2554.348636] __x64_sys_ioctl+0x19a/0x210 [ 2554.349245] do_syscall_64+0x33/0x40 [ 2554.349788] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2554.350537] RIP: 0033:0x7f643d4728d7 [ 2554.351077] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2554.353755] RSP: 002b:00007f643a9e7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2554.354869] RAX: ffffffffffffffda RBX: 00007f643d4bc970 RCX: 00007f643d4728d7 [ 2554.355902] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2554.356947] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 2554.357986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2554.359035] R13: 0000000000000004 R14: 00000000200004a0 R15: 0000000000000004 09:13:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7f, 0x2000) openat2(r1, &(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)={0x181000, 0x0, 0x2}, 0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2554.390522] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2554.411591] ISOFS: Unable to identify CD-ROM format. 09:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 2554.431464] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2554.432773] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2554.433883] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2554.462926] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:13:21 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xdd86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2554.573391] ISOFS: Unable to identify CD-ROM format. [ 2554.629617] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2554.631040] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2554.632115] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:13:21 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) (fail_nth: 61) 09:13:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x7000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2554.719348] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2554.740399] FAULT_INJECTION: forcing a failure. [ 2554.740399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2554.742110] CPU: 0 PID: 14826 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 2554.743102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2554.744300] Call Trace: [ 2554.744689] dump_stack+0x107/0x167 [ 2554.745223] should_fail.cold+0x5/0xa [ 2554.745783] _copy_from_user+0x2e/0x1b0 [ 2554.746363] kstrtouint_from_user+0xbd/0x220 [ 2554.747007] ? kstrtou8_from_user+0x210/0x210 [ 2554.747666] ? lock_acquire+0x197/0x470 [ 2554.748241] ? ksys_write+0x12d/0x260 [ 2554.748816] proc_fail_nth_write+0x78/0x220 [ 2554.749443] ? proc_task_getattr+0x1f0/0x1f0 [ 2554.750077] ? __fget_files+0x296/0x4c0 [ 2554.750666] ? proc_task_getattr+0x1f0/0x1f0 [ 2554.751300] vfs_write+0x29a/0xa70 [ 2554.751823] ksys_write+0x12d/0x260 [ 2554.752358] ? __ia32_sys_read+0xb0/0xb0 [ 2554.752950] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2554.753709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2554.754463] do_syscall_64+0x33/0x40 [ 2554.755004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2554.755805] RIP: 0033:0x7f643d4255ff [ 2554.756373] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2554.759005] RSP: 002b:00007f643a9e8170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2554.760104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f643d4255ff [ 2554.761136] RDX: 0000000000000001 RSI: 00007f643a9e81e0 RDI: 0000000000000003 [ 2554.762154] RBP: 00007f643a9e81d0 R08: 0000000000000000 R09: ffffffffffffffff [ 2554.763180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2554.764207] R13: 00007ffce452c5bf R14: 00007f643a9e8300 R15: 0000000000022000 09:13:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000300)="e26b384ba4c14b3593985ef97cdaa85e0b796a64181cadf4e68d305fa81f67b363de9adfddae9cbcd3243aa261956b517b1d7fbbb79a46178ea12d019e02d0439b", 0x41, r1}, 0x68) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:13:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x4, 0x1, 0x8, 0xff, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x40, 0x6a5e}, 0x0, 0x6, 0x2, 0x5, 0xffff, 0x7, 0x7, 0x0, 0xf7db, 0x0, 0x3}, r1, 0x9, r0, 0xa) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10102, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000200)) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file2\x00'}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:13:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) [ 2554.915912] ISOFS: Unable to identify CD-ROM format. [ 2554.977266] ISOFS: Unable to identify CD-ROM format. 09:13:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="f51043b3fbc386f3bb36abcc8628513fe9d0401ad6eb7964b7b4a6b4fb3bc019a0454b2fa4def7442261a119888d4b97b354fbb9a44c14dc12a903353bb7a54a631d7b71653be3fc217a6aba92085fd2c127face34c1610d9932c8df6b134d1793345f6ccbf1c74a0ffd51d39ae631579d9e372442fdd00465cc52f361d8bb780049002fbcb264c2254613d0bb1cdfbe7361fb1a5448fc89f05dc2d1ad43ed7a89a56803e079cef35edc55759ed54aa5baf596546ee64856f8eec4d2f0c22a15e7d5fd8ed524543ad7cc8bc1f89d2c1aa0b63bc6d9cb4d99c34c05f4b036228f1a4e36b7398fa989b1933799b84528b86d33296f73c40300"], 0x298}, 0x1, 0x0, 0x0, 0x4010}, 0x804) 09:13:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) r3 = syz_io_uring_setup(0x4d47, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xe7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:13:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:13:39 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 09:13:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:13:39 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/167) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r2 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff4000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000180)=""/217) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/109) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000140)=""/28) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ff4000/0x3000)=nil) 09:13:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xde86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2572.411156] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2572.412263] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2572.413306] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2572.437683] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2572.492351] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2572.493500] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2572.494537] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2572.501804] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:13:39 executing program 2: r0 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ff4000/0x2000)=nil, 0x1000) [ 2572.589778] ISOFS: Unable to identify CD-ROM format. 09:13:39 executing program 0: prctl$PR_SVE_SET_VL(0x32, 0x13ed4) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:13:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xdf86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:39 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:39 executing program 2: r0 = getpgrp(0x0) ptrace$getsig(0x4202, r0, 0x4, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, r1, 0x1c, @inherit={0x50, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000001000000000000000100080000000000ed01ffffffffffff000000000000800004000004000000000000000000000000070000000000000003000000000000000400000000000000"]}, @devid}) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r2 = memfd_create(&(0x7f0000001300)='\x00', 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001340)) 09:13:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 09:13:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x9000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:13:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x269f, 0x800, 0x4}) [ 2572.741189] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2572.742434] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2572.743623] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:13:40 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2572.801857] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:13:52 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r2, r1, 0x0) close(r1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:13:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) 09:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1e7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="d40100001700010000000000db99331da61740bc03e20725ca20000000fc0200000000000000000000000000010000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000ff01000000000000000000000000000100003b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000010000000000000000000aa7f00000100000000000000000000000000000000dfffffff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000008000000000000000f8ffffffffffffff00000000000000000000000000000073d55792ffffffff05000000000000000900000000000000000000000000000000000080000000005d0b000000000000e70000000000000000020000000000000200010300000000"], 0x1d4}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r8 = dup3(r7, r6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x8, 0x5, 0x1}, 0x3f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x0, 0x80, 0xfffffffd, 0x7, 0x1, {0x6, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) io_uring_enter(0xffffffffffffffff, 0x4537, 0xb80, 0x5, &(0x7f0000000200)={[0x9]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x108, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r8, 0x58ab, 0xb700, 0x1, 0x0, 0x0) 09:13:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xb000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:13:52 executing program 2: r0 = shmget(0x2, 0x1000, 0x1, &(0x7f0000ff3000/0x1000)=nil) shmat(r0, &(0x7f0000ff3000/0x4000)=nil, 0x6000) 09:13:52 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe086, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x8, 0x0, 0x0, 0x0) [ 2585.374934] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2585.375627] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2585.376298] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2585.387717] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2585.388423] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2585.389059] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:13:52 executing program 2: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x6, 0x6, 0xcf7, 0x83f, 0x6, 0x7}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "c06ca7e15f32ddebc047e73d3e7114ba857bc970"}, 0x15, 0x0) fcntl$setown(r0, 0x8, 0x0) close_range(r0, r0, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000006ec5b9eb", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf251a0000005400228014000080080006000100000008000500010000003c0000800800070000000000080005004b0000000800030003000000080001000700000008000700080000000800010000000000080003000800000008009a0001000000"], 0x70}, 0x1, 0x0, 0x0, 0x881}, 0x4000) [ 2585.431603] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2585.434319] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2585.442100] ISOFS: Unable to identify CD-ROM format. 09:13:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0xda, 0x0, 0x0, 0x2f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8000, 0x1, 0x7fff, 0x74}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x3a8, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "ac3c0eafeff51ca7015bf87b4f20be55dd37d5a2b671446f22e77a5b5ebb7af524a15aae03fd718ddaf8268f84efc3efe95ac2f4479032ea6f84bf96010fa3670dd3d0abe0b560f861ce66542f2ce3ce081a44f5d713f854cb60d6de8db758da60e46f299aab4f16179a4bba1655c7647bc1e922b5e6ce1beb55d79aa2248743fdcdd19241f06e66e58ca2bd27f497e51222f0112352fd64383907e2fd252441ff04acfa912f1dd9cf52e85435b148a97d2aa872b07170dc7ec1d3db14243c8be7d8c5b2221bfe0da3f34ff8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "187edb63799075eecfd169268b61334d781bc691fd40a8c20a5fda5ae060bb1017cc336603889fa3179921eff44c740d1029eb3a3485f52dec9f5efff5e0bd675b6e8a84fc73ea67da8c6ccb4784ec33790b122a02dd099b9c403829a4d9a67b6560d18eeb6953146f890a895686fc725419e38a89ce5253bdf7f7a64dc503216be96e8bed12a4a661d3651474ec4e69eedb46712faa6ef16b50e471b48dc14cc83c4d44a71c1eff6734f056247985fbb536980675ff46e366d9e332a04a42e04f0ce93846ba4e2264f52c793771c74b6f604a71ccef24"}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "232653f10af826cb7271a8eb1d7a8b47573622fb07359450faf0bb95926674191df76055c2b522f8249adfdb6ab796577f2c2f332140c229c08296d695ef6a98682b5482ce87fcdf32d1db0076790f10d9dd65accce0d02a888c2ac081ce04c1a51833ad35b89640e82bac8e303ba8037cfe67fc6dff7a04b7c0d32a0f77f23b51b78ff43b00a91073bcb60af8aadd5266a5f2f8193d8c35b3f7a24dc1f6da13223238810408d8a630cfae4c39461764a3a33bf70e9fe0cf5c358b21bd32208f6910f0c49ddf44e2"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/snd/timer\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5435}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffb}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x8014}, 0x4000005) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:13:52 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe186, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2585.482886] ISOFS: Unable to identify CD-ROM format. 09:13:52 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:13:52 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xc000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2585.521755] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2585.523184] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2585.524516] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2585.564135] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2585.628817] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2585.630050] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2585.631176] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2585.637744] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2585.710441] ISOFS: Unable to identify CD-ROM format. [ 2585.751362] ISOFS: Unable to identify CD-ROM format. 09:14:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffa3d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x3, 0x5403e66cf1768e6a, 0x5, 0x0, 0xffff}, 0x2, 0x7}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:14:08 executing program 2: r0 = shmget(0x2, 0x1000, 0x1, &(0x7f0000ff7000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ff7000/0x2000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0xb) 09:14:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xd000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:14:08 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 09:14:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 09:14:08 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe286, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r4 = fork() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r4, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r4) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000300)={&(0x7f0000000200)="164233d9646f3e38d3702aa08c5752fdc71eeff429979c90eecf57390e56269810fb034d42b3605a67a363ee6a7be410b1c8cfd3cb5b39a2938bfa4a", 0x3c}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2601.320995] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2601.322453] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2601.323805] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2601.342634] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2601.344067] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2601.345313] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:14:08 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/51) [ 2601.377902] ISOFS: Unable to identify CD-ROM format. [ 2601.378431] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2601.382289] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2601.451246] ISOFS: Unable to identify CD-ROM format. 09:14:08 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe386, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:08 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:08 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget(0x0, 0x3000, 0x8, &(0x7f0000ff5000/0x3000)=nil) shmat(r0, &(0x7f0000ff6000/0x1000)=nil, 0x5000) 09:14:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xe000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:14:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x82) close(r0) r1 = memfd_create(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x150, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@address_filter={0x28, 0x1a, {@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0xa, 0x1, 0x40}}]}, 0x150}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r3, 0x0) tee(r2, r3, 0x85, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2601.618932] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2601.620029] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2601.621055] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2601.671252] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:14:08 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 09:14:08 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe486, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2601.749102] ISOFS: Unable to identify CD-ROM format. [ 2601.832743] ISOFS: Unable to identify CD-ROM format. [ 2601.860921] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2601.862129] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2601.863319] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2601.881592] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:14:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x8) 09:14:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20080, 0xc) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) stat(&(0x7f0000000000)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) setresuid(r4, r2, r5) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=unix,', {[{@aname={'aname', 0x3d, '[+-'}}, {@noextend}, {@cache_loose}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@noextend}, {@version_9p2000}, {@noextend}, {@cachetag={'cachetag', 0x3d, '-*-@&/\\\\&%\\'}}, {@debug={'debug', 0x3d, 0x3}}, {@dfltuid={'dfltuid', 0x3d, r1}}], [{@audit}, {@obj_type={'obj_type', 0x3d, '^\xc0'}}, {@subj_role}, {@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@appraise_type}, {@euid_lt={'euid<', r3}}, {@measure}, {@seclabel}, {@measure}]}}) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x2) 09:14:22 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe586, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x44060480) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:14:22 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:22 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x4000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 09:14:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x800000, 0x0, 0x0, 0x0) 09:14:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xf000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:14:22 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) openat(r2, &(0x7f0000000040)='./file2/../file0\x00', 0x20100, 0xc2) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2614.938401] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2614.939609] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2614.940695] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2614.969929] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2614.972615] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2614.973877] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:14:22 executing program 2: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x7) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd_index=0x8, 0x9, 0x0, 0x4, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2615.054309] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2615.055068] ISOFS: Unable to identify CD-ROM format. [ 2615.058620] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:14:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) 09:14:22 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r2, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@allocspi={0x208, 0x16, 0x400, 0x70bd25, 0x25dfdbfd, {{{@in=@loopback, @in6=@empty, 0x4e21, 0xffff, 0x4e22, 0x8, 0x5, 0xa0, 0x20, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00', 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x100000000, 0x3, 0x100000001, 0x10001, 0x6, 0x10001, 0x5, 0xfffffffffffffff9}, {0xd7, 0x85, 0x6, 0x9}, {0xf8, 0x8, 0x2}, 0x70bd2b, 0x10001, 0x2, 0x4, 0x80, 0x42}, 0x8, 0xffff}, [@tmpl={0xc4, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x33}, 0x2, @in=@private=0xa010102, 0x3504, 0x2, 0x1, 0x81, 0x8, 0x3, 0x6}, {{@in6=@local, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x2, 0x2, 0x1, 0x3, 0xffffffc1, 0x6}, {{@in=@multicast1, 0x4d2, 0x33}, 0x2, @in=@multicast2, 0x0, 0x4, 0x3, 0x90, 0xe4, 0xe85d, 0x7f}]}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd2a, 0x70bd2d, 0x70bd26, 0x70bd29, 0x7, [0x80000001, 0x0, 0xf5, 0x1, 0x8, 0x0, 0x5, 0x8, 0x1, 0x9]}}, @replay_thresh={0x8, 0xb, 0x7f21}]}, 0x208}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r7, r6, 0x0) r8 = timerfd_create(0x8, 0x800) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)={0x0, 0x5, 0xa, 0x0, 0x0, [{{}, 0x6}, {{r1}, 0x5}, {{r4}, 0x60cb}, {{r5}, 0x8}, {{r6}, 0x5301}, {{r1}, 0x2}, {{r8}, 0x7}, {{r1}, 0x8}, {{}, 0x7}, {{r0}, 0x2}]}) [ 2615.152853] ISOFS: Unable to identify CD-ROM format. 09:14:22 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8420, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'0000000000000000000000000000000', 0x37}, 0x2c, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="75736564000000000000000000c7b5abdf241a3e3b9fc1e56d13539019f8a02bfb50e15bcb64d0d60e6fc1094d12298e62f5f0512448ec214be0f053b30ca93f3b6303326266c1e88479d5328ff30c72db9a3d48782acd1806879299d22ba2c077cd108d6e665e7cf20b2cb0de6cc553002c50c1a62f82c350489afcce5811f17472443a63115c4ce528afa3a054c2acfa77fcd8f6e6120420a9debf0f001e9c85f3c9b4ead0c1d407c18271f237ac5e2f2bba2f"]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd82, 0x80) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:14:22 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2615.228860] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2615.229480] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2615.230027] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2615.237879] tmpfs: Cannot retroactively limit inodes 09:14:22 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xec02, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2615.254344] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2615.266207] tmpfs: Cannot retroactively limit inodes 09:14:22 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:14:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 09:14:22 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x100) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:14:22 executing program 2: ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) r0 = shmget(0x3, 0x3000, 0x2, &(0x7f0000ff5000/0x3000)=nil) shmat(r0, &(0x7f0000ff7000/0x2000)=nil, 0x1000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x84) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x3) [ 2615.432946] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2615.434580] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2615.435646] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2615.446453] ISOFS: Unable to identify CD-ROM format. [ 2615.465303] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2615.577533] ISOFS: Unable to identify CD-ROM format. 09:14:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 09:14:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x11000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:14:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 09:14:36 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x2, 0x1000, 0x54000000, &(0x7f0000ff6000/0x1000)=nil) 09:14:36 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:36 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x1) fsync(r0) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="d40100001700010094b308ca3b0000000000000000fc02000000000100000000000000000500000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000a000000000006aa7564b6bb53e30e723e2eb34c0c3f697970000000000000000002c52af98da66da1988fc928fbf3060563cf7604355f9b24070a23f0e13d76a111562ab14c98d6cfe5bfc16150621d016e2744ad348868b86ecdd3b3c32837d715f6f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2001000000000091c8f4dfd696156d69eebf880000000000000000027f00000100"/48, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000ac000700640101020000000000000000000000000a0101010000000000000000000000004e2000004e24003f0a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d4}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0x326, 0x2, 0x3}}) r4 = dup(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x8, 0x1, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x20, 0x10, 0x3, 0xad}}) stat(&(0x7f0000000000)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) clock_gettime(0x0, &(0x7f0000000180)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r7}}, 0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x32, r5, r6}, {0x3, 0x20, 0x7, 0x3a6, 0x9, 0x1, 0x159, 0x8}, {0x10001, 0x30, 0x40, 0x8}, 0x7f, 0x6e6bb3}, {{@in6=@private2, 0x4d3, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x3, 0x3, 0x81, 0x3, 0x4, 0x800}}, 0xe8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2628.922989] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. 09:14:36 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xedc0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:36 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r0 = syz_io_uring_setup(0x2f32, &(0x7f0000000280), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file2\x00', 0x29, 0x28480, 0x12345}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x41, 0x1}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file2\x00', 0x5) fcntl$setown(r5, 0x8, 0xffffffffffffffff) close(r5) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 2628.969121] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2628.970427] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2628.971515] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2628.978605] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2628.979781] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2628.980917] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:14:36 executing program 2: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r2 = fork() setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r2, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x3f, 0x8, 0x0, 0x0, 0x3e, 0x4800, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x5c9}, 0x10, 0x2f1, 0x0, 0x2, 0x40, 0x5bb, 0x8, 0x0, 0x4, 0x0, 0x3}, r2, 0x4, r0, 0x3) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2629.006376] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2629.032949] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2629.036785] ISOFS: Unable to identify CD-ROM format. [ 2629.089192] ISOFS: Unable to identify CD-ROM format. 09:14:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x8, 0x0, 0x0) 09:14:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:14:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 09:14:50 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xff0f, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:50 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x12000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2642.830710] ISOFS: Unable to identify CD-ROM format. 09:14:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000200)={r4, 0x1, 0x100000000, 0x6}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r6, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:14:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}}, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) sendfile(r3, r2, &(0x7f0000000000)=0x4, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), r2) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x400, 0x70bd26, 0x8, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x810) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:14:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r3, r2, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) [ 2642.882299] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2642.883668] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2642.884799] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2642.889757] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2642.890486] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2642.891170] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2642.917000] ISOFS: Unable to identify CD-ROM format. 09:14:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x13000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:14:50 executing program 2: shmget(0x1, 0x3000, 0x400, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/77) r1 = shmget$private(0x0, 0x3000, 0xc8adf9ecef48386a, &(0x7f0000ff4000/0x3000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/65) [ 2642.969684] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2642.971236] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:14:50 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:50 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x10200, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:14:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 09:14:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x81) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:14:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 2643.077902] ISOFS: Unable to identify CD-ROM format. [ 2643.123458] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2643.124192] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2643.124761] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:14:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@private, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) 09:14:50 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmget(0x3, 0x3000, 0x400, &(0x7f0000ff6000/0x3000)=nil) [ 2643.154310] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2643.154927] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2643.155567] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2643.170963] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2643.189561] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2643.235795] ISOFS: Unable to identify CD-ROM format. 09:15:02 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000140)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000040)={r1, r2+10000000}, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x440800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x1, 0xfffffff8, 0x3, 0x5}}) 09:15:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x14000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:15:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xfff) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0xa, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r7, 0x0, 0xb) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) recvfrom$packet(r4, &(0x7f0000000540)=""/214, 0xd6, 0x2000, &(0x7f0000000440)={0x11, 0x3, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) io_uring_enter(r1, 0x15b, 0xc488, 0x3, &(0x7f0000000300)={[0x1]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:02 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xf, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 09:15:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) 09:15:02 executing program 2: r0 = io_uring_setup(0x6938, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) 09:15:02 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x20000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2655.611906] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2655.612628] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2655.613290] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2655.615604] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2655.616357] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2655.616999] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2655.642836] ISOFS: Unable to identify CD-ROM format. 09:15:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) [ 2655.664150] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2655.665730] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:02 executing program 2: shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) r0 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ff6000/0x2000)=nil) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/206) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/73) 09:15:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x15000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:15:02 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x20100, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:02 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2655.817226] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2655.817867] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2655.818551] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:15:03 executing program 2: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 2655.826672] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2655.880342] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2655.881064] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2655.881639] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2655.903114] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:16 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x5, 0x4) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:15:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x16000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:15:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x6450, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x2, 0x231}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x2}, 0x80000001) syz_io_uring_submit(r7, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x101000, 0x23456}, 0x2) 09:15:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 09:15:16 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x16, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 09:15:16 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x20400, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:16 executing program 2: prctl$PR_GET_SECCOMP(0x15) shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) [ 2669.734848] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2669.736056] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2669.737153] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2669.764098] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2669.765355] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2669.766478] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2669.806522] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2669.809283] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2669.903215] ISOFS: Unable to identify CD-ROM format. 09:15:17 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x0, 0x3, 0x9, 0x80000000}, {0x761e, 0x0, 0x81, 0x99}, {0x7f, 0x4, 0x1, 0x800}, {0x3, 0x2, 0x1, 0x200000}]}) r6 = openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0) dup3(r6, r5, 0x22e262d6cba30403) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) 09:15:17 executing program 2: shmget(0x3, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff6000/0x2000)=nil, 0x2000) 09:15:17 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3ffff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:17 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x18, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x10, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r4 = fork() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r4, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r4) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000300)={&(0x7f0000000200)="164233d9646f3e38d3702aa08c5752fdc71eeff429979c90eecf57390e56269810fb034d42b3605a67a363ee6a7be410b1c8cfd3cb5b39a2938bfa4a", 0x3c}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:17 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x100) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2670.097519] ISOFS: Unable to identify CD-ROM format. [ 2670.105303] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2670.106523] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2670.107670] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:15:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) [ 2670.154431] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:32 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1d, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 09:15:32 executing program 2: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xdd86, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x17000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:15:32 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r1}, "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"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:15:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) 09:15:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x57e5, &(0x7f0000000340)={0x0, 0xc904, 0x20, 0x3, 0x320}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd=r1, 0x800, 0x9, 0x2, 0x3, 0x0, {0x2}}, 0x5) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7ff) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40800, 0x1}, 0x7ffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x48100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r7}}, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2685.395052] EXT4-fs (loop2): Unrecognized mount option "./file0" or missing value [ 2685.395728] EXT4-fs (loop2): failed to parse options in superblock: ./file0 [ 2685.396383] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 2685.399992] ISOFS: Unable to identify CD-ROM format. [ 2685.417361] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2685.418092] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2685.418690] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2685.426623] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2685.427418] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2685.428007] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2685.438103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2685.440609] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2685.447986] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) creat(&(0x7f0000000080)='./file2\x00', 0x49) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x2, 0x4}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r3) sendfile(r3, r2, &(0x7f0000000000)=0x4, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000003000000080000006000000000040000"], 0x2140) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000200)) [ 2685.472719] ISOFS: Unable to identify CD-ROM format. 09:15:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000004, 0x810, r1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:32 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40200, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:32 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2e, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:32 executing program 2: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x18000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:15:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x20) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:15:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 2685.622643] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2685.623431] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2685.624052] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2685.658992] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2685.660196] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2685.661300] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2685.666590] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 09:15:32 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file2\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000540)=[0x0]) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x72}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xd0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x2c977745209c628e, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000580)={{r2}, "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"}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2685.702867] EXT4-fs (loop2): Unrecognized mount option "./file0" or missing value [ 2685.703570] EXT4-fs (loop2): failed to parse options in superblock: ./file0 [ 2685.704173] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 2685.717692] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2685.734213] EXT4-fs (loop2): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2685.776563] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 2685.797788] ISOFS: Unable to identify CD-ROM format. 09:15:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x800000, 0x0, 0x0) [ 2685.861651] ISOFS: Unable to identify CD-ROM format. 09:15:46 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5c, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r6 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) close(r6) sendfile(r6, r5, &(0x7f0000000000)=0x4, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index, 0x0, {0x0, r5}, 0x80000001, 0x4, 0x1}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) unshare(0x2000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x19000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:15:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 09:15:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = semget(0x3, 0x0, 0x4b0) semop(r4, &(0x7f0000000200)=[{0x3, 0x7, 0x2800}, {0x0, 0x8, 0x800}, {0x1, 0x1f, 0x1800}, {0x4, 0x5, 0x1000}, {0x0, 0x9, 0x1800}, {0x4, 0x4, 0x1000}, {0x4, 0x81, 0x1000}, {0x4, 0x2f4, 0x1000}], 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10010, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:46 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x407fc, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = timerfd_create(0x2, 0x800) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x5, 0x80, 0x57ee}) 09:15:46 executing program 2: close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x1}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0xffff, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r1, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xa, 0x1, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in6=@remote, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r3, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x3ff, 0x1, 0xfffffc01}}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000000)=ANY=[], 0x26, 0x0, 0x3000) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xeb, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xa08a}], 0x1, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) [ 2699.768524] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2699.769774] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2699.770933] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2699.785453] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2699.786167] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2699.786799] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2699.819653] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2699.827596] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) unshare(0x4000000) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:15:47 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) io_submit(0x0, 0x3, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)="a26866a310b1b207bd16b0", 0xb, 0x800, 0x0, 0xd804812c65553847, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x40, r0, &(0x7f0000000480)="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", 0x1000, 0xfffffffffffffe04, 0x0, 0x2, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r3, &(0x7f0000000200)="a55e256c1ff5eed1e8036fa5e097ce9287d5ca009802c8118f127326ba11b2d87d9054b1aa8a789b50e67a4fe3ad3145815af794d785bb21d005e30a4a2a3f9fd67ed4c3a3fe18e918c4af3d9a719b6ffb671976f3bda118f088aaa19e891c3fcde96c06e24ae8682dc0e2da029acf50c656d592653b45bfb3fd4052100e569413ff848c94c6346151880e8da118f06cd99d24d3fb4751bba0b5cf038078f96b3f8a034dc0493dc21cf2077b5608b696256ec40fd176dbb852b1e234aa6f", 0xbe, 0x3a9, 0x0, 0x1, r5}]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:15:47 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40800, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2699.913001] ISOFS: Unable to identify CD-ROM format. 09:15:47 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:47 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:15:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x8) 09:15:47 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x79, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:15:47 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x80400, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2700.051444] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2700.052143] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2700.052717] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2700.059721] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0x40, r0, &(0x7f0000000300)=0x6, 0x800000, 0x0) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2700.098800] ISOFS: Unable to identify CD-ROM format. [ 2700.147875] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2700.149148] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2700.150254] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2700.214144] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:15:47 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x14e, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2700.291477] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2700.292657] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2700.293731] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2700.313606] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 09:16:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x4, 0x9}}, './file0/file0\x00'}) getsockname(r8, &(0x7f0000000380)=@can, &(0x7f0000000400)=0x80) write(r7, &(0x7f0000000300)="674d3dd109e54fd29c4b36be411382a35dc88a80fbecde64d73399b3b6f5fac32134e989ecd55df48f802dcb3b298b1f9aaafe2654fc5875703b2c7125", 0x3d) 09:16:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0505405, &(0x7f00000000c0)) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2007, @fd_index=0x6, 0x3110ff6a, 0x0, 0x0, 0x19, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40002100, 0x1, {0x3}}, 0xfff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x17) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:00 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc0000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:00 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x212, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1a000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2713.046382] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2713.047379] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2713.048037] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2713.085117] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2713.094147] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2713.095400] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2713.096549] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2713.167307] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2713.183764] ISOFS: Unable to identify CD-ROM format. 09:16:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000200)=0x1000, 0x4) unshare(0x20080) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:12 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2a5, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x3b16, 0x6223, 0x3, &(0x7f0000000380)={[0xfffffffffffffff9]}, 0x8) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x4, 0xd, 0x40000000000000, 0x0, 0x7, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x400080, 0xf6}, 0x18) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system', 0xc0200, 0x21) io_uring_enter(r7, 0x2ad7, 0x84cc, 0x1, &(0x7f0000000340)={[0x8]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xffffffffffff0001}, 0x34044, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffff81}, 0x0, 0xfffffffffffffffc, r6, 0x0) 09:16:12 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4010000170001000000000000000000fc020000000000000000000000000001000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000a000"/104, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000008000000000000000f8ffffffffffffff00000000000000000000000000000073d55792ffffffff05000000000000000900000000000000000000000000000000000080000000005d0b000000000000e70000000000000000020000000000000200010300000000"], 0x1d4}}, 0x0) pwrite64(r0, &(0x7f0000000200)="9086d8f7f93a85875cdef74b0678fd3094dc70ba31638af3980f4dde13b1c67fad02da291fb3ed2c17057163c3eeab265aa284b9e7f047dcb0d54958d32d543cf33ffe518a261a64c6bc085da58ac4b442a5d8bb5cc5b1f18aa3e32baf66d5097853d268aea78931c614c05522f4044e1500b80e2619e2940c28873082f55b56f89b2f82dffb2bbb517056ebff22bd82a3cff349a804c2ae75b010f8421ec78b97c855fb3448ccc452bc2d41bd742e8afa22ca8f75ae660b5accbce94811c9205b6747024d8264c7bfdc5c10c0a21d7e5d8c8fde9991a1", 0xd7, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4010000170001000000000000000000fc0200000000000000000000000000010000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000ac000700640101020000000000000000000000000a0101010000000000000000000000004e2000004e24003f0a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000008000000000000000f8ffffffffffffff00000000000000000000000000000073d55792ffffffff05000000000000000980000000000000000000000000000000000080000000005d0b00000000000059476665b53121c300020000000000000200010300000000148caa0ae8b3bf9ce9e5b5e1e11891bb13"], 0x1d4}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r3, r2, 0x0) dup2(r3, r0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r1, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x4, 0x6, 0x6}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x3, 0xc00000}) creat(&(0x7f00000000c0)='./file2\x00', 0x100) 09:16:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0505405, &(0x7f00000000c0)) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:12 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 09:16:12 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1b000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2725.592328] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2725.593686] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2725.594799] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2725.604834] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2725.605596] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2725.606247] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:16:12 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000080)) dup3(0xffffffffffffffff, r2, 0x80000) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0xc0505405, &(0x7f00000000c0)) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2725.640831] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2725.642231] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:12 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xe0ffff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2725.662841] ISOFS: Unable to identify CD-ROM format. 09:16:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:13 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:13 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2aa, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x60f5, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x20003d6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x11, r1, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2007, @fd=r4, 0x9, 0x9, 0x7fffffff, 0x1b, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2725.824159] ISOFS: Unable to identify CD-ROM format. 09:16:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 09:16:13 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) close_range(r0, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) r3 = syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r2, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)={r8, r9+10000000}, 0x1, 0x0, 0x1}, 0x16ac0000) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000380)={{r4}, 0x0, 0x1a, @inherit={0x50, &(0x7f0000000300)={0x1, 0x1, 0x101, 0xffffffff, {0x0, 0x10000, 0x7, 0x8}, [0x400]}}, @subvolid=0x401}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:13 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1c000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2725.917530] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2725.918244] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2725.918843] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2725.979169] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:25 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x40000c00) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r1, 0x101, {0x0, r0}, 0x4, 0x2, 0x0, {0x0, 0x0, r0}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x100000000, 0x0, 0x1, 0x5, 0x1}, 0xeb6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) fchmod(r7, 0x8) 09:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 09:16:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) unshare(0x50000080) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000200)={0x5000003a}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @local}, 0xc) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x8000)=nil, 0x8000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) unshare(0x12010100) syz_io_uring_submit(0x0, r3, 0x0, 0x7) unshare(0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:25 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x1f4) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1d000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:16:25 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:25 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2c7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:25 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:25 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x805, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000140)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000180)=[{r2}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2738.463909] ISOFS: Unable to identify CD-ROM format. [ 2738.471801] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2738.473010] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2738.474164] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2738.481273] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2738.482452] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2738.483576] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:16:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2738.530965] ISOFS: Unable to identify CD-ROM format. 09:16:25 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x40, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0x32}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x50000) splice(r0, &(0x7f0000000200)=0x8001, r1, &(0x7f0000000240)=0x87, 0x401, 0x4) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x27) [ 2738.555214] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2738.555674] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:25 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1e000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:16:25 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2738.649153] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2738.649850] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2738.650505] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2738.661421] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 09:16:25 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:25 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2cc, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:25 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2738.784055] ISOFS: Unable to identify CD-ROM format. [ 2738.862220] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2738.863571] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2738.864666] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2738.868680] ISOFS: Unable to identify CD-ROM format. [ 2738.889468] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000300)=""/72, 0x48}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r5, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=@l2tp={0x2, 0x0, @private}, 0x0, 0x80000, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x9, 0x0, 0xffff}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) 09:16:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:39 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0xfffffffb}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat6\x00') r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x3}, 0x7ffffffd) r9 = inotify_init() syz_io_uring_submit(r8, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x2d41, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1f000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:16:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/155) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2752.033610] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2752.034356] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2752.035285] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2752.035302] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2752.035331] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2752.037611] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2752.064395] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2752.092768] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2752.131308] ISOFS: Unable to identify CD-ROM format. [ 2752.218547] ISOFS: Unable to identify CD-ROM format. 09:16:53 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:16:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 09:16:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000300), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:53 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5050000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x401, 0x200, 0x1, 0x400, 0x1f, "b0e0abcc776c9b9041deec33a2d9d0e3f077f5", 0x6, 0x3ff}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x318e}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20e040) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000100)=""/127) 09:16:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:16:53 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x314, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x414480) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2766.727096] ISOFS: Unable to identify CD-ROM format. [ 2766.732211] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2766.733490] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2766.734597] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2766.747298] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2766.748475] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2766.749548] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2766.768974] ISOFS: Unable to identify CD-ROM format. [ 2766.790169] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0, 0x800}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000001600)=""/194, 0xc2}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000001700)=""/147, 0x93}], 0x8, &(0x7f0000001840)=""/229, 0xe5}, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair(0x2b, 0x2, 0x7d6, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r3, &(0x7f00000019c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0xa, 0x4, {0x0, r1}, 0x40b, 0xa, 0x0, {0x0, r7, r8}}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x32, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2766.796514] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:16:54 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20100000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:16:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:54 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:54 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x391, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:16:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:16:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x40010, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) close(r6) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x0, 0x0, r6, &(0x7f0000000300), &(0x7f0000000200)='./file0\x00', 0x100, 0x4000, 0x0, {0x0, r7}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2767.014774] ISOFS: Unable to identify CD-ROM format. [ 2767.025247] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2767.025877] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2767.026558] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2767.055350] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2767.081182] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2767.081830] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2767.082504] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2767.100160] ISOFS: Unable to identify CD-ROM format. [ 2767.118941] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:08 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 09:17:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) finit_module(r5, &(0x7f0000000200)='\x9a#\'/*]\\{/\xd9\x9f-,/)\x00', 0x5d62c3d9e26f584d) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000040)) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:08 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4d, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r5, 0x80, &(0x7f0000000300)=@un=@abs={0x1, 0x0, 0x4e20}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7ff) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x21000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:08 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3bb, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2781.370136] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2781.372581] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2781.374085] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2781.382031] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2781.383458] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2781.384556] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:17:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) fallocate(r1, 0x1, 0x5, 0xff) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x44044) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r4, r3, 0x0) lseek(r3, 0x66c, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") 09:17:08 executing program 2: close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2781.439955] ISOFS: Unable to identify CD-ROM format. [ 2781.460452] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2781.480151] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:08 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3bc, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) sendmsg$nl_generic(r4, &(0x7f0000001980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000000300)={0x1604, 0x3b, 0x200, 0x70bd2a, 0x25dfdbfb, {0x6}, [@nested={0x156, 0x32, 0x0, 0x1, [@generic="2ec9b9618bd209d0bf9572267e3d3e010720af7b751fe4e9d86f048d0a7494b0a11ddb3f983d839c971e3a1a42a0f0d6da383dd0b1cd2088ce3ff4c474e8f220def3535e9d216dc53c7818c46c1e9d65a84425fd0afa3e4a783a71833f58872dea665ca87e183a2e32933450c940d9f7f7467b8b0447d79f7c486ecb99e5749a70ad1a3697c154d9d1eeea4234c88a3709b9b2055a0b09b06bc72e3d5287e4d3bef95f0a1e93bc90ed37f2eda067912d726595a49930f3138fe6f1020feecaf1efc75cb36c877471fa6826fdedc74387e9201228fc73bf48628547eb5f9661fb623dcff4c0c3f4508686", @generic="5178ba78a7e1820ae912b126568ed25451c98ab2b40d29520ab5c28b100d59a36cd6ebfa637df6fc5006bb06c76510d59910551d8ab1bcd6d43f80ebd4e994b595c12758d3810b36fe5aadd46c128421dc286c321b863892", @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x523a}, @typed={0x8, 0x38, 0x0, 0x0, @u32=0x10000}]}, @nested={0x4, 0x90}, @generic="da86e6b724d900c8492913802c7b8a6e5d86a4456254bf8d90d7778a27a624cf494de1272f2d915b13a73abe1b180b486ddf12b643f1b837c5ffa4b1b7a489909987f7f329fc3efdc7812aad07999ff2b30129077d686b1da126f7bf92d8e412601f7048f352d5b40553fa5c3a568a86a03415e5d800d946f88bac7dee558f4bbee7d1a8e90a595e7def5c849faa93fa5a6c95a37ce1590bfb8995e19109d46fabb65c5d54e8b6a527b41cf5987a5a6b70434422a5a44ffb5ba613cc63f10c6bbb58adf5451c763888b15b96", @nested={0x13bf, 0x5d, 0x0, 0x1, [@generic="1ec767090bd8ba1fa9f1c0ffb3924c2174cad504e8b2e5e4d248700a764aab412e0e40cfc3b34f4f7f6ef1c9391efe525870e1084bc1a004185698854462cf083dee87691f9c6962b1e44167cf19fb06a89be4a8c40ccc146f4aeb216d770996842a7916a245f6afca8791cf7d1febcaf94f6ef1919b80d71513fc3a009cba45364cc4937b33109fcd38c1c9d2423d0c8b682c881d0fedcb1224cb53fc03407b34914de31f294980ff3e33789491c67eeb784de5808201b1538b6ad8dc1ee9456ef16c72699b83c2b71f012bf052537322", @generic="d591be8fbddf59d11330182b6f9f7b8bf975bda9403805e599f5d682cb286b1ddcac84139cdab8de57cd9c8e1783afe8246fdfda42cc59915793ae33df776bd4dff6d21d9ca0ed10066e981387859f6e153ed070968f1f444af736802ac3c4d591ea0c22d08aa4f023e6f26b65dc91be31b8f4bc8b50e9f4a24cb44bd5c7d375f4748cf996de8e02f45b1b9f5e70459586892f990e5add4bf440a18accdf597dc5d4ea2507563d13", @generic="406a61aa58b65d7606becc37d63bc9e5e459b7783f1dea909643139b158860d21484168fd2acec593bac3953f8e45817e8b6f3ac66ef67972892b6812431", @generic="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", @generic="3103e70e5f963c450827fdefed772b7428459a975faf5925cee8a7407c9d67eb9347abdc4b04894fca31b8e819991c67ad2da741abe9974639ba8958241c60881061c0c5abaa06341ee71d7f2499466ab965052e7ba1ad4c37dd41f71c69b4dfe51f7fcee181c3e87353fc0ddf0d090234e722fd15b108993cbffbeb95335a3b10c9943a2d7da5b0e60b4f1cf76c1aad766826775eaee3fe48a0d356c6c16a0461b55468c895287471f92eb178940a013c1f33860c515d02b7449d5ae42a0f5c775a3aaa742616eed97d6fa0562bae0637926cd44ea8daad6609f73587e550f6a03a074c8644909b69e6137dc85ccfac65b827", @generic="dd1ea5c4eac218a95094de35b9424573a59f16e4c7775ef566366b2f9ad75f9bddcddf3a7c48d1471087aa42868f2b8b78624ad063a1eb1b5a380f9ab04a09e42e89a3936aaee3a1222879cc5440ebc133cb89f77a1d38458b4901d738f194061938f3b829da0d6b53fa21e77491541a1f5a15fa86c99363e67296a9b0223f3ee6600c4f46331d8df7c57a570e2c4b5ca41038ffadee21ea7ef2761fd33754a31a7a445ffb3313a452339d65964b", @generic="98fe4c5d69e0cc48e4a307db034f525b2aa700d1ee6078e3e19efc484c22910111fbd4ddd3b1fdf53869f2591f3e69144b0e8da436aaee8c6d1f1df1235055bc770afa649d012c3f954ab2daa23aa757a9a97c0fe684e6f692a89abdff247ec3e68a80"]}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1604}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008004) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) unshare(0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000019c0), 0x40800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x4000010, r7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20100000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:08 executing program 2: close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:08 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2781.598691] ISOFS: Unable to identify CD-ROM format. 09:17:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = syz_open_dev$mouse(&(0x7f0000000300), 0x8, 0x8002) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000340)={0x8, 'gre0\x00', {'wg2\x00'}, 0x8}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = memfd_create(&(0x7f0000000200)='\x00', 0x5) dup3(r6, r0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) unshare(0x10000900) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2781.623631] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2781.624318] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2781.625004] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2781.632468] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:08 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3bd, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:08 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r3, 0x8000000) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd_index=0x1, 0x3ff, 0x3, 0x40, 0x713041035c6e1804, 0x0, {0x1}}, 0x7) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x40, 0xfe, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2781.769473] ISOFS: Unable to identify CD-ROM format. [ 2781.773662] ISOFS: Unable to identify CD-ROM format. [ 2781.849580] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2781.850803] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2781.851940] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2781.872658] ISOFS: Unable to identify CD-ROM format. [ 2781.899792] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = creat(&(0x7f0000000200)='./file0\x00', 0xdd) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x9000) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002e00)={{}, r6, 0x6, @unused=[0x3, 0x0, 0x2, 0xfe], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, r6, 0x0, @inherit={0x68, &(0x7f0000001440)=ANY=[@ANYBLOB="000000000000000004000000000000009e3b000000000000ff7f0000000000002200000000000000723c0000082535bebc7ac8f79a030000860b000000000001000000000001040000000083d801000100000000000012b94d2e0000000600000000000000ff7f000000000000644d8d48e22f24822f2c1001514acdd9fc1c105ae7b86a2fe379260095ff6046bdcc6d2a00000000000000000051227a7f86ad802a5ab0e22fbf89fd150224162665dffe5a39ff4fbf5a3fae29347df9dcd6b2c02314f6fe36e087b7246aa1c3ab53d8842af62b2a5ab6bf"]}, @subvolid=0x2}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000340)={{r5}, r6, 0xe, @unused=[0xe7b8, 0x1ff, 0x2, 0x8], @subvolid=0xf53e}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:22 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x9000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:22 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x410, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:22 executing program 2: close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc={0x10, 0x0, 0x0, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x8, 0x9, 0x0, 0x0, 0x9, 0x1, {0x3}}, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x40010122, 0x0, {0x2, r9}}, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = syz_open_dev$mouse(&(0x7f0000000300), 0x8, 0x8002) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000340)={0x8, 'gre0\x00', {'wg2\x00'}, 0x8}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = memfd_create(&(0x7f0000000200)='\x00', 0x5) dup3(r6, r0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x23000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000052c00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000052e00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053000)={0x376, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}], 0x6, "5c83c9bf8af498"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f000005de00)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "553734ca1eca8b"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:22 executing program 2: r0 = creat(0x0, 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2795.376799] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2795.377991] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2795.379284] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2795.380854] ISOFS: Unable to identify CD-ROM format. [ 2795.397428] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2795.398685] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2795.399805] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2795.425006] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2795.441333] ISOFS: Unable to identify CD-ROM format. 09:17:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x24000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2795.462529] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:22 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xa000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:22 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x23000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:22 executing program 2: r0 = creat(0x0, 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x25000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:22 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2795.616440] ISOFS: Unable to identify CD-ROM format. 09:17:22 executing program 2: r0 = creat(0x0, 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) unshare(0x32050000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) syz_io_uring_submit(r4, r3, &(0x7f0000001ac0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@generic, 0x80, &(0x7f0000001900)=[{&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/159, 0x9f}, {&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/198, 0xc6}, {&(0x7f0000001840)=""/154, 0x9a}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0xa, &(0x7f00000019c0)=""/196, 0xc4}, 0x0, 0x102, 0x0, {0x2}}, 0x2) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000001b00)=0x2, 0x4) unshare(0x28000080) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2795.640093] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2795.640731] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2795.641365] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2795.681497] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:22 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:22 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x26000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2795.696228] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2795.696841] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2795.697448] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:17:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1d4, 0x17, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, 0x0, 0x4}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x4e20, 0x0, 0x4e24, 0x3f, 0xa, 0x0, 0x0, 0x87}, {0x1, 0x8000, 0xfffffffffffff800, 0xff, 0x0, 0xffffffff9257d573, 0x5, 0x9}, {0x0, 0x80000000, 0xb5d, 0xe7}, 0x200, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x1d4}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(r7, r6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x10022, 0x0, {0x3, r5}}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2795.746422] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2795.773434] ISOFS: Unable to identify CD-ROM format. [ 2795.844219] ISOFS: Unable to identify CD-ROM format. 09:17:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40880, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000300)={0x0, 0x200, 0x0, [0x0, 0xeb, 0x2, 0x3f, 0xb4bc], [0x0, 0x0, 0x93, 0x1cb, 0x9, 0x8001, 0x2, 0x0, 0x1, 0x1, 0x9, 0x4, 0x100000001, 0x0, 0x25912ad0, 0x7, 0x80, 0x7c, 0xff, 0x7, 0x7, 0x1, 0x3, 0x9, 0x80000000, 0x1, 0x7fff, 0x2, 0x3ff, 0x7, 0x4, 0x40, 0x2, 0x5, 0x1, 0xf1a, 0x65, 0x7, 0x2, 0x10001, 0x1, 0x1, 0x3ff, 0x3, 0x81, 0x9, 0x80000001, 0xce2a, 0x88, 0x4, 0x8, 0xffffffff00000000, 0x0, 0x80, 0x100, 0xfffffffffffffff8, 0x5, 0x2, 0x420, 0x8, 0x5f1e, 0xff, 0xcf, 0x7, 0x4, 0x6, 0x401, 0x1, 0x4, 0x8, 0x7fffffff, 0x2, 0x2, 0x5, 0x4, 0x2, 0x100000001, 0x0, 0x1, 0x80, 0x7d, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x0, 0x0, 0x101, 0x0, 0x800, 0x10000, 0x401, 0x401, 0x80, 0x8, 0x7, 0x8c43, 0x0, 0x7, 0xfffffffffffff4a7, 0x4, 0x8, 0x3, 0x5, 0xffffffff, 0x7ff, 0x800, 0x2, 0x2, 0xffff, 0x81, 0x4, 0x8, 0x9, 0x6, 0xffff, 0x1, 0x1, 0xd0, 0x0, 0x20000]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:37 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) syz_io_uring_complete(r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2810.186381] ISOFS: Unable to identify CD-ROM format. 09:17:37 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x505, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:37 executing program 0: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x410, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:37 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x27000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x8, 0xc82, 0x8001, 0x101, 0x1ff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2810.218136] ISOFS: Unable to identify CD-ROM format. [ 2810.288455] EXT4-fs (loop0): Unrecognized mount option "./file0" or missing value [ 2810.289688] EXT4-fs (loop0): failed to parse options in superblock: ./file0 [ 2810.290793] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 2810.292032] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2810.293192] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2810.294348] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2810.308140] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2810.309441] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2810.310511] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2810.325255] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2810.328257] EXT4-fs (loop0): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2810.364223] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) syncfs(r0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000100)) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @mcast2, 0xdc6}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="29719ea84f4503ceb5fcf5ea0549f4ae77ab00abd023edee71c45435000086c5813ebf7039", 0x25}], 0x1}, 0x10044001) r4 = fork() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000140)=0x400, 0x4) ptrace$setopts(0x4206, r4, 0x1b7, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x5, 0x4, 0x7, 0x0, 0x56, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc8e6, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x47150, 0x7fffffff, 0x10001, 0x2, 0x8, 0x5, 0xfbff, 0x0, 0x7, 0x0, 0x5}, r4, 0xf, r1, 0x9) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x0) 09:17:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) unshare(0x4000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r4, 0xebd8a000) 09:17:50 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:50 executing program 1: unshare(0x20080) r0 = syz_io_uring_setup(0x4d51, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) unshare(0x60010200) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8180, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3fcd, 0x9f13, 0x1, &(0x7f0000000200)={[0x6394]}, 0x8) 09:17:50 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x28000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:17:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000000)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) mount$cgroup2(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x800000, &(0x7f0000000340)={[{@memory_localevents}], [{@uid_eq={'uid', 0x3d, r7}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@dont_appraise}]}) [ 2823.687076] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2823.688509] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2823.689622] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2823.719198] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2823.720192] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2823.721015] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:17:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2823.793849] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2823.795441] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:17:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6810000001fa07f1a5f0e077f16aeadb19f6486304010400000007080003400000000605000100030000000800034000000037080004400000000000000640000600000500af080200000005000100000000000a00020004000000000000000000000000000000000900"/119], 0x68}, 0x1, 0x0, 0x0, 0x40045}, 0x800) close(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRESDEC, @ANYBLOB="ebffffffffff0200272f66696c6539005bc6559962e42cb0f148d9"]) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000080)={0x3, 0x3, 0x8, 0x9, 0x4, 0x100}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x1, 0x0, 0x1}, 0x5ebf}}, 0x18) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r4 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x3, 0x15}) close(r4) sendfile(r4, r3, &(0x7f0000000000)=0x4, 0x0) ioctl$HIDIOCGFLAG(r4, 0x8004480e, &(0x7f0000000100)) 09:17:51 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xf000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:51 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2823.887039] ISOFS: Unable to identify CD-ROM format. 09:17:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x63}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:17:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:17:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 1) 09:17:51 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:51 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:17:51 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x29000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2824.032954] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2824.045365] FAULT_INJECTION: forcing a failure. [ 2824.045365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2824.046574] CPU: 0 PID: 16084 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2824.047243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.048054] Call Trace: [ 2824.048318] dump_stack+0x107/0x167 [ 2824.048679] should_fail.cold+0x5/0xa [ 2824.049060] _copy_from_user+0x2e/0x1b0 [ 2824.049457] move_addr_to_kernel.part.0+0x31/0x110 [ 2824.049936] __sys_sendto+0x166/0x320 [ 2824.050311] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2824.050771] ? lock_downgrade+0x6d0/0x6d0 [ 2824.051191] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.051671] ? wait_for_completion_io+0x270/0x270 [ 2824.052155] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.052608] ? vfs_write+0x354/0xa70 [ 2824.052979] ? fput_many+0x2f/0x1a0 [ 2824.053337] ? ksys_write+0x1a9/0x260 [ 2824.053714] ? __ia32_sys_read+0xb0/0xb0 [ 2824.054117] __x64_sys_sendto+0xdd/0x1b0 [ 2824.054518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.055022] do_syscall_64+0x33/0x40 [ 2824.055392] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.055907] RIP: 0033:0x7f8be79138ac [ 2824.056277] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2824.058071] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2824.058812] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2824.059503] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2824.060216] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2824.060904] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2824.061599] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 09:17:51 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x10040000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:03 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xa00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) unshare(0x4000000) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) syz_io_uring_submit(r6, r7, 0x0, 0x1000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000000000)='./file2\x00', 0x12f) fcntl$setown(r8, 0x8, 0xffffffffffffffff) close(r8) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x7, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0xffffffffffffffff, r4, 0xffffffffffffffff, r7, r8, r9, r7, 0xffffffffffffffff, r0], 0x9, 0x0, 0x3, {0x0, r6}}, 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 2) 09:18:03 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2a000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) close(r0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)={0x81, 0x75, 0x1, {0x76, "19ff52148def9c185d72884429013c55cfb3c7a39a498b6b541cc8a0a3a75da3e0a5fae145f6e1bd98fa98256a40fcca17ada49f209223237ef8d62ed97ee8cd545dcad5483043d5f0db3f23c54b182d0c50d7461a9f1b5bcfbdcb75b6ea67962711d0637255dc14de76df93a7b8d763816ec2194cd5"}}, 0x81) r1 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r1, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x1f90, 0x332d, 0x3, &(0x7f0000000200)={[0x8001]}, 0x8) 09:18:03 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x11000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2836.126857] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2836.127684] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2836.128460] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2836.146109] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2836.155845] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2836.163603] FAULT_INJECTION: forcing a failure. [ 2836.163603] name failslab, interval 1, probability 0, space 0, times 0 [ 2836.164755] CPU: 0 PID: 16105 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2836.165443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2836.166265] Call Trace: [ 2836.166540] dump_stack+0x107/0x167 [ 2836.166904] should_fail.cold+0x5/0xa [ 2836.167289] ? __alloc_skb+0x6d/0x5b0 [ 2836.167680] should_failslab+0x5/0x20 [ 2836.168072] kmem_cache_alloc_node+0x55/0x330 [ 2836.168518] __alloc_skb+0x6d/0x5b0 [ 2836.168881] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 2836.169441] netlink_sendmsg+0x998/0xdf0 [ 2836.169858] ? netlink_unicast+0x7f0/0x7f0 [ 2836.170291] ? netlink_unicast+0x7f0/0x7f0 [ 2836.170732] __sock_sendmsg+0x154/0x190 [ 2836.171136] __sys_sendto+0x21c/0x320 [ 2836.171519] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2836.171989] ? lock_downgrade+0x6d0/0x6d0 [ 2836.172417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2836.172898] ? wait_for_completion_io+0x270/0x270 [ 2836.173384] ? rcu_read_lock_any_held+0x75/0xa0 [ 2836.173846] ? vfs_write+0x354/0xa70 [ 2836.174235] ? fput_many+0x2f/0x1a0 [ 2836.174596] ? ksys_write+0x1a9/0x260 [ 2836.174980] ? __ia32_sys_read+0xb0/0xb0 [ 2836.175395] __x64_sys_sendto+0xdd/0x1b0 [ 2836.175810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2836.176324] do_syscall_64+0x33/0x40 [ 2836.176700] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2836.177203] RIP: 0033:0x7f8be79138ac [ 2836.177585] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2836.179397] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2836.180170] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2836.180882] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2836.181606] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2836.182328] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2836.183048] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2836.196940] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2836.197709] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2836.198464] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) close(r1) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0, 0x800}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) syz_io_uring_setup(0x775e, &(0x7f0000000300)={0x0, 0xbc80, 0x8, 0x1, 0x56, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000380)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x78b, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000003c0)=""/162, 0xa2, 0x40) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:03 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x12020000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2836.240619] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2836.248604] ISOFS: Unable to identify CD-ROM format. 09:18:03 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2836.335847] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2836.336626] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2836.337314] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2836.340311] ISOFS: Unable to identify CD-ROM format. 09:18:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) unshare(0x100) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20800, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) syz_io_uring_setup(0x77, &(0x7f0000000340)={0x0, 0xa465, 0x1, 0x1, 0x31b, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x8) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xe08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x7e97, 0x0, 0x0, 0x0, 0x0) [ 2836.380099] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 3) 09:18:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2836.404321] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2836.405309] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2836.406131] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2836.446717] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2836.494278] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2836.504751] FAULT_INJECTION: forcing a failure. [ 2836.504751] name failslab, interval 1, probability 0, space 0, times 0 [ 2836.505792] CPU: 0 PID: 16151 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2836.506413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2836.507148] Call Trace: [ 2836.507405] dump_stack+0x107/0x167 [ 2836.507748] should_fail.cold+0x5/0xa [ 2836.508101] ? create_object.isra.0+0x3a/0xa20 [ 2836.508519] should_failslab+0x5/0x20 [ 2836.508876] kmem_cache_alloc+0x5b/0x310 [ 2836.509258] create_object.isra.0+0x3a/0xa20 [ 2836.509659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2836.510131] kmem_cache_alloc_node+0x169/0x330 [ 2836.510554] __alloc_skb+0x6d/0x5b0 [ 2836.510894] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 2836.511399] netlink_sendmsg+0x998/0xdf0 [ 2836.511785] ? netlink_unicast+0x7f0/0x7f0 [ 2836.512180] ? netlink_unicast+0x7f0/0x7f0 [ 2836.512568] __sock_sendmsg+0x154/0x190 [ 2836.512934] __sys_sendto+0x21c/0x320 [ 2836.513283] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2836.513688] ? lock_downgrade+0x6d0/0x6d0 [ 2836.514068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2836.514494] ? wait_for_completion_io+0x270/0x270 [ 2836.514924] ? rcu_read_lock_any_held+0x75/0xa0 [ 2836.515329] ? vfs_write+0x354/0xa70 [ 2836.515660] ? fput_many+0x2f/0x1a0 [ 2836.515986] ? ksys_write+0x1a9/0x260 [ 2836.516324] ? __ia32_sys_read+0xb0/0xb0 [ 2836.516682] __x64_sys_sendto+0xdd/0x1b0 [ 2836.517038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2836.517493] do_syscall_64+0x33/0x40 [ 2836.517819] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2836.518271] RIP: 0033:0x7f8be79138ac [ 2836.518598] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2836.520195] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2836.520853] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2836.521470] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2836.522084] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2836.522700] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2836.523320] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2848.792425] ISOFS: Unable to identify CD-ROM format. 09:18:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 4) 09:18:15 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x16000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x5c84, &(0x7f0000000280)={0x0, 0x0, 0x71a13ab3470cfaaa}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) recvmmsg(r5, &(0x7f0000005b80)=[{{&(0x7f0000000300)=@caif=@rfm, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/228, 0xe4}], 0x7, &(0x7f00000007c0)=""/134, 0x86}, 0x7}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/62, 0x3e}, {&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)=""/106, 0x6a}], 0x3}, 0x3}, {{&(0x7f0000000a00)=@ax25={{0x3, @netrom}, [@netrom, @rose, @null, @default, @remote, @default, @netrom, @bcast]}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, &(0x7f0000001ac0)=""/195, 0xc3}, 0x46}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001bc0)=""/215, 0xd7}, {&(0x7f0000001cc0)=""/100, 0x64}, {&(0x7f0000001d40)}, {&(0x7f0000001e00)=""/185, 0xb9}, {&(0x7f0000001ec0)=""/200, 0xc8}, {&(0x7f0000001fc0)=""/176, 0xb0}], 0x6, &(0x7f0000002100)=""/108, 0x6c}, 0x6}, {{&(0x7f0000002180)=@can, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/76, 0x4c}, {&(0x7f0000003400)=""/52, 0x34}, {&(0x7f0000003440)=""/101, 0x65}], 0x6, &(0x7f0000003540)=""/202, 0xca}, 0x1ff}, {{&(0x7f0000003640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005a00)=[{&(0x7f00000036c0)=""/105, 0x69}, {&(0x7f0000003740)=""/166, 0xa6}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/254, 0xfe}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/60, 0x3c}, {&(0x7f0000005940)=""/93, 0x5d}, {&(0x7f00000059c0)=""/49, 0x31}], 0x8, &(0x7f0000005a80)=""/208, 0xd0}, 0x6}], 0x6, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) fcntl$setlease(r7, 0x400, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) accept(0xffffffffffffffff, &(0x7f0000005d00)=@can, &(0x7f0000001d40)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:15 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xc00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:15 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2e000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000300)='./file2\x00', 0x100) fcntl$setown(r4, 0x8, 0xffffffffffffffff) close(r4) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0x1, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x8000200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:15 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:15 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x41) r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x0, 0x3, 0xe5, [0x7fff, 0x1, 0x9, 0xffff, 0x46eb, 0x9], 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/229}, &(0x7f0000000640)=0x78) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @private=0xa010101}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @empty}, 0x28, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)='macvtap0\x00', 0x0, 0x6, 0x8}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000001000000180000cdc96d8ef15702ebfd11c7bb702d0c3d00", @ANYRES32=r0, @ANYBLOB="0500a8e1f9ffffffffffffff06643000"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x5) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) syz_io_uring_setup(0x35d0, &(0x7f0000000300)={0x0, 0xd521, 0x2, 0x0, 0x1c8, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socket$inet_udp(0x2, 0x2, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2848.799340] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2848.800516] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2848.801606] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:18:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2848.825612] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2848.827077] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2848.828156] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2848.844670] ISOFS: Unable to identify CD-ROM format. [ 2848.862226] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2848.863525] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x36000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2848.886389] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2848.905570] FAULT_INJECTION: forcing a failure. [ 2848.905570] name failslab, interval 1, probability 0, space 0, times 0 [ 2848.907263] CPU: 0 PID: 16183 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2848.908282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2848.909484] Call Trace: [ 2848.909881] dump_stack+0x107/0x167 [ 2848.910416] should_fail.cold+0x5/0xa [ 2848.910983] should_failslab+0x5/0x20 [ 2848.911545] __kmalloc_node_track_caller+0x74/0x3b0 [ 2848.912282] ? netlink_sendmsg+0x998/0xdf0 [ 2848.912910] __alloc_skb+0xb1/0x5b0 [ 2848.913448] netlink_sendmsg+0x998/0xdf0 [ 2848.914047] ? netlink_unicast+0x7f0/0x7f0 [ 2848.914675] ? netlink_unicast+0x7f0/0x7f0 [ 2848.915293] __sock_sendmsg+0x154/0x190 [ 2848.915886] __sys_sendto+0x21c/0x320 [ 2848.916446] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2848.917122] ? lock_downgrade+0x6d0/0x6d0 [ 2848.917747] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2848.918453] ? wait_for_completion_io+0x270/0x270 [ 2848.919160] ? rcu_read_lock_any_held+0x75/0xa0 [ 2848.919845] ? vfs_write+0x354/0xa70 [ 2848.920389] ? fput_many+0x2f/0x1a0 [ 2848.920928] ? ksys_write+0x1a9/0x260 [ 2848.921487] ? __ia32_sys_read+0xb0/0xb0 [ 2848.922086] __x64_sys_sendto+0xdd/0x1b0 [ 2848.922683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2848.923437] do_syscall_64+0x33/0x40 [ 2848.923989] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2848.924737] RIP: 0033:0x7f8be79138ac [ 2848.925281] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2848.927943] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2848.929050] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2848.930091] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2848.931130] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2848.932177] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2848.933212] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 09:18:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:18:16 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xd00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2849.046429] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2849.047164] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2849.047754] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2849.061583] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2000, @fd=r4, 0x8, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x400) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6}, 0x10) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) unshare(0x2a020000) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x8420, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, r6, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000, 0x0, {0x2}}, 0x125) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r9, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r10}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:29 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x18000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:29 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0xf00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) io_uring_enter(r6, 0x708, 0x715, 0x1, &(0x7f0000000200)={[0x40a4]}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 5) 09:18:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x38000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2862.483058] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2862.483173] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2862.483745] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2862.483767] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2862.485023] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2862.487810] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2862.510009] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2862.516381] FAULT_INJECTION: forcing a failure. [ 2862.516381] name failslab, interval 1, probability 0, space 0, times 0 [ 2862.517417] CPU: 0 PID: 16234 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2862.518017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2862.518669] Call Trace: [ 2862.518905] dump_stack+0x107/0x167 [ 2862.519229] should_fail.cold+0x5/0xa [ 2862.519536] ? create_object.isra.0+0x3a/0xa20 [ 2862.519928] should_failslab+0x5/0x20 [ 2862.520251] kmem_cache_alloc+0x5b/0x310 [ 2862.520600] create_object.isra.0+0x3a/0xa20 [ 2862.520979] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2862.521418] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2862.521856] ? netlink_sendmsg+0x998/0xdf0 [ 2862.522229] __alloc_skb+0xb1/0x5b0 [ 2862.522546] netlink_sendmsg+0x998/0xdf0 [ 2862.522874] ? netlink_unicast+0x7f0/0x7f0 [ 2862.523250] ? netlink_unicast+0x7f0/0x7f0 [ 2862.523613] __sock_sendmsg+0x154/0x190 [ 2862.523951] __sys_sendto+0x21c/0x320 [ 2862.524290] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2862.524700] ? lock_downgrade+0x6d0/0x6d0 [ 2862.525049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2862.525478] ? wait_for_completion_io+0x270/0x270 [ 2862.525876] ? rcu_read_lock_any_held+0x75/0xa0 [ 2862.526278] ? vfs_write+0x354/0xa70 [ 2862.526599] ? fput_many+0x2f/0x1a0 [ 2862.526895] ? ksys_write+0x1a9/0x260 [ 2862.527223] ? __ia32_sys_read+0xb0/0xb0 [ 2862.527577] __x64_sys_sendto+0xdd/0x1b0 [ 2862.527938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.528396] do_syscall_64+0x33/0x40 [ 2862.528715] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2862.529152] RIP: 0033:0x7f8be79138ac [ 2862.529484] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2862.531057] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2862.531088] ISOFS: Unable to identify CD-ROM format. [ 2862.531708] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2862.531715] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2862.531722] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2862.531728] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2862.531744] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2862.541425] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2862.546109] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:29 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1f000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:29 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1004, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2862.652933] ISOFS: Unable to identify CD-ROM format. 09:18:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r1, 0x0) r7 = syz_io_uring_complete(r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0) renameat(r8, &(0x7f0000000300)='./file0\x00', r7, &(0x7f0000000340)='./file0\x00') io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 6) [ 2862.711028] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2862.711673] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2862.712292] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2862.716920] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2862.717541] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2862.718136] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2862.724928] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2862.726112] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:29 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1020, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2862.801223] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2862.810242] FAULT_INJECTION: forcing a failure. [ 2862.810242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2862.811220] CPU: 0 PID: 16265 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2862.811788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2862.812484] Call Trace: [ 2862.812720] dump_stack+0x107/0x167 [ 2862.813043] should_fail.cold+0x5/0xa [ 2862.813374] _copy_from_iter_full+0x201/0xa60 [ 2862.813760] ? __virt_addr_valid+0x170/0x5c0 [ 2862.814133] ? __check_object_size+0x319/0x440 [ 2862.814527] netlink_sendmsg+0x879/0xdf0 [ 2862.814878] ? netlink_unicast+0x7f0/0x7f0 [ 2862.815249] ? netlink_unicast+0x7f0/0x7f0 [ 2862.815612] __sock_sendmsg+0x154/0x190 [ 2862.815959] __sys_sendto+0x21c/0x320 [ 2862.816292] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2862.816687] ? lock_downgrade+0x6d0/0x6d0 [ 2862.817061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2862.817471] ? wait_for_completion_io+0x270/0x270 [ 2862.817880] ? rcu_read_lock_any_held+0x75/0xa0 [ 2862.818254] ? vfs_write+0x354/0xa70 [ 2862.818555] ? fput_many+0x2f/0x1a0 [ 2862.818860] ? ksys_write+0x1a9/0x260 [ 2862.819171] ? __ia32_sys_read+0xb0/0xb0 [ 2862.819505] __x64_sys_sendto+0xdd/0x1b0 [ 2862.819838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2862.820262] do_syscall_64+0x33/0x40 [ 2862.820571] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2862.820986] RIP: 0033:0x7f8be79138ac [ 2862.821289] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2862.822785] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2862.823395] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2862.823969] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2862.824546] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2862.825120] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2862.825696] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 09:18:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3a000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_setup(0x6c45, &(0x7f0000000300)={0x0, 0x5208, 0x4, 0x1, 0x200, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) unshare(0x10000000) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22000000) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:30 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x20000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x200, 0x1) io_uring_enter(r4, 0x5a1d, 0xdda4, 0x2, &(0x7f0000000340), 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:30 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:18:30 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) [ 2862.901333] ISOFS: Unable to identify CD-ROM format. 09:18:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 7) [ 2862.932424] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2862.933649] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2862.934852] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2862.949209] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:30 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x20100000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2863.009531] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2863.019492] FAULT_INJECTION: forcing a failure. [ 2863.019492] name failslab, interval 1, probability 0, space 0, times 0 [ 2863.020689] CPU: 0 PID: 16293 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2863.021247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2863.021913] Call Trace: [ 2863.022135] dump_stack+0x107/0x167 [ 2863.022439] should_fail.cold+0x5/0xa [ 2863.022746] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2863.023274] should_failslab+0x5/0x20 [ 2863.023584] __kmalloc+0x72/0x390 [ 2863.023874] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2863.024395] ? genl_rcv_msg+0x3f8/0x5a0 [ 2863.024716] genl_family_rcv_msg_doit+0xda/0x330 [ 2863.025103] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2863.025645] ? __radix_tree_lookup+0x1f3/0x290 [ 2863.026014] ? genl_get_cmd+0x3cf/0x480 [ 2863.026340] genl_rcv_msg+0x33c/0x5a0 [ 2863.026651] ? genl_get_cmd+0x480/0x480 [ 2863.026975] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2863.027310] ? ctrl_fill_info+0xdb0/0xdb0 [ 2863.027653] ? lock_release+0x680/0x680 [ 2863.027977] ? netlink_deliver_tap+0xf4/0xcc0 [ 2863.028354] netlink_rcv_skb+0x14b/0x430 [ 2863.028682] ? genl_get_cmd+0x480/0x480 [ 2863.029009] ? netlink_ack+0xab0/0xab0 [ 2863.029331] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2863.029705] ? is_vmalloc_addr+0x7b/0xb0 [ 2863.030043] genl_rcv+0x24/0x40 [ 2863.030312] netlink_unicast+0x549/0x7f0 [ 2863.030645] ? netlink_attachskb+0x870/0x870 [ 2863.031012] netlink_sendmsg+0x90f/0xdf0 [ 2863.031348] ? netlink_unicast+0x7f0/0x7f0 [ 2863.031695] ? netlink_unicast+0x7f0/0x7f0 [ 2863.032047] __sock_sendmsg+0x154/0x190 [ 2863.032370] __sys_sendto+0x21c/0x320 [ 2863.032683] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2863.033058] ? lock_downgrade+0x6d0/0x6d0 [ 2863.033407] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2863.033801] ? wait_for_completion_io+0x270/0x270 [ 2863.034202] ? rcu_read_lock_any_held+0x75/0xa0 [ 2863.034582] ? vfs_write+0x354/0xa70 [ 2863.034888] ? fput_many+0x2f/0x1a0 [ 2863.035191] ? ksys_write+0x1a9/0x260 [ 2863.035504] ? __ia32_sys_read+0xb0/0xb0 [ 2863.035839] __x64_sys_sendto+0xdd/0x1b0 [ 2863.036174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2863.036594] do_syscall_64+0x33/0x40 [ 2863.036900] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2863.037322] RIP: 0033:0x7f8be79138ac [ 2863.037625] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2863.039112] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2863.039727] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2863.040314] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2863.040905] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2863.041484] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2863.042064] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2863.084155] ISOFS: Unable to identify CD-ROM format. [ 2863.097902] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2863.099048] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2863.100171] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2863.127813] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:43 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2e000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0, 0x0, 0x1}, 0x7) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000d00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)=@generic={0x27, "162d4987e016ded946eb748261b0e2b5966754c21a730670b3071526674360530d04fae3f5e0a7f2f60daa502a6eb79e36618f0194686b7fb3cc4ecce85881bb236dad606ddbfa46e27c8b8b764f6b4ade10c34e61c7ce02fb7258c7a6563be6eb6defe125a77d487e4599d7c628d2f0b4cc23e89f7213bd98374623a980"}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="6061d1ca844f4d6acd3e239c2d957bf0cc6dbe018878413e51f96c079d15fa56707246b1cc6613a9aabed48ba02148d02669ac4554d746dba02b8a9fad2070d00b1e8684c678ee41771a5b02b7c78bc51c58372f0fafab0096d784919195b6abb2e7683885b635061f06d360f600d5f0aed6d26ca3ef44a3b1c646bd61033254a35eb24a3b5d083c13eaa656d6e50c9ca8a2469834a547393808055ec9483c7f1a18362838adf31caeac6cd82ceeac3bdfbf64f7071691a7b0e98c5a340e1ffc7d98804b147c071e5022bfd25959c1d29af9d412987e2da64d4dc41ecfd91809edf6581215e475e1d67139f183", 0xed}, {&(0x7f0000000480)="ef384e7ca205d6dfbf731aa0d90526e0c505af8a6083eef8d7f95a408ca51272abeabce1a7042a924bc2736d27207d6cca803761f4cb778276531c60e947c3ce9ca73ec25d9391544c64790c45ed6a248c1c8200245727a57f0f544445779950b48dce4dde28e5b505a430fc1ca8803d17946399c5003aee6f796cda6b5d4fbbf868cd4d2ebd9a16e0476f409cca4da83e2f9ba756fcfc76b90959", 0x9b}, {&(0x7f0000000540)="c4e8fbf435d344da3c6962bd28667ad3db0535a7684eae3c5745072d32a42a6d1f866abc1cda87fb07153ae99fc0727a77736b007362dab8561194f4a3d55e441b87c2f6eb140050955e966cc73ee987a248b3b0d7ae5984f3af08fe2f79b5372ddb2361fcc8c61df99c481ad28cff88e2a890", 0x73}, {&(0x7f0000000200)="72b0b026092e2bb9d73a9427752e702e3e2dd2bbe1307b1663fa5373e086e503c3238fb5089a2dbd4b38e4ccce924f395d66243f28cd8f024b5637a5f3442587", 0x40}, {&(0x7f00000005c0)="691a743769c0121152c4ff2f40985c9e4a4e00887d821364fab28657529c2b92b2f428415d9197994dabd696", 0x2c}, {&(0x7f0000000600)="3e8ce7db8109", 0x6}, {&(0x7f0000000640)="c02d3e1a9ab3416744d4b5d31061e49a7411ea74f07f9dd89da243a907ae4243d0078179fc4c321cb383bebfe02e0598f75e6cd677fe593dee1d8bbfc439e118d26ed3f5a290bd01261c0e4996c0486a26493e6c16521e5b08d7dbb204d99199bfe675402771088ca9493cc39d24f5244beaf9480c53a1bd2cb70d5cf9c2f1b748f459893576b939a849b4f2fe7aabc3c268f5c6e7570457611096895fc7f63712bff67a85ab464b23dda002d56f24cded6db499", 0xb4}], 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x518}}, 0x3) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3c000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 8) 09:18:43 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 09:18:43 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1100, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl(0x6, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000300)="6180cf66bff5334d4b75d8746c5947dfd7f34b5f6b310012ad64272d9c288e37ff84336a6e2a0108d3dba3accd67929da0c90aa2b4b3d890dd55c869ac21b2ff8337997348ccb55b34cb687468649c319d2912338411745703329866159f02052f77016203fa4dd7b7077da32f5e76842ba2d0709f7140e4717c5a09c0c4e8980eec9b358877940a05c25f3058c8012d064500") io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) unshare(0x40000) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf8000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2876.206589] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2876.207260] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2876.207900] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2876.220160] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2876.220816] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2876.221475] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2876.237374] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2876.238455] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2876.250486] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2876.288072] FAULT_INJECTION: forcing a failure. [ 2876.288072] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.289787] CPU: 1 PID: 16321 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2876.290800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2876.291972] Call Trace: [ 2876.292376] dump_stack+0x107/0x167 [ 2876.292899] should_fail.cold+0x5/0xa [ 2876.293461] ? create_object.isra.0+0x3a/0xa20 [ 2876.294118] should_failslab+0x5/0x20 [ 2876.294680] kmem_cache_alloc+0x5b/0x310 [ 2876.295282] ? lock_release+0x680/0x680 [ 2876.295870] create_object.isra.0+0x3a/0xa20 [ 2876.296525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2876.297274] __kmalloc+0x16e/0x390 [ 2876.297810] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 2876.298741] ? genl_rcv_msg+0x3f8/0x5a0 [ 2876.299333] genl_family_rcv_msg_doit+0xda/0x330 [ 2876.300033] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2876.301017] ? __radix_tree_lookup+0x1f3/0x290 [ 2876.301687] ? genl_get_cmd+0x3cf/0x480 [ 2876.302280] genl_rcv_msg+0x33c/0x5a0 [ 2876.302844] ? genl_get_cmd+0x480/0x480 [ 2876.303429] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2876.304049] ? ctrl_fill_info+0xdb0/0xdb0 [ 2876.304667] ? lock_release+0x680/0x680 [ 2876.305248] ? netlink_deliver_tap+0xf4/0xcc0 [ 2876.305910] netlink_rcv_skb+0x14b/0x430 [ 2876.306506] ? genl_get_cmd+0x480/0x480 [ 2876.307079] ? netlink_ack+0xab0/0xab0 [ 2876.307658] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2876.308335] ? is_vmalloc_addr+0x7b/0xb0 [ 2876.308935] genl_rcv+0x24/0x40 [ 2876.309423] netlink_unicast+0x549/0x7f0 [ 2876.310028] ? netlink_attachskb+0x870/0x870 [ 2876.310683] netlink_sendmsg+0x90f/0xdf0 [ 2876.311287] ? netlink_unicast+0x7f0/0x7f0 [ 2876.311920] ? netlink_unicast+0x7f0/0x7f0 [ 2876.312549] __sock_sendmsg+0x154/0x190 [ 2876.313123] __sys_sendto+0x21c/0x320 [ 2876.313687] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2876.314366] ? lock_downgrade+0x6d0/0x6d0 [ 2876.314996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2876.315707] ? wait_for_completion_io+0x270/0x270 [ 2876.316422] ? rcu_read_lock_any_held+0x75/0xa0 [ 2876.317102] ? vfs_write+0x354/0xa70 [ 2876.317649] ? fput_many+0x2f/0x1a0 [ 2876.318187] ? ksys_write+0x1a9/0x260 [ 2876.318752] ? __ia32_sys_read+0xb0/0xb0 [ 2876.319338] __x64_sys_sendto+0xdd/0x1b0 [ 2876.319934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2876.320682] do_syscall_64+0x33/0x40 [ 2876.321232] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2876.321966] RIP: 0033:0x7f8be79138ac [ 2876.322526] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2876.325164] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2876.326297] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2876.327349] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2876.328412] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2876.329453] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2876.330507] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2876.346630] ISOFS: Unable to identify CD-ROM format. [ 2876.409464] ISOFS: Unable to identify CD-ROM format. 09:18:56 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) close(r1) sendfile(r1, r0, &(0x7f0000000000)=0x4, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x1}, {r0}], 0x2, 0xc5a8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r2, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r5, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 09:18:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3e000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000480)="7bdbfc5c8a", 0x5}, {&(0x7f00000004c0)="c6e45e00be8daefde1d50b", 0xb}], 0x3, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000005c0)="f7c896b15a1e48b3be82719ad3abf9ad91ccb702a79055ba7e5841e4082160fbdb239045de50a1ad9a53633429c60c38e6373ce208d336c6b6f20cc46f5bebc295849701299bbe60e335374dcfb6867750378e28b0fb64679d3237aead1f280b5801c86af412e3f614ea420411eeddfaff491dc87d0cb79470abb65734d0f19e5cd58a5df4d99f543e7c6a22781e9c5b12cb87da0c87965fb51e8c0fdf9b43ddb0760621bcd761c5", 0xa8}, {&(0x7f0000000680)="aae841d2a9af9ea4f99afd6a96c5143316a8efd648a45d56c56533eea031dd13d216b47746dbc31aba8e8d2931a8cd342308b2e1db05273c7eca1f9e1d03dcd9d69529bfa3d2bd16e0bb0bbcbba69176293bda1fb806e14de6f541c1456863e633db5f8d6733c01b94bee27a09a7ed24007cebd40553d037515b2b7f56ef39c227235a9554724f77999d93dc8b669472f67ccefb2e4c5a0f09e6d004ed820b41fcfc0c23945cc70ca0595e302e31bd05d84ec6aafba8732cf25d795ede32903dd81f2ddd095b645d1b52cda6eb1d8128a2c462568ebc3e4a52f98a4c3501a8412834c0ad6f29485c4f3d6fbb12fc", 0xee}, {&(0x7f0000000780)="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", 0xfc}], 0x3, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x80, 0x4040}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000a80)="dd44efbdb5a20e32f4a6d0c8e8", 0xd}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="3c31d3c81ac6e8a092799c414343ef683a22dceb43b88f75d9e2828a2eb35b5e3f2e134f6943e334f5f22b79c791a9a51619684e3e6b7a97009f5e1a1bdca23feb0df9b60b", 0x45}, {&(0x7f0000001e00)="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", 0x1000}], 0x4, &(0x7f0000001b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x200400c0}}, {{&(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001c40)="a430f8c2d96e5b2d0eeedeb9a254595a99bda6dafbdc215fc239d9ace748e2710d053dc6970f6599355bf7b766e1e8682581d7410cc6d5ad53aa59ad9c9166c5775f70befe4315c10b82885bff62d72c5d110eb26dfd554fe3982b805d15b53a3375c9105157aca3692a1a0c714cf9e9da4909b839a94df87096b55cc4e37f8f2c16f2a8dd3e34b8727cba8356c95db1bf32fafe274a886f790ee102a08cc0b8049c2d03fdf32f0616cfce24ca0633f0bbe51ca5961b8e14bf1a1e2ab80799376adcf763a78dda61e09f2869701f94bf0ee326925dbfdffdb580bffae0273f", 0xdf}, {&(0x7f0000002e00)="55d25983ad3e9aa7dd0a53fee610017ed52bd1f2db73932cb6dc155e79314bc79bc00a32d566afb0ae2a6391d5249dc91e26177e0ac9925aa9ca28d3108d837cebed96626e281f421d5a84cc99afa0610c0dbb03df6fe21aff595c11084f375ec077a1a3b0468b6172b6293967ba511be989a897a09a82847e9be57b2230bc0139ef3d4d15bc141efc84d308f807da7ff1084c435a5939cd1ab335fcaeb1196f0221e868367eaca36299c07f79e7b29da89928b144a1f5c820c53879c6e04a11b6e282fb965d1eb2a4b52205a975a3203d2c2b5b8ac8698c18d44f10f3bebdfa0b3064d46a7a3681ab3920ffbfa4d0b2", 0xf0}, {&(0x7f0000002f00)="fadf016b99b3a833c812f7b09ed82bafd9a52c7eec40674602afedd8aeddd1d1f4e3e10d4ce2b17775d7b654d73730ce2e3c10eba96e074f14336c70434d4dbaf5783cdb861502629a2cf742c58e858c053fd40de207ad9385d4a660517dfd57ca6a0d22910999894600314bf99d8b2ab4a4835ec8f9652fda5a8576cb378723438f7ef8ad7f540fd4190bea4adec3f804c5ae88613e20f03fd6bced62db34cb5facd8f5edcae3", 0xa7}, {&(0x7f0000002fc0)="050c18468917b2dd90b4318580941e65d432f1b00ee8bd158a290651fe2a2744f046235ca6dc3d724f237e2320270fa523f159c424e0d74b79f54a3201cad83fdcea6c308e83d7fff3f28398892149facd08c7b245d9b1ccda11ecdd6f1da08eecbbc35a37bbdbb2527e251c09719179d12aaa9d007537481f3b", 0x7a}, {&(0x7f0000003040)="f407bbb38a05b1dbc400faf9b1dc71adb8ab66929b717ccd4c5d43fc2b09d3270ee84c9e4867a7f4da955759dc04ef8521f6593ada6958eb446b02f555cddde8d5d3b31796b623d680050904b5009c5d976f5602b020246f7d052837af14a50ec4a80ca64c128b41baf9a93f2fa7d7e2e6e5f9b6d50971f54102cd5809322b67f301cc5a38d85071973a87cc1a13484faf66651a661825018cf721bfaab48ae2929d6e9c32f36852b29804a0ec9bbc7a3892e1960c30ad043e7cd8f5d4a219089c494061242a480271f5935f98f1ce050ac2df195cdc747dd1de3138c10d37ce86", 0xe1}, {&(0x7f0000001d40)="3d0ae89bad102f797e74859eef96874089635c82", 0x14}, {&(0x7f0000003140)="a71a9eea55823771c4e3e08d1ffc0b9467d1e01411e69e7d5ed3c731dd364ec96485c9b1c1beab69248ca7a1e0a2b6d7797dd643f426ce8d1d50a2e44eefba97c2f28fac234e34ee0ad9b29407c5e99881e1963524ea84c18bc67487f5cb64e6175197b114d36f26abd9e751f29eba1613e01d1bf423f8157ce99a5f46", 0x7d}, {&(0x7f00000031c0)="85c545a9397c12dc3c7c638efdfa81d7db3b10e0bfedc7a72cabb5d6a83b0147aa5e24acd195b098b11304a44fb6317a8088a31ab9bc", 0x36}], 0x8, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r4]}}], 0x158, 0x40000}}, {{&(0x7f0000003600)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003680)="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", 0xfe}, {&(0x7f0000003780)="5e98d7c3fb36b450e70f417ec135f8ab4dea7f07fb14674a923d3bc740cc3f4b4d93fc33f07091db0e405d96c16a5f132e28b2c752ab8295f83e1aaafbcfb5a1fc6e064b513927eb7e02e751c0ce46958688a024050d0f3cfa00de67afbf462e49fe", 0x62}, {&(0x7f0000003800)="0d47d891c0bc238137d75ee48e34afd9b9bba44d6c6b6cdcaa2a00ed62a0c9237fc1f8ad72780185df4d2feb688a0a0d673f599964575230a00aef66983e353970ea24ba0127a5d36073bd542bba2d50a3bbb40a221be8dbd87390326f3afaec21bc27d01751c89c44face399aa0d725498035ae5c23c047a984b890af70c18f18c2e75dd819bf901650db2be5da98fa8b1d5d40917c130ed8ed7f617871c8dd4676bc8d6c1fba6b1eccea4463dd6490acc7380779287d8a57167c0cc9967f5e6b", 0xc1}, {&(0x7f0000003900)="904a3a2182b840dd01abffb3616bc03f59ff3c25bc424fa29596d0bdb920673ab0d98361ad1c68801219520b93938f0e8491d67cbf444bcc0feab62c56d51cdb3d2efe87e5220981d7fa8cc5cd6fa2c09b57cb2a7df1595738a8771b01919f208d542ed5d38ec25b0e18876e9fbb57932a89acad9394ceabe0572d8e98a3de2bc56f80647dff3895aca5e0ef853ee86f53a2fed0ebf95cec4c177988a81c7895a2", 0xa1}, {&(0x7f00000039c0)="23e2b1e121c3ec011db9054ade799f3294d0eff71d6a7f364d942d01b517363b586955db38352fc0db58228f8d68982511c84d7ac17ebd667304fff867659b6368bcb36f22f2cb0bdf581de1e1e01f0ebe309a66f0091a9e258895a1f5e87f", 0x5f}, {&(0x7f0000003a40)="8b642e5b95c621344137197568c80f5972b86b735be8754f56281544465273c6ef1005ccff14079a57e1a09772de7e107b0157d51488bfe37b9f4f02530b756a91354b16e5cb93a1685916056fcac730709c7d0aeafd56a97de21e3118358a90208109fffb229e9689dd3a384ffe8b758a30615a6ac1958a395a7a7b497af4291a564c045d3a9ed59ddf0a2d1f40aaac493789de67ee375dcfa82c772436a84addeb20fbf032434d6ae5000e47998a24d01382eae66bc2156677c3e0fe7f7fc3bb57822778e676a62e92580748d74548d0ee1a6e6e9faa001323b6333bf899cf1d7834efce6122280e2114504174d6", 0xef}], 0x6, 0x0, 0x0, 0x20000800}}, {{&(0x7f0000003bc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003c40)="f0eaad8808911950d9057f18eb845893036de605d38fe8a429531e40f3276782cea9458ac328c4005a0290ab6855dedfbc66c150f8ebf4c7cd8daa21f1775bcbcb75511a3443f9a45026f183080e71477dbe4c6817e9d7e15b57d477da33b518dabdb44305d13ab7be99fd1af3f69d4ab465fd542599beec50f809be3ff529400330b310bab0da0d08b50562b32d203216a4355dd91d6bfff7a2a12801a115949817f1c3e26df8392fe41b274c7fdf2b095985271aa891006f8e92134e6f9bafafb6118954d2f401d86bc5d77ede7d94fb5df3dd92", 0xd5}], 0x1, &(0x7f0000003d80)=[@rights={{0x1c, 0x1, 0x1, [r4, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r7, r0]}}], 0x68, 0x8084}}], 0x6, 0x200d0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:56 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1202, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:56 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x210}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x30}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x8209, 0x0, 0x0, 0x7, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)='./file0\x00', 0x20, 0x100, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 9) [ 2888.897663] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2888.899157] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2888.900646] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2888.902176] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 09:18:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x0) [ 2888.917150] FAULT_INJECTION: forcing a failure. [ 2888.917150] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.918929] CPU: 1 PID: 16354 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2888.919910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.921101] Call Trace: [ 2888.921490] dump_stack+0x107/0x167 [ 2888.922009] should_fail.cold+0x5/0xa [ 2888.922558] ? __request_module+0x2e0/0x920 [ 2888.923170] ? ctrl_getfamily+0x1e0/0x5b0 [ 2888.923760] should_failslab+0x5/0x20 [ 2888.924312] kmem_cache_alloc_trace+0x55/0x320 [ 2888.924968] ? ctrl_getfamily+0x1e0/0x5b0 [ 2888.925555] __request_module+0x2e0/0x920 [ 2888.926149] ? static_obj+0x61/0xc0 [ 2888.926665] ? free_modprobe_argv+0x90/0x90 [ 2888.927291] ? ctrl_getfamily+0x1b6/0x5b0 [ 2888.927882] ? lock_downgrade+0x6d0/0x6d0 [ 2888.928492] ? find_held_lock+0x2c/0x110 [ 2888.929086] ? _down_write_nest_lock+0x160/0x160 [ 2888.929774] ctrl_getfamily+0x1e0/0x5b0 [ 2888.930357] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2888.930981] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2888.931939] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2888.932906] genl_family_rcv_msg_doit+0x22d/0x330 [ 2888.933614] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2888.934587] ? __radix_tree_lookup+0x1f3/0x290 [ 2888.935259] ? genl_get_cmd+0x3cf/0x480 [ 2888.935844] genl_rcv_msg+0x33c/0x5a0 [ 2888.936410] ? genl_get_cmd+0x480/0x480 [ 2888.936994] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2888.937622] ? ctrl_fill_info+0xdb0/0xdb0 [ 2888.938235] ? lock_release+0x680/0x680 [ 2888.938814] ? netlink_deliver_tap+0xf4/0xcc0 [ 2888.939483] netlink_rcv_skb+0x14b/0x430 [ 2888.940107] ? genl_get_cmd+0x480/0x480 [ 2888.940702] ? netlink_ack+0xab0/0xab0 [ 2888.941293] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2888.941959] ? is_vmalloc_addr+0x7b/0xb0 [ 2888.942554] genl_rcv+0x24/0x40 [ 2888.943038] netlink_unicast+0x549/0x7f0 [ 2888.943636] ? netlink_attachskb+0x870/0x870 [ 2888.944289] netlink_sendmsg+0x90f/0xdf0 [ 2888.944333] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2888.944893] ? netlink_unicast+0x7f0/0x7f0 [ 2888.944926] ? netlink_unicast+0x7f0/0x7f0 [ 2888.946086] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2888.946657] __sock_sendmsg+0x154/0x190 [ 2888.947329] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2888.948277] __sys_sendto+0x21c/0x320 [ 2888.948305] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2888.948329] ? lock_downgrade+0x6d0/0x6d0 [ 2888.951738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2888.952452] ? wait_for_completion_io+0x270/0x270 [ 2888.953155] ? rcu_read_lock_any_held+0x75/0xa0 [ 2888.953833] ? vfs_write+0x354/0xa70 [ 2888.954380] ? fput_many+0x2f/0x1a0 [ 2888.954918] ? ksys_write+0x1a9/0x260 [ 2888.955475] ? __ia32_sys_read+0xb0/0xb0 [ 2888.956073] __x64_sys_sendto+0xdd/0x1b0 [ 2888.956692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.957444] do_syscall_64+0x33/0x40 [ 2888.957987] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2888.958734] RIP: 0033:0x7f8be79138ac [ 2888.959278] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2888.961929] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2888.963035] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2888.964069] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2888.965116] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2888.966151] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2888.967179] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2888.990561] ISOFS: Unable to identify CD-ROM format. [ 2889.020881] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 10) [ 2889.109181] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:18:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:18:56 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1403, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x12}, 0x0, {0x0, r5}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:18:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x0) 09:18:56 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:18:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x2050080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2889.256584] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2889.258177] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2889.259529] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2889.262892] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2889.271024] ISOFS: Unable to identify CD-ROM format. [ 2889.288007] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2889.296122] FAULT_INJECTION: forcing a failure. [ 2889.296122] name failslab, interval 1, probability 0, space 0, times 0 [ 2889.297831] CPU: 1 PID: 16377 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2889.298855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2889.300065] Call Trace: [ 2889.300460] dump_stack+0x107/0x167 [ 2889.300979] should_fail.cold+0x5/0xa [ 2889.301539] ? create_object.isra.0+0x3a/0xa20 [ 2889.302213] should_failslab+0x5/0x20 [ 2889.302775] kmem_cache_alloc+0x5b/0x310 [ 2889.303376] create_object.isra.0+0x3a/0xa20 [ 2889.304016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2889.304765] kmem_cache_alloc_trace+0x151/0x320 [ 2889.305457] ? ctrl_getfamily+0x1e0/0x5b0 [ 2889.306065] __request_module+0x2e0/0x920 [ 2889.306670] ? static_obj+0x61/0xc0 [ 2889.307236] ? free_modprobe_argv+0x90/0x90 [ 2889.307875] ? ctrl_getfamily+0x1b6/0x5b0 [ 2889.308493] ? lock_downgrade+0x6d0/0x6d0 [ 2889.309107] ? find_held_lock+0x2c/0x110 [ 2889.309710] ? _down_write_nest_lock+0x160/0x160 [ 2889.310431] ctrl_getfamily+0x1e0/0x5b0 [ 2889.311014] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2889.311623] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2889.312618] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2889.313569] genl_family_rcv_msg_doit+0x22d/0x330 [ 2889.314280] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2889.315239] ? __radix_tree_lookup+0x1f3/0x290 [ 2889.315905] ? genl_get_cmd+0x3cf/0x480 [ 2889.316495] genl_rcv_msg+0x33c/0x5a0 [ 2889.317048] ? genl_get_cmd+0x480/0x480 [ 2889.317639] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2889.318253] ? ctrl_fill_info+0xdb0/0xdb0 [ 2889.318860] ? lock_release+0x680/0x680 [ 2889.319443] ? netlink_deliver_tap+0xf4/0xcc0 [ 2889.320108] netlink_rcv_skb+0x14b/0x430 [ 2889.320711] ? genl_get_cmd+0x480/0x480 [ 2889.321288] ? netlink_ack+0xab0/0xab0 [ 2889.321867] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2889.322526] ? is_vmalloc_addr+0x7b/0xb0 [ 2889.323129] genl_rcv+0x24/0x40 [ 2889.323605] netlink_unicast+0x549/0x7f0 [ 2889.324209] ? netlink_attachskb+0x870/0x870 [ 2889.324865] netlink_sendmsg+0x90f/0xdf0 [ 2889.325466] ? netlink_unicast+0x7f0/0x7f0 [ 2889.326094] ? netlink_unicast+0x7f0/0x7f0 [ 2889.326721] __sock_sendmsg+0x154/0x190 [ 2889.327299] __sys_sendto+0x21c/0x320 [ 2889.327868] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2889.328552] ? lock_downgrade+0x6d0/0x6d0 [ 2889.329170] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2889.329880] ? wait_for_completion_io+0x270/0x270 [ 2889.330584] ? rcu_read_lock_any_held+0x75/0xa0 [ 2889.331259] ? vfs_write+0x354/0xa70 [ 2889.331805] ? fput_many+0x2f/0x1a0 [ 2889.332350] ? ksys_write+0x1a9/0x260 [ 2889.332908] ? __ia32_sys_read+0xb0/0xb0 [ 2889.333512] __x64_sys_sendto+0xdd/0x1b0 [ 2889.334113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2889.334868] do_syscall_64+0x33/0x40 [ 2889.335426] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2889.336166] RIP: 0033:0x7f8be79138ac [ 2889.336723] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2889.339371] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2889.340498] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2889.341529] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2889.342545] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2889.343547] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2889.344567] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2889.395067] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2889.396538] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2889.397907] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2889.426584] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2889.503800] ISOFS: Unable to identify CD-ROM format. 09:19:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 11) 09:19:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53f, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:10 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1600, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) unshare(0x40000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x3) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:10 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x5c000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) unshare(0x2000400) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x40000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:19:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0x0) [ 2902.847560] ISOFS: Unable to identify CD-ROM format. [ 2902.857323] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2902.858037] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2902.858657] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2902.868139] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2902.875237] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2902.876455] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2902.877562] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2902.881545] FAULT_INJECTION: forcing a failure. [ 2902.881545] name failslab, interval 1, probability 0, space 0, times 0 [ 2902.882552] CPU: 0 PID: 16418 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2902.883140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2902.883857] Call Trace: [ 2902.884103] dump_stack+0x107/0x167 [ 2902.884420] should_fail.cold+0x5/0xa [ 2902.884763] ? create_object.isra.0+0x3a/0xa20 [ 2902.885165] should_failslab+0x5/0x20 [ 2902.885501] kmem_cache_alloc+0x5b/0x310 [ 2902.885857] create_object.isra.0+0x3a/0xa20 [ 2902.886231] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2902.886672] kmem_cache_alloc_trace+0x151/0x320 [ 2902.887078] ? ctrl_getfamily+0x1e0/0x5b0 [ 2902.887444] __request_module+0x2e0/0x920 [ 2902.887798] ? static_obj+0x61/0xc0 [ 2902.888114] ? free_modprobe_argv+0x90/0x90 [ 2902.888500] ? ctrl_getfamily+0x1b6/0x5b0 [ 2902.888860] ? lock_downgrade+0x6d0/0x6d0 [ 2902.889214] ? find_held_lock+0x2c/0x110 [ 2902.889573] ? _down_write_nest_lock+0x160/0x160 [ 2902.889988] ctrl_getfamily+0x1e0/0x5b0 [ 2902.890334] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2902.890708] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2902.891281] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2902.891856] genl_family_rcv_msg_doit+0x22d/0x330 [ 2902.892293] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2902.892871] ? __radix_tree_lookup+0x1f3/0x290 [ 2902.893262] ? genl_get_cmd+0x3cf/0x480 [ 2902.893613] genl_rcv_msg+0x33c/0x5a0 [ 2902.893945] ? genl_get_cmd+0x480/0x480 [ 2902.894290] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2902.894652] ? ctrl_fill_info+0xdb0/0xdb0 [ 2902.895017] ? lock_release+0x680/0x680 [ 2902.895363] ? netlink_deliver_tap+0xf4/0xcc0 [ 2902.895756] netlink_rcv_skb+0x14b/0x430 [ 2902.896110] ? genl_get_cmd+0x480/0x480 [ 2902.896458] ? netlink_ack+0xab0/0xab0 [ 2902.896809] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2902.897217] ? is_vmalloc_addr+0x7b/0xb0 [ 2902.897572] genl_rcv+0x24/0x40 [ 2902.897860] netlink_unicast+0x549/0x7f0 [ 2902.898218] ? netlink_attachskb+0x870/0x870 [ 2902.898604] netlink_sendmsg+0x90f/0xdf0 [ 2902.898964] ? netlink_unicast+0x7f0/0x7f0 [ 2902.899341] ? netlink_unicast+0x7f0/0x7f0 [ 2902.899704] __sock_sendmsg+0x154/0x190 [ 2902.900043] __sys_sendto+0x21c/0x320 [ 2902.900376] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2902.900778] ? lock_downgrade+0x6d0/0x6d0 [ 2902.901144] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2902.901558] ? wait_for_completion_io+0x270/0x270 [ 2902.901984] ? rcu_read_lock_any_held+0x75/0xa0 [ 2902.902373] ? vfs_write+0x354/0xa70 [ 2902.902692] ? fput_many+0x2f/0x1a0 [ 2902.903014] ? ksys_write+0x1a9/0x260 [ 2902.903338] ? __ia32_sys_read+0xb0/0xb0 [ 2902.903685] __x64_sys_sendto+0xdd/0x1b0 [ 2902.904045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2902.904494] do_syscall_64+0x33/0x40 [ 2902.904812] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2902.905249] RIP: 0033:0x7f8be79138ac [ 2902.905583] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2902.907164] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2902.907817] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2902.908418] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2902.909028] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2902.909633] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2902.910256] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2902.913349] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) [ 2902.938457] ISOFS: Unable to identify CD-ROM format. [ 2902.938947] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:10 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1800, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x42000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:19:10 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x611b0000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 12) [ 2903.159716] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2903.160391] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2903.161429] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:19:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x44000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) fcntl$addseals(r0, 0x409, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000340)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:19:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 09:19:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) unshare(0x2020000) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0xfffffffe, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r6, 0x0) [ 2903.267742] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2903.286398] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 09:19:10 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x621b0000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2903.298028] FAULT_INJECTION: forcing a failure. [ 2903.298028] name failslab, interval 1, probability 0, space 0, times 0 [ 2903.298925] CPU: 0 PID: 16471 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2903.299505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2903.300207] Call Trace: [ 2903.300433] dump_stack+0x107/0x167 [ 2903.300746] should_fail.cold+0x5/0xa [ 2903.301068] ? create_object.isra.0+0x3a/0xa20 [ 2903.301452] should_failslab+0x5/0x20 [ 2903.301770] kmem_cache_alloc+0x5b/0x310 [ 2903.302112] ? lock_downgrade+0x6d0/0x6d0 [ 2903.302467] create_object.isra.0+0x3a/0xa20 [ 2903.302830] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2903.303252] __kmalloc_track_caller+0x177/0x370 [ 2903.303641] ? __request_module+0x2fe/0x920 [ 2903.304015] ? ctrl_getfamily+0x1e0/0x5b0 [ 2903.304360] kstrdup+0x36/0x70 [ 2903.304647] __request_module+0x2fe/0x920 [ 2903.304991] ? static_obj+0x61/0xc0 [ 2903.305292] ? free_modprobe_argv+0x90/0x90 [ 2903.305651] ? ctrl_getfamily+0x1b6/0x5b0 [ 2903.306008] ? lock_downgrade+0x6d0/0x6d0 [ 2903.306349] ? find_held_lock+0x2c/0x110 [ 2903.306696] ? _down_write_nest_lock+0x160/0x160 [ 2903.307108] ctrl_getfamily+0x1e0/0x5b0 [ 2903.307442] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2903.307801] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2903.308348] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2903.308900] genl_family_rcv_msg_doit+0x22d/0x330 [ 2903.309310] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2903.309860] ? __radix_tree_lookup+0x1f3/0x290 [ 2903.310243] ? genl_get_cmd+0x3cf/0x480 [ 2903.310583] genl_rcv_msg+0x33c/0x5a0 [ 2903.310904] ? genl_get_cmd+0x480/0x480 [ 2903.311239] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2903.311591] ? ctrl_fill_info+0xdb0/0xdb0 [ 2903.311936] ? lock_release+0x680/0x680 [ 2903.312269] ? netlink_deliver_tap+0xf4/0xcc0 [ 2903.312652] netlink_rcv_skb+0x14b/0x430 [ 2903.312991] ? genl_get_cmd+0x480/0x480 [ 2903.313329] ? netlink_ack+0xab0/0xab0 [ 2903.313657] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2903.314040] ? is_vmalloc_addr+0x7b/0xb0 [ 2903.314392] genl_rcv+0x24/0x40 [ 2903.314664] netlink_unicast+0x549/0x7f0 [ 2903.315006] ? netlink_attachskb+0x870/0x870 [ 2903.315395] netlink_sendmsg+0x90f/0xdf0 [ 2903.315738] ? netlink_unicast+0x7f0/0x7f0 [ 2903.316096] ? netlink_unicast+0x7f0/0x7f0 [ 2903.316448] __sock_sendmsg+0x154/0x190 [ 2903.316789] __sys_sendto+0x21c/0x320 [ 2903.317108] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2903.317496] ? lock_downgrade+0x6d0/0x6d0 [ 2903.317866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2903.318273] ? wait_for_completion_io+0x270/0x270 [ 2903.318690] ? rcu_read_lock_any_held+0x75/0xa0 [ 2903.319091] ? vfs_write+0x354/0xa70 [ 2903.319406] ? fput_many+0x2f/0x1a0 [ 2903.319713] ? ksys_write+0x1a9/0x260 [ 2903.320036] ? __ia32_sys_read+0xb0/0xb0 [ 2903.320381] __x64_sys_sendto+0xdd/0x1b0 [ 2903.320735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2903.321172] do_syscall_64+0x33/0x40 [ 2903.321483] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2903.321908] RIP: 0033:0x7f8be79138ac [ 2903.322223] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2903.323745] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2903.324395] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2903.324996] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2903.325582] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2903.326169] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2903.326768] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 09:19:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80000) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x111001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:10 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1d00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x46000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:19:10 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x631b0000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 09:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0xffff) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x8010, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x48000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2903.485017] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2903.486262] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2903.487341] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2903.517289] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 13) 09:19:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 09:19:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x135b, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRESHEX=r0], 0x30}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x240c}, 0x1, {0x0, r9}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40005e, 0x10404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2917.289801] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 09:19:24 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:24 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x79000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:24 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4a000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000640)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)={0x800, 0x11f}, &(0x7f0000000600)='./file0\x00', 0x18, 0x0, 0x12345}, 0x100) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_team\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r6}}, 0x0) fcntl$dupfd(r4, 0x0, r0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000300)={0x2, 0x80}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2917.304372] FAULT_INJECTION: forcing a failure. [ 2917.304372] name failslab, interval 1, probability 0, space 0, times 0 [ 2917.305499] CPU: 0 PID: 16512 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2917.306141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.306881] Call Trace: [ 2917.307133] dump_stack+0x107/0x167 [ 2917.307475] should_fail.cold+0x5/0xa [ 2917.307835] ? call_usermodehelper_setup+0xa2/0x2f0 [ 2917.308313] should_failslab+0x5/0x20 [ 2917.308676] kmem_cache_alloc_trace+0x55/0x320 [ 2917.309102] call_usermodehelper_setup+0xa2/0x2f0 [ 2917.309540] ? copy_regset_to_user+0x170/0x170 [ 2917.309960] ? ctrl_getfamily+0x1e0/0x5b0 [ 2917.310333] __request_module+0x3f9/0x920 [ 2917.310715] ? perf_trace_lock+0xac/0x490 [ 2917.311090] ? static_obj+0x61/0xc0 [ 2917.311427] ? free_modprobe_argv+0x90/0x90 [ 2917.311820] ? __lockdep_reset_lock+0x180/0x180 [ 2917.312250] ? ctrl_getfamily+0x1b6/0x5b0 [ 2917.312648] ? lock_downgrade+0x6d0/0x6d0 [ 2917.313021] ? find_held_lock+0x2c/0x110 [ 2917.313393] ? _down_write_nest_lock+0x160/0x160 [ 2917.313822] ctrl_getfamily+0x1e0/0x5b0 [ 2917.314175] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2917.314553] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2917.315134] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2917.315697] genl_family_rcv_msg_doit+0x22d/0x330 [ 2917.316135] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2917.316718] ? __radix_tree_lookup+0x1f3/0x290 [ 2917.317130] ? genl_get_cmd+0x3cf/0x480 [ 2917.317480] genl_rcv_msg+0x33c/0x5a0 [ 2917.317818] ? genl_get_cmd+0x480/0x480 [ 2917.318172] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2917.318543] ? ctrl_fill_info+0xdb0/0xdb0 [ 2917.318909] ? lock_release+0x680/0x680 [ 2917.319263] ? __lockdep_reset_lock+0x180/0x180 [ 2917.319673] netlink_rcv_skb+0x14b/0x430 [ 2917.320041] ? genl_get_cmd+0x480/0x480 [ 2917.320391] ? netlink_ack+0xab0/0xab0 [ 2917.320736] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2917.321145] ? is_vmalloc_addr+0x7b/0xb0 [ 2917.321500] genl_rcv+0x24/0x40 [ 2917.321794] netlink_unicast+0x549/0x7f0 [ 2917.322149] ? netlink_attachskb+0x870/0x870 [ 2917.322550] netlink_sendmsg+0x90f/0xdf0 [ 2917.322907] ? netlink_unicast+0x7f0/0x7f0 [ 2917.323290] ? netlink_unicast+0x7f0/0x7f0 [ 2917.323660] __sock_sendmsg+0x154/0x190 [ 2917.324014] __sys_sendto+0x21c/0x320 [ 2917.324346] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2917.324761] ? lock_downgrade+0x6d0/0x6d0 [ 2917.325132] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2917.325556] ? wait_for_completion_io+0x270/0x270 [ 2917.325986] ? rcu_read_lock_any_held+0x75/0xa0 [ 2917.326399] ? vfs_write+0x354/0xa70 [ 2917.326723] ? fput_many+0x2f/0x1a0 [ 2917.327054] ? ksys_write+0x1a9/0x260 [ 2917.327384] ? __ia32_sys_read+0xb0/0xb0 [ 2917.327743] __x64_sys_sendto+0xdd/0x1b0 [ 2917.328105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2917.328558] do_syscall_64+0x33/0x40 [ 2917.328886] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2917.329336] RIP: 0033:0x7f8be79138ac [ 2917.329657] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2917.331261] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2917.331918] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2917.332549] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2917.333176] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2917.333800] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2917.334415] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2917.365744] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2917.366444] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2917.367119] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2917.369574] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2917.370835] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2917.371946] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2917.385209] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:24 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2010, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2917.422481] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2917.434103] ISOFS: Unable to identify CD-ROM format. [ 2917.513103] ISOFS: Unable to identify CD-ROM format. [ 2917.523515] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2917.524785] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2917.525953] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2917.531293] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 09:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4c000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) 09:19:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 14) 09:19:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x100007) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fchownat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, r6, 0x1000) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) unshare(0x400) 09:19:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x7f1b0000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8b2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x8002) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r1, 0x8000000) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:19:39 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2e00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2932.408290] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2932.412892] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2932.413701] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2932.414482] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2932.423499] FAULT_INJECTION: forcing a failure. [ 2932.423499] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.424727] CPU: 1 PID: 16566 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2932.425452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.426317] Call Trace: [ 2932.426595] dump_stack+0x107/0x167 [ 2932.426971] should_fail.cold+0x5/0xa [ 2932.427365] ? create_object.isra.0+0x3a/0xa20 [ 2932.427834] should_failslab+0x5/0x20 [ 2932.428238] kmem_cache_alloc+0x5b/0x310 [ 2932.428659] ? lock_downgrade+0x6d0/0x6d0 [ 2932.429104] create_object.isra.0+0x3a/0xa20 [ 2932.429558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.430085] kmem_cache_alloc_trace+0x151/0x320 [ 2932.430567] call_usermodehelper_setup+0xa2/0x2f0 [ 2932.431058] ? copy_regset_to_user+0x170/0x170 [ 2932.431528] ? ctrl_getfamily+0x1e0/0x5b0 [ 2932.431949] __request_module+0x3f9/0x920 [ 2932.432367] ? perf_trace_lock+0xac/0x490 [ 2932.432793] ? static_obj+0x61/0xc0 [ 2932.433172] ? free_modprobe_argv+0x90/0x90 [ 2932.433614] ? __lockdep_reset_lock+0x180/0x180 [ 2932.434087] ? ctrl_getfamily+0x1b6/0x5b0 [ 2932.434517] ? lock_downgrade+0x6d0/0x6d0 [ 2932.434950] ? find_held_lock+0x2c/0x110 [ 2932.435392] ? _down_write_nest_lock+0x160/0x160 [ 2932.435892] ctrl_getfamily+0x1e0/0x5b0 [ 2932.436304] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2932.436739] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2932.437022] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value [ 2932.437422] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2932.437443] genl_family_rcv_msg_doit+0x22d/0x330 [ 2932.438620] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2932.439240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2932.439270] ? __radix_tree_lookup+0x1f3/0x290 [ 2932.439996] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 2932.440664] ? genl_get_cmd+0x3cf/0x480 [ 2932.443191] genl_rcv_msg+0x33c/0x5a0 [ 2932.443584] ? genl_get_cmd+0x480/0x480 [ 2932.443996] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2932.444431] ? ctrl_fill_info+0xdb0/0xdb0 [ 2932.444865] ? lock_release+0x680/0x680 [ 2932.445278] ? __lockdep_reset_lock+0x180/0x180 [ 2932.445750] netlink_rcv_skb+0x14b/0x430 [ 2932.446169] ? genl_get_cmd+0x480/0x480 [ 2932.446581] ? netlink_ack+0xab0/0xab0 [ 2932.446990] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2932.447454] ? is_vmalloc_addr+0x7b/0xb0 [ 2932.447874] genl_rcv+0x24/0x40 [ 2932.448208] netlink_unicast+0x549/0x7f0 [ 2932.448628] ? netlink_attachskb+0x870/0x870 [ 2932.449093] netlink_sendmsg+0x90f/0xdf0 [ 2932.449516] ? netlink_unicast+0x7f0/0x7f0 [ 2932.449955] ? netlink_unicast+0x7f0/0x7f0 [ 2932.450390] __sock_sendmsg+0x154/0x190 [ 2932.450800] __sys_sendto+0x21c/0x320 [ 2932.451192] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2932.451663] ? lock_downgrade+0x6d0/0x6d0 [ 2932.452105] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2932.452606] ? wait_for_completion_io+0x270/0x270 [ 2932.453110] ? rcu_read_lock_any_held+0x75/0xa0 [ 2932.453581] ? vfs_write+0x354/0xa70 [ 2932.453966] ? fput_many+0x2f/0x1a0 [ 2932.454342] ? ksys_write+0x1a9/0x260 [ 2932.454735] ? __ia32_sys_read+0xb0/0xb0 [ 2932.455161] __x64_sys_sendto+0xdd/0x1b0 [ 2932.455585] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.456107] do_syscall_64+0x33/0x40 [ 2932.456494] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2932.457024] RIP: 0033:0x7f8be79138ac [ 2932.457407] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2932.459249] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2932.460029] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2932.460752] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2932.461481] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2932.462203] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2932.462927] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2932.467442] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x84400000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000fbffffff0000ffde000003"], 0x28}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) (fail_nth: 15) [ 2932.535629] ISOFS: Unable to identify CD-ROM format. [ 2932.569747] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue 09:19:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x40b5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x80000001, 0x9, 0x64d, 0x0, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2932.600030] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2932.618350] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2932.619128] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2932.619861] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem 09:19:39 executing program 6: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3f00, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) [ 2932.658039] ISOFS: Unable to identify CD-ROM format. [ 2932.659227] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2932.697146] FAULT_INJECTION: forcing a failure. [ 2932.697146] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.698546] CPU: 1 PID: 16584 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 2932.699207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.699994] Call Trace: [ 2932.700253] dump_stack+0x107/0x167 [ 2932.700607] should_fail.cold+0x5/0xa [ 2932.700983] ? __alloc_skb+0x6d/0x5b0 [ 2932.701352] should_failslab+0x5/0x20 [ 2932.701719] kmem_cache_alloc_node+0x55/0x330 [ 2932.702149] __alloc_skb+0x6d/0x5b0 [ 2932.702499] netlink_ack+0x1ed/0xab0 [ 2932.702856] ? ctrl_dumpfamily+0x3b0/0x3b0 [ 2932.703253] ? netlink_sendmsg+0xdf0/0xdf0 [ 2932.703660] ? lock_release+0x680/0x680 [ 2932.704038] ? __lockdep_reset_lock+0x180/0x180 [ 2932.704476] netlink_rcv_skb+0x348/0x430 [ 2932.704872] ? genl_get_cmd+0x480/0x480 [ 2932.705249] ? netlink_ack+0xab0/0xab0 [ 2932.705624] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2932.706057] genl_rcv+0x24/0x40 [ 2932.706364] netlink_unicast+0x549/0x7f0 [ 2932.706753] ? netlink_attachskb+0x870/0x870 [ 2932.707176] netlink_sendmsg+0x90f/0xdf0 [ 2932.707564] ? netlink_unicast+0x7f0/0x7f0 [ 2932.707969] ? netlink_unicast+0x7f0/0x7f0 [ 2932.708369] __sock_sendmsg+0x154/0x190 [ 2932.708748] __sys_sendto+0x21c/0x320 [ 2932.709116] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2932.709555] ? lock_downgrade+0x6d0/0x6d0 [ 2932.709961] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2932.710419] ? wait_for_completion_io+0x270/0x270 [ 2932.710877] ? rcu_read_lock_any_held+0x75/0xa0 [ 2932.711312] ? vfs_write+0x354/0xa70 [ 2932.711665] ? fput_many+0x2f/0x1a0 [ 2932.712009] ? ksys_write+0x1a9/0x260 [ 2932.712366] ? __ia32_sys_read+0xb0/0xb0 [ 2932.712754] __x64_sys_sendto+0xdd/0x1b0 [ 2932.713143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2932.713627] do_syscall_64+0x33/0x40 [ 2932.713978] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2932.714458] RIP: 0033:0x7f8be79138ac [ 2932.714809] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 2932.716521] RSP: 002b:00007f8be4ed5020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2932.717238] RAX: ffffffffffffffda RBX: 00007f8be4ed5110 RCX: 00007f8be79138ac [ 2932.717906] RDX: 0000000000000020 RSI: 00007f8be4ed5160 RDI: 0000000000000003 [ 2932.718568] RBP: 0000000000000000 R08: 00007f8be4ed5074 R09: 000000000000000c [ 2932.719234] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f8be4ed50c8 [ 2932.719896] R13: 00007f8be4ed5160 R14: 0000000000000003 R15: 0000000000000000 [ 2932.766712] EXT4-fs (loop6): Unrecognized mount option "./file0" or missing value 09:19:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4e000000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@sbsector}]}) [ 2932.768189] EXT4-fs (loop6): failed to parse options in superblock: ./file0 [ 2932.769271] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem 09:19:39 executing program 7: lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00704b138fe27d0a1c38fe2e850a70eac66dffa72bfd5f97b1965865505762436c0ded02f8763d9abb7732f0fb2e510b7f0cbac1185382ae6f07394b2967f08ae02fcf7679c5bcd6"]) 09:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20080) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0x9, 0x0, 0x0, 0x7, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x185) r7 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) close(r7) sendfile(r7, r6, &(0x7f0000000000)=0x4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x1010, r7, 0x0) [ 2932.795313] EXT4-fs (loop6): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2932.848048] EXT4-fs (loop7): Unrecognized mount option "./file0" or missing value [ 2932.848822] EXT4-fs (loop7): failed to parse options in superblock: ./file0 [ 2932.849612] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2932.882700] EXT4-fs (loop7): mounted filesystem without journal. Opts: ./file0; ,errors=continue [ 2932.899301] ISOFS: Unable to identify CD-ROM format. [ 2932.990894] ISOFS: Unable to identify CD-ROM format. [ 2945.635647] syz-executor.1: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 2945.636784] CPU: 1 PID: 16597 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 2945.637339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.637995] Call Trace: [ 2945.638210] dump_stack+0x107/0x167 [ 2945.638505] warn_alloc.cold+0x95/0x18a [ 2945.638827] ? zone_watermark_ok_safe+0x260/0x260 [ 2945.639216] ? queue_oom_reaper+0x86/0x1e0 [ 2945.639567] ? wait_for_completion_io+0x270/0x270 [ 2945.639959] __alloc_pages_slowpath.constprop.0+0x1c80/0x2130 [ 2945.640434] ? lock_acquire+0xf7/0x470 [ 2945.640748] ? warn_alloc+0x190/0x190 [ 2945.641071] __alloc_pages_nodemask+0x51d/0x600 [ 2945.641447] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2945.641936] alloc_pages_current+0x187/0x280 [ 2945.642293] allocate_slab+0x29b/0x380 [ 2945.642608] ___slab_alloc+0x470/0x700 [ 2945.642926] ? io_issue_sqe+0x2492/0x7700 [ 2945.643259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.643675] ? obj_cgroup_charge+0xc6/0x490 [ 2945.644020] ? trace_hardirqs_on+0x5b/0x180 [ 2945.644364] ? io_issue_sqe+0x2492/0x7700 [ 2945.644694] ? kmem_cache_alloc_trace+0x305/0x320 [ 2945.645082] ? io_issue_sqe+0x2492/0x7700 [ 2945.645413] kmem_cache_alloc_trace+0x305/0x320 [ 2945.645787] io_issue_sqe+0x2492/0x7700 [ 2945.646114] ? io_connect+0x610/0x610 [ 2945.646428] ? io_uring_release+0x50/0x50 [ 2945.646756] ? lock_acquire+0x197/0x470 [ 2945.647082] ? find_held_lock+0x2c/0x110 [ 2945.647412] __io_queue_sqe+0x90/0x9d0 [ 2945.647725] ? io_issue_sqe+0x7700/0x7700 [ 2945.648060] ? kmem_cache_alloc_bulk+0x182/0x320 [ 2945.648438] io_submit_sqes+0x4461/0x85c0 [ 2945.648781] ? __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2945.649193] __do_sys_io_uring_enter+0x6b5/0x18c0 [ 2945.649585] ? io_submit_sqes+0x85c0/0x85c0 [ 2945.649937] ? recalibrate_cpu_khz+0x10/0x10 [ 2945.650288] ? ktime_get+0x158/0x1f0 [ 2945.650587] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2945.650932] ? clockevents_program_event+0x131/0x360 [ 2945.651343] ? tick_program_event+0xa8/0x140 [ 2945.651694] ? hrtimer_interrupt+0x771/0x9b0 [ 2945.652051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2945.652467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.652884] do_syscall_64+0x33/0x40 [ 2945.653192] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2945.653603] RIP: 0033:0x7f705a641b19 [ 2945.653905] Code: Unable to access opcode bytes at RIP 0x7f705a641aef. [ 2945.654429] RSP: 002b:00007f7057bb7188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2945.655034] RAX: ffffffffffffffda RBX: 00007f705a754f60 RCX: 00007f705a641b19 [ 2945.655600] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 2945.656164] RBP: 00007f705a69bf6d R08: 0000000000000000 R09: 0000000000000000 [ 2945.656732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2945.657306] R13: 00007ffc5c02555f R14: 00007f7057bb7300 R15: 0000000000022000 [ 2945.657955] Mem-Info: [ 2945.658167] active_anon:20392 inactive_anon:56741 isolated_anon:0 [ 2945.658167] active_file:2 inactive_file:5 isolated_file:0 [ 2945.658167] unevictable:0 dirty:0 writeback:0 [ 2945.658167] slab_reclaimable:8827 slab_unreclaimable:213031 [ 2945.658167] mapped:69652 shmem:112 pagetables:1637 bounce:0 [ 2945.658167] free:2986 free_pcp:189 free_cma:0 [ 2945.660649] Node 0 active_anon:81568kB inactive_anon:226964kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278608kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:4352kB all_unreclaimable? yes [ 2945.662481] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2945.664553] lowmem_reserve[]: 0 1616 1616 1616 [ 2945.664955] Node 0 DMA32 free:5472kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:81568kB inactive_anon:226964kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660480kB mlocked:0kB pagetables:6548kB bounce:0kB free_pcp:756kB local_pcp:508kB free_cma:0kB [ 2945.667239] lowmem_reserve[]: 0 0 0 0 [ 2945.667561] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2945.668632] Node 0 DMA32: 582*4kB (UM) 189*8kB (UM) 52*16kB (UM) 21*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5472kB [ 2945.669786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2945.670470] 136 total pagecache pages [ 2945.670769] 0 pages in swap cache [ 2945.671062] Swap cache stats: add 0, delete 0, find 0/0 [ 2945.671480] Free swap = 0kB [ 2945.671718] Total swap = 0kB [ 2945.671976] 524158 pages RAM [ 2945.672157] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 2945.673073] 0 pages HighMem/MovableOnly [ 2945.673078] 105061 pages reserved [ 2945.673185] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.673194] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.673201] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.678743] CPU: 0 PID: 103 Comm: systemd-journal Not tainted 5.10.214 #1 [ 2945.679936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.681384] Call Trace: [ 2945.681853] dump_stack+0x107/0x167 [ 2945.681917] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.682494] dump_header+0x106/0x655 [ 2945.683121] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.683136] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.683780] oom_kill_process.cold+0x10/0x15 [ 2945.686183] out_of_memory+0x1149/0x1440 [ 2945.686903] ? oom_killer_disable+0x280/0x280 [ 2945.687691] ? mutex_trylock+0x237/0x2b0 [ 2945.688405] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2945.689447] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2945.690487] ? lock_acquire+0xf7/0x470 [ 2945.691173] ? warn_alloc+0x190/0x190 [ 2945.691867] __alloc_pages_nodemask+0x51d/0x600 [ 2945.692674] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2945.693731] ? find_get_entry+0x2c8/0x740 [ 2945.694461] alloc_pages_current+0x187/0x280 [ 2945.695226] __page_cache_alloc+0x2d2/0x360 [ 2945.695981] pagecache_get_page+0x2c7/0xc80 [ 2945.696733] filemap_fault+0x177d/0x2210 [ 2945.697456] ? read_cache_page_gfp+0x30/0x30 [ 2945.698222] ? replace_page_cache_page+0x1200/0x1200 [ 2945.699096] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2945.700013] ext4_filemap_fault+0x87/0xc0 [ 2945.700728] __do_fault+0x113/0x410 [ 2945.701369] handle_mm_fault+0x1e53/0x3500 [ 2945.701955] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.702111] ? __pmd_alloc+0x5e0/0x5e0 [ 2945.702726] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.702740] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.703413] ? vmacache_find+0x55/0x2a0 [ 2945.705678] ? vmacache_update+0xce/0x140 [ 2945.706403] do_user_addr_fault+0x56e/0xc60 [ 2945.707162] exc_page_fault+0xa2/0x1a0 [ 2945.707834] ? asm_exc_page_fault+0x8/0x30 [ 2945.708561] asm_exc_page_fault+0x1e/0x30 [ 2945.709274] RIP: 0033:0x7f3c31dd5116 [ 2945.709918] Code: Unable to access opcode bytes at RIP 0x7f3c31dd50ec. [ 2945.711033] RSP: 002b:00007ffd94fcc810 EFLAGS: 00010293 [ 2945.711956] RAX: 0000000000000001 RBX: 000056265c276360 RCX: 00007f3c31dd5116 [ 2945.713187] RDX: 0000000000000014 RSI: 000056265c27c8e0 RDI: 0000000000000008 [ 2945.714349] RBP: ffffffffffffffff R08: 0000000000000000 R09: 00007ffd94fdc080 [ 2945.715378] R10: 00000000ffffffff R11: 0000000000000293 R12: 0000000000000001 [ 2945.716386] R13: 0000000000000014 R14: 0000000000000000 R15: 0000000000000000 [ 2945.717555] Mem-Info: [ 2945.717972] active_anon:20392 inactive_anon:56741 isolated_anon:0 [ 2945.717972] active_file:2 inactive_file:5 isolated_file:0 [ 2945.717972] unevictable:0 dirty:0 writeback:0 [ 2945.717972] slab_reclaimable:8827 slab_unreclaimable:213031 [ 2945.717972] mapped:69652 shmem:112 pagetables:1637 bounce:0 [ 2945.717972] free:2986 free_pcp:189 free_cma:0 [ 2945.718855] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.722763] Node 0 active_anon:81568kB inactive_anon:226964kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278608kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:4352kB all_unreclaimable? yes [ 2945.723076] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.723084] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.729059] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2945.732775] lowmem_reserve[]: 0 1616 1616 1616 [ 2945.733505] Node 0 DMA32 free:5472kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:81568kB inactive_anon:226964kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660480kB mlocked:0kB pagetables:6548kB bounce:0kB free_pcp:724kB local_pcp:232kB free_cma:0kB [ 2945.737630] lowmem_reserve[]: 0 0 0 0 [ 2945.738241] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2945.740186] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.740276] Node 0 [ 2945.740907] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.740915] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.743335] DMA32: 582*4kB (UM) 189*8kB (UM) 52*16kB (UM) 21*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5472kB [ 2945.745327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2945.746581] 136 total pagecache pages [ 2945.747160] 0 pages in swap cache [ 2945.747669] Swap cache stats: add 0, delete 0, find 0/0 [ 2945.748465] Free swap = 0kB [ 2945.748931] Total swap = 0kB [ 2945.749381] 524158 pages RAM [ 2945.749823] 0 pages HighMem/MovableOnly [ 2945.750420] 105061 pages reserved [ 2945.751011] Unreclaimable slab info: [ 2945.752038] Name Used Total [ 2945.752855] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.752870] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.754129] pid_3 3KB 3KB [ 2945.754755] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.756390] pid_2 263KB 266KB [ 2945.757193] fib6_nodes 28KB 28KB [ 2945.758005] ip6_dst_cache 52KB 52KB [ 2945.758770] RAWv6 189KB 189KB [ 2945.759569] UDPLITEv6 62KB 62KB [ 2945.760374] UDPv6 62KB 62KB [ 2945.761166] tw_sock_TCPv6 7KB 7KB [ 2945.761963] TCPv6 62KB 62KB [ 2945.762740] scsi_sense_cache 8KB 8KB [ 2945.763542] sd_ext_cdb 3KB 3KB [ 2945.764338] virtio_scsi_cmd 16KB 16KB [ 2945.765157] sgpool-128 89KB 89KB [ 2945.765971] sgpool-64 63KB 63KB [ 2945.766730] sgpool-32 283KB 283KB [ 2945.767527] sgpool-16 52KB 52KB [ 2945.767862] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.768310] sgpool-8 67KB 67KB [ 2945.768954] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.768961] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.771863] io_kiocb 268KB 311KB [ 2945.772635] mqueue_inode_cache 62KB 62KB [ 2945.773454] nfs_commit_data 15KB 15KB [ 2945.774240] nfs_write_data 47KB 47KB [ 2945.775034] jbd2_inode 7KB 7KB [ 2945.775812] ext4_system_zone 7KB 7KB [ 2945.776610] ext4_io_end_vec 7KB 7KB [ 2945.777414] ext4_bio_post_read_ctx 15KB 15KB [ 2945.778254] kioctx 31KB 31KB [ 2945.779053] aio_kiocb 7KB 7KB [ 2945.779858] bio-2 4KB 4KB [ 2945.780621] fasync_cache 7KB 7KB [ 2945.780957] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.781427] pid_namespace 7KB 7KB [ 2945.782073] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.782080] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.784956] posix_timers_cache 15KB 15KB [ 2945.785767] rpc_buffers 31KB 31KB [ 2945.786567] rpc_tasks 3KB 3KB [ 2945.787362] UNIX 298KB 320KB [ 2945.788164] UDP-Lite 63KB 63KB [ 2945.788953] tcp_bind_bucket 8KB 8KB [ 2945.789735] xfrm_state 32KB 32KB [ 2945.790503] ip_fib_trie 8KB 8KB [ 2945.791320] ip_fib_alias 15KB 15KB [ 2945.792106] ip_dst_cache 8KB 8KB [ 2945.792904] PING 62KB 62KB [ 2945.793687] RAW 62KB 62KB [ 2945.794475] UDP 283KB 283KB [ 2945.794874] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.795256] tw_sock_TCP 7KB 7KB [ 2945.795885] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.795892] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.798671] request_sock_TCP 7KB 7KB [ 2945.799444] TCP 60KB 60KB [ 2945.800218] hugetlbfs_inode_cache 30KB 30KB [ 2945.801045] bio-1 11KB 11KB [ 2945.801792] eventpoll_pwq 19KB 19KB [ 2945.802562] eventpoll_epi 51KB 51KB [ 2945.803335] inotify_inode_mark 85KB 85KB [ 2945.804152] request_queue 60KB 60KB [ 2945.804957] blkdev_ioc 22KB 22KB [ 2945.805736] bio-0 248KB 248KB [ 2945.806537] biovec-max 1428KB 1428KB [ 2945.807337] biovec-64 315KB 315KB [ 2945.808136] biovec-16 45KB 45KB [ 2945.808856] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 2945.808933] user_namespace 15KB 15KB [ 2945.809562] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 2945.809576] node 0: slabs: 18233, objs: 1166912, free: 0 [ 2945.810362] uid_cache 8KB 8KB [ 2945.812652] dmaengine-unmap-2 4KB 4KB [ 2945.813461] audit_buffer 7KB 7KB [ 2945.814256] skbuff_fclone_cache 68KB 75KB [ 2945.815079] skbuff_head_cache 1140KB 1140KB [ 2945.815883] file_lock_cache 47KB 47KB [ 2945.816654] file_lock_ctx 7KB 7KB [ 2945.817454] fsnotify_mark_connector 44KB 44KB [ 2945.818322] net_namespace 115KB 115KB [ 2945.819122] task_delay_info 87KB 111KB [ 2945.819916] taskstats 69KB 69KB [ 2945.820685] proc_dir_entry 356KB 356KB [ 2945.821487] pde_opener 47KB 47KB [ 2945.822289] seq_file 34KB 56KB [ 2945.823085] sigqueue 78KB 78KB [ 2945.823883] shmem_inode_cache 3516KB 3584KB [ 2945.824656] kernfs_iattrs_cache 223KB 223KB [ 2945.825482] kernfs_node_cache 5180KB 5180KB [ 2945.826278] mnt_cache 219KB 267KB [ 2945.827140] filp 2081KB 3465KB [ 2945.827917] names_cache 6851KB 7348KB [ 2945.828695] hashtab_node 274KB 274KB [ 2945.829478] ebitmap_node 1149KB 1149KB [ 2945.830281] avtab_node 4976KB 4976KB [ 2945.831063] avc_node 31KB 31KB [ 2945.831874] lsm_inode_cache 3491KB 3542KB [ 2945.832635] lsm_file_cache 168KB 252KB [ 2945.833439] key_jar 39KB 39KB [ 2945.834215] uts_namespace 15KB 15KB [ 2945.835015] nsproxy 7KB 7KB [ 2945.835788] vm_area_struct 978KB 1228KB [ 2945.836588] fs_cache 68KB 68KB [ 2945.837367] files_cache 202KB 223KB [ 2945.838168] signal_cache 349KB 432KB [ 2945.838937] sighand_cache 420KB 420KB [ 2945.839719] task_struct 1043KB 1470KB [ 2945.840498] cred_jar 285KB 340KB [ 2945.841338] anon_vma_chain 242KB 295KB [ 2945.842110] anon_vma 307KB 322KB [ 2945.842955] pid 59KB 75KB [ 2945.843699] Acpi-Operand 171KB 202KB [ 2945.844494] Acpi-ParseExt 27KB 27KB [ 2945.845280] Acpi-Parse 233KB 249KB [ 2945.846082] Acpi-State 55KB 70KB [ 2945.846848] Acpi-Namespace 24KB 24KB [ 2945.847620] numa_policy 3KB 3KB [ 2945.848388] trace_event_file 176KB 176KB [ 2945.849207] ftrace_event_field 280KB 280KB [ 2945.849992] pool_workqueue 40KB 40KB [ 2945.850763] task_group 16KB 16KB [ 2945.851541] mm_struct 288KB 346KB [ 2945.852343] vmap_area 444KB 444KB [ 2945.853113] page->ptl 254KB 287KB [ 2945.853906] kmemleak_scan_area 223KB 223KB [ 2945.854659] kmemleak_object 643957KB 643957KB [ 2945.855468] kmalloc-8k 4592KB 4768KB [ 2945.856261] kmalloc-4k 6136KB 7776KB [ 2945.857078] kmalloc-2k 3848KB 4320KB [ 2945.857861] kmalloc-1k 2216KB 3584KB [ 2945.858635] kmalloc-512 24820KB 24820KB [ 2945.859410] kmalloc-256 1186KB 1224KB [ 2945.860210] kmalloc-192 592KB 592KB [ 2945.860992] kmalloc-128 564KB 596KB [ 2945.861777] kmalloc-96 572KB 748KB [ 2945.862559] kmalloc-64 1194KB 1280KB [ 2945.863363] kmalloc-32 72932KB 72932KB [ 2945.864159] kmalloc-16 353KB 356KB [ 2945.864932] kmalloc-8 369KB 370KB [ 2945.865714] kmem_cache_node 47KB 47KB [ 2945.866488] kmem_cache 75KB 75KB [ 2945.867287] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=103,uid=0 [ 2945.870423] Out of memory (oom_kill_allocating_task): Killed process 103 (systemd-journal) total-vm:40132kB, anon-rss:876kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:104kB oom_score_adj:-250 [ 2945.899508] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2945.900473] CPU: 1 PID: 178 Comm: in:imklog Not tainted 5.10.214 #1 [ 2945.900992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.901655] Call Trace: [ 2945.901870] dump_stack+0x107/0x167 [ 2945.902178] dump_header+0x106/0x655 [ 2945.902487] oom_kill_process.cold+0x10/0x15 [ 2945.902845] out_of_memory+0x1149/0x1440 [ 2945.903179] ? oom_killer_disable+0x280/0x280 [ 2945.903548] ? mutex_trylock+0x237/0x2b0 [ 2945.903874] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2945.904348] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2945.904822] ? lock_acquire+0xf7/0x470 [ 2945.905148] ? warn_alloc+0x190/0x190 [ 2945.905468] __alloc_pages_nodemask+0x51d/0x600 [ 2945.905842] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2945.906330] ? find_get_entry+0x2c8/0x740 [ 2945.906671] alloc_pages_current+0x187/0x280 [ 2945.907030] __page_cache_alloc+0x2d2/0x360 [ 2945.907378] pagecache_get_page+0x2c7/0xc80 [ 2945.907735] filemap_fault+0x177d/0x2210 [ 2945.908069] ? read_cache_page_gfp+0x30/0x30 [ 2945.908424] ? replace_page_cache_page+0x1200/0x1200 [ 2945.908833] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2945.909267] ext4_filemap_fault+0x87/0xc0 [ 2945.909604] __do_fault+0x113/0x410 [ 2945.909900] handle_mm_fault+0x1e53/0x3500 [ 2945.910242] ? fsnotify+0xf50/0xf50 [ 2945.910535] ? __pmd_alloc+0x5e0/0x5e0 [ 2945.910853] ? vmacache_find+0x55/0x2a0 [ 2945.911176] ? vmacache_update+0xce/0x140 [ 2945.911516] do_user_addr_fault+0x56e/0xc60 [ 2945.911867] exc_page_fault+0xa2/0x1a0 [ 2945.912179] ? asm_exc_page_fault+0x8/0x30 [ 2945.912516] asm_exc_page_fault+0x1e/0x30 [ 2945.912849] RIP: 0033:0x7f81e1eb108c [ 2945.913156] Code: Unable to access opcode bytes at RIP 0x7f81e1eb1062. [ 2945.913680] RSP: 002b:00007f81e144d4d0 EFLAGS: 00010246 [ 2945.914107] RAX: 00000000000000d8 RBX: 0000000000000000 RCX: 00007f81e1eb108c [ 2945.914677] RDX: 0000000000001fa0 RSI: 00007f81e144dd00 RDI: 0000000000000005 [ 2945.915251] RBP: 000055b0d23204c0 R08: 0000000000000000 R09: 000055b0d231ce88 [ 2945.915823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81e144dd00 [ 2945.916401] R13: 0000000000001fa0 R14: 00007f81e144dd00 R15: 00007f81e144dd3b [ 2945.917014] Mem-Info: [ 2945.917228] active_anon:20392 inactive_anon:56531 isolated_anon:0 [ 2945.917228] active_file:2 inactive_file:5 isolated_file:0 [ 2945.917228] unevictable:0 dirty:0 writeback:0 [ 2945.917228] slab_reclaimable:8827 slab_unreclaimable:213052 [ 2945.917228] mapped:69652 shmem:112 pagetables:1606 bounce:0 [ 2945.917228] free:3186 free_pcp:228 free_cma:0 [ 2945.919709] Node 0 active_anon:81568kB inactive_anon:226124kB active_file:8kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278608kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:4320kB all_unreclaimable? no [ 2945.921533] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2945.923614] lowmem_reserve[]: 0 1616 1616 1616 [ 2945.924014] Node 0 DMA32 free:6272kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:81568kB inactive_anon:226124kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660480kB mlocked:0kB pagetables:6424kB bounce:0kB free_pcp:912kB local_pcp:664kB free_cma:0kB [ 2945.926294] lowmem_reserve[]: 0 0 0 0 [ 2945.926617] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2945.927698] Node 0 DMA32: 698*4kB (UM) 205*8kB (UM) 53*16kB (UM) 24*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6176kB [ 2945.928843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2945.929519] 136 total pagecache pages [ 2945.929837] 0 pages in swap cache [ 2945.930111] Swap cache stats: add 0, delete 0, find 0/0 [ 2945.930527] Free swap = 0kB [ 2945.930770] Total swap = 0kB [ 2945.931030] 524158 pages RAM [ 2945.931272] 0 pages HighMem/MovableOnly [ 2945.931588] 105061 pages reserved [ 2945.931880] Unreclaimable slab info: [ 2945.932177] Name Used Total [ 2945.932614] pid_3 3KB 3KB [ 2945.933065] pid_2 263KB 266KB [ 2945.933495] fib6_nodes 28KB 28KB [ 2945.933934] ip6_dst_cache 52KB 52KB [ 2945.934362] RAWv6 189KB 189KB [ 2945.934783] UDPLITEv6 62KB 62KB [ 2945.935228] UDPv6 62KB 62KB [ 2945.935652] tw_sock_TCPv6 7KB 7KB [ 2945.936092] TCPv6 62KB 62KB [ 2945.936517] scsi_sense_cache 8KB 8KB [ 2945.936955] sd_ext_cdb 3KB 3KB [ 2945.937384] virtio_scsi_cmd 16KB 16KB [ 2945.937818] sgpool-128 89KB 89KB [ 2945.938253] sgpool-64 63KB 63KB [ 2945.938678] sgpool-32 283KB 283KB [ 2945.939117] sgpool-16 52KB 52KB [ 2945.939543] sgpool-8 67KB 67KB [ 2945.939988] io_kiocb 268KB 311KB [ 2945.940416] mqueue_inode_cache 62KB 62KB [ 2945.940860] nfs_commit_data 15KB 15KB [ 2945.941293] nfs_write_data 47KB 47KB [ 2945.941718] jbd2_inode 7KB 7KB [ 2945.942161] ext4_system_zone 7KB 7KB [ 2945.942586] ext4_io_end_vec 7KB 7KB [ 2945.943029] ext4_bio_post_read_ctx 15KB 15KB [ 2945.943492] kioctx 31KB 31KB [ 2945.943939] aio_kiocb 7KB 7KB [ 2945.944365] bio-2 4KB 4KB [ 2945.944793] fasync_cache 7KB 7KB [ 2945.945241] pid_namespace 7KB 7KB [ 2945.945666] posix_timers_cache 15KB 15KB [ 2945.946116] rpc_buffers 31KB 31KB [ 2945.946541] rpc_tasks 3KB 3KB [ 2945.946984] UNIX 298KB 320KB [ 2945.947412] UDP-Lite 63KB 63KB [ 2945.947858] tcp_bind_bucket 8KB 8KB [ 2945.948286] xfrm_state 32KB 32KB [ 2945.948711] ip_fib_trie 8KB 8KB [ 2945.949164] ip_fib_alias 15KB 15KB [ 2945.949592] ip_dst_cache 8KB 8KB [ 2945.950131] PING 62KB 62KB [ 2945.950539] RAW 62KB 62KB [ 2945.950961] UDP 283KB 283KB [ 2945.951370] tw_sock_TCP 7KB 7KB [ 2945.951778] request_sock_TCP 7KB 7KB [ 2945.952200] TCP 60KB 60KB [ 2945.952607] hugetlbfs_inode_cache 30KB 30KB [ 2945.953060] bio-1 11KB 11KB [ 2945.953467] eventpoll_pwq 19KB 19KB [ 2945.953889] eventpoll_epi 51KB 51KB [ 2945.954297] inotify_inode_mark 85KB 85KB [ 2945.954710] request_queue 60KB 60KB [ 2945.955135] blkdev_ioc 22KB 22KB [ 2945.955543] bio-0 248KB 248KB [ 2945.955966] biovec-max 1428KB 1428KB [ 2945.956375] biovec-64 315KB 315KB [ 2945.956785] biovec-16 45KB 45KB [ 2945.957211] user_namespace 15KB 15KB [ 2945.957619] uid_cache 8KB 8KB [ 2945.958039] dmaengine-unmap-2 4KB 4KB [ 2945.958449] audit_buffer 7KB 7KB [ 2945.958874] skbuff_fclone_cache 68KB 75KB [ 2945.959294] skbuff_head_cache 1151KB 1151KB [ 2945.959700] file_lock_cache 47KB 47KB [ 2945.960123] file_lock_ctx 7KB 7KB [ 2945.960530] fsnotify_mark_connector 44KB 44KB [ 2945.960996] net_namespace 115KB 115KB [ 2945.961404] task_delay_info 87KB 111KB [ 2945.961815] taskstats 69KB 69KB [ 2945.962235] proc_dir_entry 356KB 356KB [ 2945.962644] pde_opener 47KB 47KB [ 2945.963067] seq_file 34KB 56KB [ 2945.963474] sigqueue 78KB 78KB [ 2945.963897] shmem_inode_cache 3516KB 3584KB [ 2945.964305] kernfs_iattrs_cache 223KB 223KB [ 2945.964726] kernfs_node_cache 5180KB 5180KB [ 2945.965155] mnt_cache 219KB 267KB [ 2945.965607] filp 2081KB 3465KB [ 2945.966034] names_cache 6851KB 7348KB [ 2945.966443] hashtab_node 274KB 274KB [ 2945.966865] ebitmap_node 1149KB 1149KB [ 2945.967273] avtab_node 4976KB 4976KB [ 2945.967679] avc_node 31KB 31KB [ 2945.968106] lsm_inode_cache 3491KB 3542KB [ 2945.968516] lsm_file_cache 168KB 252KB [ 2945.968938] key_jar 39KB 39KB [ 2945.969351] uts_namespace 15KB 15KB [ 2945.969764] nsproxy 7KB 7KB [ 2945.970209] vm_area_struct 978KB 1228KB [ 2945.970615] fs_cache 68KB 68KB [ 2945.971039] files_cache 202KB 223KB [ 2945.971448] signal_cache 349KB 432KB [ 2945.971873] sighand_cache 420KB 420KB [ 2945.972288] task_struct 1043KB 1470KB [ 2945.972701] cred_jar 285KB 340KB [ 2945.973140] anon_vma_chain 242KB 295KB [ 2945.973550] anon_vma 272KB 306KB [ 2945.973973] pid 59KB 75KB [ 2945.974382] Acpi-Operand 171KB 202KB [ 2945.974790] Acpi-ParseExt 27KB 27KB [ 2945.975218] Acpi-Parse 233KB 249KB [ 2945.975625] Acpi-State 55KB 70KB [ 2945.976044] Acpi-Namespace 24KB 24KB [ 2945.976451] numa_policy 3KB 3KB [ 2945.976874] trace_event_file 176KB 176KB [ 2945.977287] ftrace_event_field 280KB 280KB [ 2945.977700] pool_workqueue 40KB 40KB [ 2945.978124] task_group 16KB 16KB [ 2945.978530] mm_struct 288KB 346KB [ 2945.978954] vmap_area 444KB 444KB [ 2945.979363] page->ptl 254KB 287KB [ 2945.979772] kmemleak_scan_area 223KB 223KB [ 2945.980202] kmemleak_object 644629KB 644629KB [ 2945.980619] kmalloc-8k 4592KB 4768KB [ 2945.981061] kmalloc-4k 6136KB 7776KB [ 2945.981475] kmalloc-2k 3848KB 4320KB [ 2945.981912] kmalloc-1k 2216KB 3584KB [ 2945.982318] kmalloc-512 24876KB 24876KB [ 2945.982728] kmalloc-256 1186KB 1224KB [ 2945.983150] kmalloc-192 592KB 592KB [ 2945.983562] kmalloc-128 564KB 596KB [ 2945.983996] kmalloc-96 572KB 748KB [ 2945.984408] kmalloc-64 1194KB 1280KB [ 2945.984836] kmalloc-32 73044KB 73044KB [ 2945.985252] kmalloc-16 353KB 356KB [ 2945.985661] kmalloc-8 369KB 370KB [ 2945.986083] kmem_cache_node 47KB 47KB [ 2945.986489] kmem_cache 75KB 75KB [ 2945.986921] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=178,uid=0 [ 2945.988462] Out of memory (oom_kill_allocating_task): Killed process 174 (rsyslogd) total-vm:220876kB, anon-rss:984kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2946.242663] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2946.243446] CPU: 1 PID: 256 Comm: syz-fuzzer Not tainted 5.10.214 #1 [ 2946.243939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2946.244579] Call Trace: [ 2946.244786] dump_stack+0x107/0x167 [ 2946.245082] dump_header+0x106/0x655 [ 2946.245373] oom_kill_process.cold+0x10/0x15 [ 2946.245717] out_of_memory+0x1149/0x1440 [ 2946.246040] ? oom_killer_disable+0x280/0x280 [ 2946.246391] ? mutex_trylock+0x237/0x2b0 [ 2946.246705] ? __alloc_pages_slowpath.constprop.0+0xb0e/0x2130 [ 2946.247167] __alloc_pages_slowpath.constprop.0+0x1b25/0x2130 [ 2946.247627] ? lock_acquire+0xf7/0x470 [ 2946.247931] ? warn_alloc+0x190/0x190 [ 2946.248240] __alloc_pages_nodemask+0x51d/0x600 [ 2946.248602] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2946.249071] ? find_get_entry+0x2c8/0x740 [ 2946.249398] alloc_pages_current+0x187/0x280 [ 2946.249740] __page_cache_alloc+0x2d2/0x360 [ 2946.250081] pagecache_get_page+0x2c7/0xc80 [ 2946.250420] filemap_fault+0x177d/0x2210 [ 2946.250741] ? read_cache_page_gfp+0x30/0x30 [ 2946.251091] ? replace_page_cache_page+0x1200/0x1200 [ 2946.251484] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2946.251892] ext4_filemap_fault+0x87/0xc0 [ 2946.252216] __do_fault+0x113/0x410 [ 2946.252504] handle_mm_fault+0x1e53/0x3500 [ 2946.252835] ? find_held_lock+0x2c/0x110 [ 2946.253157] ? __pmd_alloc+0x5e0/0x5e0 [ 2946.253466] ? vmacache_find+0x55/0x2a0 [ 2946.253782] do_user_addr_fault+0x56e/0xc60 [ 2946.254120] exc_page_fault+0xa2/0x1a0 [ 2946.254424] ? asm_exc_page_fault+0x8/0x30 [ 2946.254751] asm_exc_page_fault+0x1e/0x30 [ 2946.255071] RIP: 0033:0x4660f0 [ 2946.255325] Code: Unable to access opcode bytes at RIP 0x4660c6. [ 2946.255793] RSP: 002b:000000c00003fed0 EFLAGS: 00010246 [ 2946.256205] RAX: 000000c000000480 RBX: 00000000289aa774 RCX: 0000000001f20e78 [ 2946.256752] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 2946.257312] RBP: 000000c00003ff00 R08: 0000000000000000 R09: 0000000000000000 [ 2946.257859] R10: 000000c00003feb8 R11: 0000000000000206 R12: 0000000000438880 [ 2946.258409] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 2946.259066] Mem-Info: [ 2946.259271] active_anon:20390 inactive_anon:56180 isolated_anon:0 [ 2946.259271] active_file:10 inactive_file:0 isolated_file:0 [ 2946.259271] unevictable:0 dirty:0 writeback:0 [ 2946.259271] slab_reclaimable:8825 slab_unreclaimable:213397 [ 2946.259271] mapped:69651 shmem:112 pagetables:1598 bounce:0 [ 2946.259271] free:3305 free_pcp:61 free_cma:0 [ 2946.261679] Node 0 active_anon:81560kB inactive_anon:224720kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278604kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:4192kB all_unreclaimable? yes [ 2946.263424] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2946.265403] lowmem_reserve[]: 0 1616 1616 1616 [ 2946.265774] Node 0 DMA32 free:6748kB min:5116kB low:6768kB high:8420kB reserved_highatomic:2048KB active_anon:81560kB inactive_anon:224720kB active_file:0kB inactive_file:464kB unevictable:0kB writepending:0kB present:2080640kB managed:1660480kB mlocked:0kB pagetables:6392kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 2946.267966] lowmem_reserve[]: 0 0 0 0 [ 2946.268278] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6472kB [ 2946.269309] Node 0 DMA32: 873*4kB (UM) 236*8kB (UME) 61*16kB (UMH) 7*32kB (UM) 7*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7028kB [ 2946.270428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2946.271086] 138 total pagecache pages [ 2946.271377] 0 pages in swap cache [ 2946.271644] Swap cache stats: add 0, delete 0, find 0/0 [ 2946.272063] Free swap = 0kB [ 2946.272297] Total swap = 0kB [ 2946.272532] 524158 pages RAM [ 2946.272766] 0 pages HighMem/MovableOnly [ 2946.273085] 105061 pages reserved [ 2946.273350] Unreclaimable slab info: [ 2946.273635] Name Used Total [ 2946.274068] pid_3 3KB 3KB [ 2946.274480] pid_2 263KB 266KB [ 2946.274903] fib6_nodes 28KB 28KB [ 2946.275314] ip6_dst_cache 52KB 52KB [ 2946.275723] RAWv6 189KB 189KB [ 2946.276144] UDPLITEv6 62KB 62KB [ 2946.276553] UDPv6 62KB 62KB [ 2946.276973] tw_sock_TCPv6 7KB 7KB [ 2946.277384] TCPv6 62KB 62KB [ 2946.277797] scsi_sense_cache 8KB 8KB [ 2946.278216] sd_ext_cdb 3KB 3KB [ 2946.278626] virtio_scsi_cmd 16KB 16KB [ 2946.279049] sgpool-128 89KB 89KB [ 2946.279459] sgpool-64 63KB 63KB [ 2946.279879] sgpool-32 330KB 330KB [ 2946.280290] sgpool-16 52KB 52KB [ 2946.280694] sgpool-8 67KB 67KB [ 2946.281122] io_kiocb 268KB 311KB [ 2946.281532] mqueue_inode_cache 62KB 62KB [ 2946.281962] nfs_commit_data 15KB 15KB [ 2946.282371] nfs_write_data 47KB 47KB [ 2946.282782] jbd2_inode 7KB 7KB [ 2946.283203] ext4_system_zone 7KB 7KB [ 2946.283612] ext4_io_end_vec 7KB 7KB [ 2946.284034] ext4_bio_post_read_ctx 15KB 15KB [ 2946.284475] kioctx 31KB 31KB [ 2946.284894] aio_kiocb 7KB 7KB [ 2946.285311] bio-2 4KB 4KB [ 2946.285718] fasync_cache 7KB 7KB [ 2946.286143] pid_namespace 7KB 7KB [ 2946.286551] posix_timers_cache 15KB 15KB [ 2946.286980] rpc_buffers 31KB 31KB [ 2946.287387] rpc_tasks 3KB 3KB [ 2946.287797] UNIX 298KB 320KB [ 2946.288218] UDP-Lite 63KB 63KB [ 2946.288628] tcp_bind_bucket 8KB 8KB [ 2946.289056] xfrm_state 32KB 32KB [ 2946.289466] ip_fib_trie 8KB 8KB [ 2946.289887] ip_fib_alias 15KB 15KB [ 2946.290297] ip_dst_cache 8KB 8KB [ 2946.290705] PING 62KB 62KB [ 2946.291128] RAW 62KB 62KB [ 2946.291539] UDP 283KB 283KB [ 2946.291960] tw_sock_TCP 7KB 7KB [ 2946.292369] request_sock_TCP 7KB 7KB [ 2946.292778] TCP 60KB 60KB [ 2946.293205] hugetlbfs_inode_cache 30KB 30KB [ 2946.293644] bio-1 11KB 11KB [ 2946.294066] eventpoll_pwq 19KB 19KB [ 2946.294480] eventpoll_epi 51KB 51KB [ 2946.294903] inotify_inode_mark 85KB 85KB [ 2946.295320] request_queue 60KB 60KB [ 2946.295728] blkdev_ioc 22KB 22KB [ 2946.296150] bio-0 264KB 264KB [ 2946.296697] biovec-max 1428KB 1428KB [ 2946.297151] biovec-64 362KB 362KB [ 2946.297576] biovec-16 48KB 48KB [ 2946.298025] user_namespace 15KB 15KB [ 2946.298451] uid_cache 8KB 8KB [ 2946.298898] dmaengine-unmap-2 4KB 4KB [ 2946.299322] audit_buffer 7KB 7KB [ 2946.299752] skbuff_fclone_cache 68KB 75KB [ 2946.300204] skbuff_head_cache 1181KB 1181KB [ 2946.300638] file_lock_cache 47KB 47KB [ 2946.301078] file_lock_ctx 7KB 7KB [ 2946.301510] fsnotify_mark_connector 44KB 44KB [ 2946.301991] net_namespace 115KB 115KB [ 2946.302427] task_delay_info 87KB 111KB [ 2946.302866] taskstats 69KB 69KB [ 2946.303300] proc_dir_entry 356KB 356KB [ 2946.303725] pde_opener 47KB 47KB [ 2946.304172] seq_file 34KB 56KB [ 2946.304596] sigqueue 78KB 78KB [ 2946.305048] shmem_inode_cache 3516KB 3584KB [ 2946.305473] kernfs_iattrs_cache 223KB 223KB [ 2946.305929] kernfs_node_cache 5180KB 5180KB [ 2946.306352] mnt_cache 219KB 267KB [ 2946.306810] filp 1999KB 3450KB [ 2946.307251] names_cache 6226KB 6723KB [ 2946.307684] hashtab_node 274KB 274KB [ 2946.308120] ebitmap_node 1149KB 1149KB [ 2946.308550] avtab_node 4976KB 4976KB [ 2946.308995] avc_node 31KB 31KB [ 2946.309432] lsm_inode_cache 3491KB 3542KB [ 2946.309871] lsm_file_cache 168KB 252KB [ 2946.310308] key_jar 39KB 39KB [ 2946.310733] uts_namespace 15KB 15KB [ 2946.311178] nsproxy 7KB 7KB [ 2946.311610] vm_area_struct 978KB 1228KB [ 2946.312059] fs_cache 68KB 68KB [ 2946.312485] files_cache 202KB 223KB [ 2946.312928] signal_cache 349KB 432KB [ 2946.313356] sighand_cache 420KB 420KB [ 2946.313791] task_struct 1043KB 1470KB [ 2946.314234] cred_jar 285KB 340KB [ 2946.314669] anon_vma_chain 242KB 295KB [ 2946.315105] anon_vma 272KB 306KB [ 2946.315536] pid 59KB 75KB [ 2946.315977] Acpi-Operand 171KB 202KB [ 2946.316402] Acpi-ParseExt 27KB 27KB [ 2946.316842] Acpi-Parse 233KB 249KB [ 2946.317280] Acpi-State 55KB 70KB [ 2946.317707] Acpi-Namespace 24KB 24KB [ 2946.318148] numa_policy 3KB 3KB [ 2946.318574] trace_event_file 176KB 176KB [ 2946.319016] ftrace_event_field 280KB 280KB [ 2946.319449] pool_workqueue 40KB 40KB [ 2946.319902] task_group 16KB 16KB [ 2946.320324] mm_struct 288KB 346KB [ 2946.320756] vmap_area 444KB 444KB [ 2946.321202] page->ptl 254KB 287KB [ 2946.321637] kmemleak_scan_area 223KB 223KB [ 2946.322081] kmemleak_object 645510KB 645510KB [ 2946.322517] kmalloc-8k 4592KB 4768KB [ 2946.322965] kmalloc-4k 6024KB 7776KB [ 2946.323401] kmalloc-2k 3848KB 4320KB [ 2946.323842] kmalloc-1k 2214KB 3584KB [ 2946.324272] kmalloc-512 25004KB 25004KB [ 2946.324701] kmalloc-256 1186KB 1224KB [ 2946.325146] kmalloc-192 592KB 592KB [ 2946.325581] kmalloc-128 564KB 596KB [ 2946.326034] kmalloc-96 572KB 748KB [ 2946.326471] kmalloc-64 1197KB 1280KB [ 2946.326912] kmalloc-32 73152KB 73152KB [ 2946.327345] kmalloc-16 353KB 356KB [ 2946.327778] kmalloc-8 369KB 370KB [ 2946.328230] kmem_cache_node 47KB 47KB [ 2946.328660] kmem_cache 75KB 75KB [ 2946.329117] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=256,uid=0 [ 2946.330419] Out of memory (oom_kill_allocating_task): Killed process 255 (syz-fuzzer) total-vm:1241364kB, anon-rss:272256kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:944kB oom_score_adj:0 [ 2946.592013] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 2946.621487] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 2946.736202] systemd[1]: systemd-journald.service: Consumed 9.110s CPU time. [ 2946.751054] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 2946.754148] systemd[1]: rsyslog.service: Failed with result 'oom-kill'. [ 2946.819467] systemd[1]: rsyslog.service: Consumed 1.554s CPU time. [ 2946.899670] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 2946.998378] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 2947.098072] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 2947.109270] systemd[1]: ssh.service: Failed with result 'oom-kill'. [ 2947.110358] systemd[1]: ssh.service: Unit process 249 (sshd) remains running after unit stopped. [ 2947.111349] systemd[1]: ssh.service: Unit process 255 (syz-fuzzer) remains running after unit stopped. [ 2947.128783] systemd[1]: ssh.service: Consumed 41min 55.269s CPU time. [ 2947.144316] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 1. [ 2947.146254] systemd[1]: Stopped System Logging Service. [ 2947.146937] systemd[1]: rsyslog.service: Consumed 1.554s CPU time. [ 2947.199648] systemd[1]: Starting System Logging Service... [ 2947.243327] systemd[1]: ssh.service: Scheduled restart job, restart counter is at 1. [ 2947.246030] systemd[1]: Stopped OpenBSD Secure Shell server. [ 2947.247004] systemd[1]: ssh.service: Consumed 41min 55.283s CPU time. [ 2947.250105] systemd[1]: ssh.service: Found left-over process 249 (sshd) in control group while starting unit. Ignoring. [ 2947.250999] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 2947.252076] systemd[1]: ssh.service: Found left-over process 255 (syz-fuzzer) in control group while starting unit. Ignoring. [ 2947.259283] systemd[1]: This usually indicates unclean termination of a previous run, or service implementation deficiencies. [ 2947.301080] systemd[1]: Starting OpenBSD Secure Shell server... [ 2947.459012] oom_reaper: reaped process 16597 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2947.679780] systemd[1]: Started Load/Save RF Kill Switch Status. [ 2947.752004] systemd[1]: Started System Logging Service. [ 2947.807070] systemd[1]: systemd-journal-flush.service: Succeeded. [ 2947.820614] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 2947.821616] systemd[1]: Stopped Journal Service. [ 2947.822247] systemd[1]: systemd-journald.service: Consumed 9.110s CPU time. [ 2947.878290] systemd[1]: Starting Journal Service... [ 2948.060900] systemd-journald[16640]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 2948.111692] systemd[1]: Started OpenBSD Secure Shell server. [ 2948.549471] systemd[1]: Started Journal Service. [ 2948.633671] systemd-journald[16640]: Received client request to flush runtime journal. VM DIAGNOSIS: 09:19:54 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffed1003fe9600 RCX=0000000000000006 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffed1003fe95d0 RBP=0000000000001000 RSP=ffff88802b6d76b0 R8 =ffffed1003fe9400 R9 =ffffed1003fe9400 R10=fffff940000ffa56 R11=0000000000000001 R12=ffffea00007fd2b4 R13=0000000000000000 R14=0000000000112cca R15=dffffc0000000000 RIP=ffffffff820275f4 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fca3427f900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fca34398000 CR3=0000000048a5c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00007fca3469300000007fca346948c0 XMM06=00007fca346942f000007fca347f9950 XMM07=00007fca34693cf000007fca34693760 XMM08=00007fca3469300000007fca347f9950 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000007 RCX=ffffffff81273c28 RDX=1ffff11007e40128 RSI=0000000000000008 RDI=ffff88803f200944 RBP=1ffff1100941fe7d RSP=ffff88804a0ff3d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff84ff8b60 R13=0000000000000000 R14=ffff88803f200940 R15=ffff88803f200000 RIP=ffffffff81273d3e RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7057bb7700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f142b7d08e0 CR3=0000000047bee000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000